I want to find out from my driver, when another driver is loaded into
memory. Is there any api to do it? I can run a thread that monitors for some
event and find out the loading of that driver.
–
- Developer
You can be notified on device interface arrival, otherwise there is no api
for driver load notification.
=====================
Mark Roddy DDK MVP
Windows 2003/XP/2000 Consulting
Hollis Technology Solutions 603-321-1032
www.hollistech.com
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Developer
Sent: Wednesday, August 31, 2005 7:06 AM
To: Windows System Software Devs Interest List
Subject: [ntdev] Module Load
I want to find out from my driver, when another driver is loaded into
memory. Is there any api to do it? I can run a thread that monitors for some
event and find out the loading of that driver.
–
- Developer — Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256 You are currently subscribed to
ntdev as: unknown lmsubst tag argument: ‘’ To unsubscribe send a blank email
to xxxxx@lists.osr.com
What about PsSetLoadImageNotifyRoutine ?
Alberto.
---- Original Message -----
From: Mark Roddy
To: Windows System Software Devs Interest List
Sent: Wednesday, August 31, 2005 7:26 AM
Subject: RE: [ntdev] Module Load
You can be notified on device interface arrival, otherwise there is no api for driver load notification.
=====================
Mark Roddy DDK MVP
Windows 2003/XP/2000 Consulting
Hollis Technology Solutions 603-321-1032
www.hollistech.com
From: xxxxx@lists.osr.com [mailto:xxxxx@lists.osr.com] On Behalf Of Developer
Sent: Wednesday, August 31, 2005 7:06 AM
To: Windows System Software Devs Interest List
Subject: [ntdev] Module Load
I want to find out from my driver, when another driver is loaded into memory. Is there any api to do it? I can run a thread that monitors for some event and find out the loading of that driver.
–
- Developer — Questions? First check the Kernel Driver FAQ at http://www.osronline.com/article.cfm?id=256 You are currently subscribed to ntdev as: unknown lmsubst tag argument: ‘’ To unsubscribe send a blank email to xxxxx@lists.osr.com
Questions? First check the Kernel Driver FAQ at http://www.osronline.com/article.cfm?id=256
You are currently subscribed to ntdev as: unknown lmsubst tag argument: ‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com
you mean to say by using the calls
*IoRegisterPlugPlayNotification*http:and
IoGetDeviceInterfaces
http:routines?
On 8/31/05, Mark Roddy wrote:
>
> You can be notified on device interface arrival, otherwise there is no api
> for driver load notification.
>
> =====================
> Mark Roddy DDK MVP
> Windows 2003/XP/2000 Consulting
> Hollis Technology Solutions 603-321-1032
> www.hollistech.com http:
>
> ------------------------------
> From: xxxxx@lists.osr.com [mailto:
> xxxxx@lists.osr.com] *On Behalf Of *Developer
> Sent: Wednesday, August 31, 2005 7:06 AM
> To: Windows System Software Devs Interest List
> Subject: [ntdev] Module Load
>
> I want to find out from my driver, when another driver is loaded into
> memory. Is there any api to do it? I can run a thread that monitors for some
> event and find out the loading of that driver.
>
> –
>
> - Developer — Questions? First check the Kernel Driver FAQ at
> http://www.osronline.com/article.cfm?id=256 You are currently subscribed
> to ntdev as: unknown lmsubst tag argument: ‘’ To unsubscribe send a blank
> email to xxxxx@lists.osr.com
>
>
> —
> Questions? First check the Kernel Driver FAQ at
> http://www.osronline.com/article.cfm?id=256
>
> You are currently subscribed to ntdev as: unknown lmsubst tag argument: ‘’
>
> To unsubscribe send a blank email to xxxxx@lists.osr.com
–
- Developer</http:></http:></http:>
thanks for the tip alberto.
On 8/31/05, Alberto Moreira wrote:
>
> *What about PsSetLoadImageNotifyRoutine ? *
>
> Alberto.
>
> **
> ---- Original Message -----
>
> From: Mark Roddy
> To: Windows System Software Devs Interest List
> Sent: Wednesday, August 31, 2005 7:26 AM
> Subject: RE: [ntdev] Module Load
>
> You can be notified on device interface arrival, otherwise there is no api
> for driver load notification.
>
> =====================
> Mark Roddy DDK MVP
> Windows 2003/XP/2000 Consulting
> Hollis Technology Solutions 603-321-1032
> www.hollistech.com http:
>
> ------------------------------
> From: xxxxx@lists.osr.com [mailto:
> xxxxx@lists.osr.com] *On Behalf Of *Developer
> Sent: Wednesday, August 31, 2005 7:06 AM
> To: Windows System Software Devs Interest List
> Subject: [ntdev] Module Load
>
> I want to find out from my driver, when another driver is loaded into
> memory. Is there any api to do it? I can run a thread that monitors for some
> event and find out the loading of that driver.
>
> –
>
> - Developer — Questions? First check the Kernel Driver FAQ at
> http://www.osronline.com/article.cfm?id=256 You are currently subscribed
> to ntdev as: unknown lmsubst tag argument: ‘’ To unsubscribe send a blank
> email to %%email.unsub%%
>
>
> —
> Questions? First check the Kernel Driver FAQ at
> http://www.osronline.com/article.cfm?id=256
>
> You are currently subscribed to ntdev as: unknown lmsubst tag argument: ‘’
>
> To unsubscribe send a blank email to %%email.unsub%%
>
>
> —
> Questions? First check the Kernel Driver FAQ at
> http://www.osronline.com/article.cfm?id=256
>
> You are currently subscribed to ntdev as: unknown lmsubst tag argument: ‘’
>
> To unsubscribe send a blank email to xxxxx@lists.osr.com
>
–
- Developer</http:>
Yes. Knowing when the driver module has loaded is not going to do you
much good if what you are interested in is opening a device object
controlled by that driver. On the other hand if you are just curious
about when an image has been loaded…
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Developer
Sent: Wednesday, August 31, 2005 7:43 AM
To: Windows System Software Devs Interest List
Subject: Re: [ntdev] Module Load
you mean to say by using the calls
IoRegisterPlugPlayNotification
http: and
IoGetDeviceInterfaces
http: routines?
On 8/31/05, Mark Roddy wrote:
You can be notified on device interface arrival, otherwise there is no
api for driver load notification.
=====================
Mark Roddy DDK MVP
Windows 2003/XP/2000 Consulting
Hollis Technology Solutions 603-321-1032
www.hollistech.com
________________________________
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Developer
Sent: Wednesday, August 31, 2005 7:06 AM
To: Windows System Software Devs Interest List
Subject: [ntdev] Module Load
I want to find out from my driver, when another driver is loaded
into memory. Is there any api to do it? I can run a thread that monitors
for some event and find out the loading of that driver.
–
- Developer — Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256 You are currently subscribed
to ntdev as: unknown lmsubst tag argument: ‘’ To unsubscribe send a
blank email to xxxxx@lists.osr.com
mailto:xxxxx
—
Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256
You are currently subscribed to ntdev as: unknown lmsubst tag argument:
‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com
mailto:xxxxx
–
- Developer — Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256 You are currently subscribed
to ntdev as: unknown lmsubst tag argument: ‘’ To unsubscribe send a
blank email to xxxxx@lists.osr.com</mailto:xxxxx></mailto:xxxxx></http:></http:>
sorry, the list manager rejected the reply, so ehre it is again…
well, i was trying some thing deeper. what i wanted was to get the
notification before the loading starts, so that I could monitor it. check
sum matching etc so that i can put a final stop if I detect something fishy.
but i only get the notification after things get over.- Developer
The only way you can do what you want is with a file system filter driver,
that is knowledgable about the drivers you are concerned about. This is
overkill in any situation I can think of.
–
Don Burn (MVP, Windows DDK)
Windows 2k/XP/2k3 Filesystem and Driver Consulting
Remove StopSpam from the email to reply
“Developer” wrote in message news:xxxxx@ntdev…
sorry, the list manager rejected the reply, so ehre it is again…
well, i was trying some thing deeper. what i wanted was to get the
notification before the loading starts, so that I could monitor it. check
sum matching etc so that i can put a final stop if I detect something fishy.
but i only get the notification after things get over.- Developer