fullPathName=C:\a.txt:Raec25ph4sudbf0hAaq5ehw3Nf:$DATA

I am modifying the Filemon source and get the above filename?
Why does this happen?

It’s a typical case when Explorer tries to read/write file
“information”, the one you find on the Properties tab, only for NTFS
drives, like creator, description etc.

Regards, Dejan.

Eric Chan wrote:

I am modifying the Filemon source and get the above filename?
Why does this happen?


You are currently subscribed to ntfsd as: xxxxx@alfasp.com
To unsubscribe send a blank email to %%email.unsub%%


Kind regards, Dejan M. www.alfasp.com
E-mail: xxxxx@alfasp.com ICQ#: 56570367
Alfa File Monitor - File monitoring library for Win32 developers.
Alfa File Protector - File protection and hiding library for Win32
developers.
Alfa Registry Monitor - Registry monitoring library for Win32
developers.
Alfa Registry Protector - Registry protection library for Win32
developers.

Hi Eric,
Where do you see the (invalid) file name? Is it a counted unicode/asni string (UNICODE_STRING or ANSI_STRING)? Those are not necessarily NULL terminated.
Regards,
Manoj
Eric Chan wrote: I am modifying the Filemon source and get the above filename?
Why does this happen?


You are currently subscribed to ntfsd as: xxxxx@yahoo.com
To unsubscribe send a blank email to %%email.unsub%%

-----------------------------------
Manoj Paul Joseph,
Master of Computer Applications (final year student),
School of Computer Science and Engineering,
Anna University,
Chennai (Madras),
India.

---------------------------------
Download Yahoo! Score Tracker for live cricket scores on your desktop

Hi Eric,
Where do you see the (invalid) file name? Is it a counted unicode/asni string (UNICODE_STRING or ANSI_STRING)? Those are not necessarily NULL terminated.
Regards,
Manoj
Eric Chan wrote: I am modifying the Filemon source and get the above filename?
Why does this happen?


You are currently subscribed to ntfsd as: xxxxx@yahoo.com
To unsubscribe send a blank email to %%email.unsub%%

-----------------------------------
Manoj Paul Joseph,
Master of Computer Applications (final year student),
School of Computer Science and Engineering,
Anna University,
Chennai (Madras),
India.

---------------------------------
Download Yahoo! Score Tracker for live cricket scores on your desktop

Eric Chan,

I am modifying the Filemon source and get the above filename?
Why does this happen?

Perhaps because the file name string is not followed by a “NULL”.

========================
Matt Wu
http://sys.xiloo.com