My active filter driver has been running rock solid on Windows 2000. It
supports on-the-fly decryption and has some Ring3 interface capabilities.
I’ve run virus scans, Explorer searches, etc. against directories
containing files meant to be intercepted by it - no problems whatsoever.
It has worked flawlessly with every type of app/file combination I’ve
thrown at it. Despite warnings against doing so, I even have the
capability to unload it (at least in the Checked build) and have
experienced no issues with that, either.
Taking the same driver to Windows XP, however, starts a whole new ball
game. I’m getting numerous BSODs (BAP_POOL_CALLER,
IRQL_NOT_LESS_THAN_OR_EQUAL, kmode exceptions not handled).
Still waiting on my XP version of softICE to dig down further but… Are
there some general rules of thumb, cautionary notes, etc. regarding WinXP
versus Win2K for filter drivers?