Permanent delete or delete to recycler?

NTFSD
1

Hi everybody,
How can I distinguish between a permanent delete and a delete to the
recycler of a file object, using the file system filter driver?
Thanks in advance,
Stav

Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp

You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com

2

From the FSD’s point of view, “delete to recycler” is just rename and not a
real delete.
The notion of “recycler” is implemented by the shell and not by the FSD or
IO manager.

Max

----- Original Message -----
From: “stav weiss”
To: “File Systems Developers”
Sent: Thursday, September 06, 2001 8:21 PM
Subject: [ntfsd] Permanent delete or delete to recycler?

> Hi everybody,
> How can I distinguish between a permanent delete and a delete to the
> recycler of a file object, using the file system filter driver?
> Thanks in advance,
> Stav
>
>
> _________________________________________________________________
> Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp
>
>
> —
> You are currently subscribed to ntfsd as: xxxxx@storagecraft.com
> To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com
>

—
You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com

3

What you’ll see in your filter is a delete of the file
(PFILE_DISPOSITION_INFORMATION->DeleteFile is TRUE), then an undelete of the
same file (PFILE_DISPOSITION_INFORMATION->DeleteFile is FALSE), followed by
a rename of the file to the recycle bin.

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com]On Behalf Of stav weiss
Sent: Thursday, September 06, 2001 11:22 AM
To: File Systems Developers
Subject: [ntfsd] Permanent delete or delete to recycler?

Hi everybody,
How can I distinguish between a permanent delete and a delete to the
recycler of a file object, using the file system filter driver?
Thanks in advance,
Stav

You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com