FltMgr inf error

I was wondering why an error is thrown if I unload a minifilter, delete
it’s registry keys, delete it’s image - then right click it’s inf file
in explorer and tell it to install the new version. The inf remains
unchanged between builds; the old reg keys and image are gone.

If I don’t delete the reg keys, there is NO problem. Why does the system
get cranky over reg settings for an UNLOADED + deleted driver being removed?

This is no big deal, I simply learned not to mess with the reg keys…
I can’t find anything in the ddk that speaks to this… Does this happen
with INF’s for other driver types?

Just curious.

Matt

P.S. w2k sp4 urp1

I apologize, I left out a few things…

First, the error message is “Installation Failed”, there are no further
details.

Second, to reproduce this behavior:

  1. build the minifilter scanner
  2. copy the scanner inf file to where the scanner.sys is located. (or
    vise versa)
  3. right click the scanner inf file and select ‘install’
  4. open a command prompt and use “fltmc load scanner”
  5. then unload the filter: “fltmc unload scanner”
  6. open regedit to ////currentcontrolset and delete “scanner” and all
    it’s entries
  7. open ////“system32/drivers” and delete scanner.sys
  8. go back to the scanner inf file, and right click it again and select
    ‘install’.
  9. Error occurs…

MM wrote:

I was wondering why an error is thrown if I unload a minifilter,
delete it’s registry keys, delete it’s image - then right click it’s
inf file in explorer and tell it to install the new version. The inf
remains unchanged between builds; the old reg keys and image are gone.

If I don’t delete the reg keys, there is NO problem. Why does the
system get cranky over reg settings for an UNLOADED + deleted driver
being removed?

This is no big deal, I simply learned not to mess with the reg
keys… I can’t find anything in the ddk that speaks to this… Does
this happen with INF’s for other driver types?

Just curious.

Matt

P.S. w2k sp4 urp1


Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17

You are currently subscribed to ntfsd as: xxxxx@comcast.net
To unsubscribe send a blank email to xxxxx@lists.osr.com

Have you tried to invoke the DefaultUninstall section of scanner.inf rather
than meddling in the system area?

“MM” wrote in message news:xxxxx@ntfsd…
>I was wondering why an error is thrown if I unload a minifilter, delete
>it’s registry keys, delete it’s image - then right click it’s inf file in
>explorer and tell it to install the new version. The inf remains unchanged
>between builds; the old reg keys and image are gone.
>
> If I don’t delete the reg keys, there is NO problem. Why does the system
> get cranky over reg settings for an UNLOADED + deleted driver being
> removed?
>
> This is no big deal, I simply learned not to mess with the reg keys… I
> can’t find anything in the ddk that speaks to this… Does this happen
> with INF’s for other driver types?
>
> Just curious.
>
> Matt
>
> P.S. w2k sp4 urp1
>
>
>

I’m guessing that this may be due to the Service Contol Manager not liking
the entry for the service getting removed from under its nose.

  • Danilo

-----Original Message-----
Sent: Sunday, April 02, 2006 7:14 AM
To: Windows File Systems Devs Interest List
Subject: Re: [ntfsd] FltMgr inf error

I apologize, I left out a few things…

First, the error message is “Installation Failed”, there are no further
details.

Second, to reproduce this behavior:

  1. build the minifilter scanner
  2. copy the scanner inf file to where the scanner.sys is located. (or vise
    versa) 3. right click the scanner inf file and select ‘install’
  3. open a command prompt and use “fltmc load scanner”
  4. then unload the filter: “fltmc unload scanner”
  5. open regedit to ////currentcontrolset and delete “scanner” and all it’s
    entries 7. open ////“system32/drivers” and delete scanner.sys 8. go back to
    the scanner inf file, and right click it again and select ‘install’.
  6. Error occurs…

MM wrote:

I was wondering why an error is thrown if I unload a minifilter,
delete it’s registry keys, delete it’s image - then right click it’s
inf file in explorer and tell it to install the new version. The inf
remains unchanged between builds; the old reg keys and image are gone.

If I don’t delete the reg keys, there is NO problem. Why does the
system get cranky over reg settings for an UNLOADED + deleted driver
being removed?

This is no big deal, I simply learned not to mess with the reg
keys… I can’t find anything in the ddk that speaks to this… Does
this happen with INF’s for other driver types?

Just curious.

Matt

P.S. w2k sp4 urp1

Hey Lyndon,

When invoking the DefaultUnistall section of the inf it works fine, I
was just curious if anyone knew why the method
I described failed. I just found this behaviour interesting.

From digging threw the system, I can’t find anything that has a handle
to the reg data. Since the driver is stopped,
I don’t see why the SCM would be holding onto anything…

This looks like a bug too me (or it’s time to format and rebuild my test
machine).

Thanks,

Matt

Lyndon J. Clarke wrote:

Have you tried to invoke the DefaultUninstall section of scanner.inf rather
than meddling in the system area?

“MM” wrote in message news:xxxxx@ntfsd…
>
>
>>I was wondering why an error is thrown if I unload a minifilter, delete
>>it’s registry keys, delete it’s image - then right click it’s inf file in
>>explorer and tell it to install the new version. The inf remains unchanged
>>between builds; the old reg keys and image are gone.
>>
>>If I don’t delete the reg keys, there is NO problem. Why does the system
>>get cranky over reg settings for an UNLOADED + deleted driver being
>>removed?
>>
>>This is no big deal, I simply learned not to mess with the reg keys… I
>>can’t find anything in the ddk that speaks to this… Does this happen
>>with INF’s for other driver types?
>>
>>Just curious.
>>
>>Matt
>>
>>P.S. w2k sp4 urp1
>>
>>
>>
>>
>>
>
>
>
>—
>Questions? First check the IFS FAQ at https://www.osronline.com/article.cfm?id=17
>
>You are currently subscribed to ntfsd as: xxxxx@comcast.net
>To unsubscribe send a blank email to xxxxx@lists.osr.com
>
>
>