Loaded Module list

NTDEV
1

Hi all,

I made a small driver which registers a notification callback using the PsSetLoadImageNotifyRoutine function. It works fine and I’m correctly notified. But there is something strange.

I’m notified for these images :

  • \SystemRoot\system32\DRIVERS\USBD.SYS
  • \SystemRoot\System32\DRIVERS\TDI.SYS
  • \SystemRoot\System32\DRIVERS\VIDEOPRT.SYS
  • \SystemRoot\system32\DRIVERS\USBPORT.SYS
  • \SystemRoot\System32\DRIVERS\ks.sys
  • \SystemRoot\System32\drivers\dxgthk.sys
  • \SystemRoot\System32\drivers\dxg.sys
  • \SystemRoot\System32\watchdog.sys
  • \SystemRoot\System32\drivers\Dxapi.sys

But they are not listed by ObjDir nor DeviceTree. Is this normal ?

JB

2

It is normal because driver objects are not created for this modules.

wrote in message news:xxxxx@ntdev…
> Hi all,
>
> I made a small driver which registers a notification callback using the
> PsSetLoadImageNotifyRoutine function. It works fine and I’m correctly
> notified. But there is something strange.
>
> I’m notified for these images :
> - \SystemRoot\system32\DRIVERS\USBD.SYS
> - \SystemRoot\System32\DRIVERS\TDI.SYS
> - \SystemRoot\System32\DRIVERS\VIDEOPRT.SYS
> - \SystemRoot\system32\DRIVERS\USBPORT.SYS
> - \SystemRoot\System32\DRIVERS\ks.sys
> - \SystemRoot\System32\drivers\dxgthk.sys
> - \SystemRoot\System32\drivers\dxg.sys
> - \SystemRoot\System32\watchdog.sys
> - \SystemRoot\System32\drivers\Dxapi.sys
>
> But they are not listed by ObjDir nor DeviceTree. Is this normal ?
>
> JB
>
>
>

3

…because most, if not all of these drivers, are export drivers which
are loaded during import resolution of other drivers.

d

– I can spell, I just can’t type.

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Slava Imameyev
Sent: Thursday, July 20, 2006 6:26 AM
To: Windows System Software Devs Interest List
Subject: Re:[ntdev] Loaded Module list

It is normal because driver objects are not created for this modules.

wrote in message news:xxxxx@ntdev…
> Hi all,
>
> I made a small driver which registers a notification callback using
> the PsSetLoadImageNotifyRoutine function. It works fine and I’m
> correctly notified. But there is something strange.
>
> I’m notified for these images :
> - \SystemRoot\system32\DRIVERS\USBD.SYS
> - \SystemRoot\System32\DRIVERS\TDI.SYS
> - \SystemRoot\System32\DRIVERS\VIDEOPRT.SYS
> - \SystemRoot\system32\DRIVERS\USBPORT.SYS
> - \SystemRoot\System32\DRIVERS\ks.sys
> - \SystemRoot\System32\drivers\dxgthk.sys
> - \SystemRoot\System32\drivers\dxg.sys
> - \SystemRoot\System32\watchdog.sys
> - \SystemRoot\System32\drivers\Dxapi.sys
>
> But they are not listed by ObjDir nor DeviceTree. Is this normal ?
>
> JB
>
>
>

—
Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer

4

Thanks for your answer

JB