PsSetCreateProcessNotifyRoutine and PsSetCreateThreadNotifyRoutine

NTFSD
1

Hey, guys
I have recently registered a thread notification CB and noticed that process
notification CB has stopped being called by the system. Is this possible or
am I missing something? Can both CBs work in harmony?

Regards,
Dmitry

2

Yups! They work together… Atleast they were working the last time I had
used them together.
BTW, what exactly are you doing in both the routines?

Regards,
Ayush Gupta
http://www.linkedin.com/in/guptaayush

-----Original Message-----
From: xxxxx@lists.osr.com [mailto:bounce-370863-
xxxxx@lists.osr.com] On Behalf Of Dmitry G
Sent: Tuesday, June 23, 2009 4:24 PM
To: Windows File Systems Devs Interest List
Subject: [ntfsd] PsSetCreateProcessNotifyRoutine and
PsSetCreateThreadNotifyRoutine

Hey, guys
I have recently registered a thread notification CB and noticed that
process
notification CB has stopped being called by the system. Is this
possible or
am I missing something? Can both CBs work in harmony?

Regards,
Dmitry

NTFSD is sponsored by OSR

For our schedule of debugging and file system seminars
(including our new fs mini-filter seminar) visit:
http://www.osr.com/seminars

To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer

3

I am trying to make ExitProcess work in one of user-mode threads,
so I need a thread Id which is lacking in CreateProcess CB.

“Ayush Gupta” wrote in message news:xxxxx@ntfsd…
> Yups! They work together… Atleast they were working the last time I had
> used them together.
> BTW, what exactly are you doing in both the routines?
>
> Regards,
> Ayush Gupta
> http://www.linkedin.com/in/guptaayush
>
>> -----Original Message-----
>> From: xxxxx@lists.osr.com [mailto:bounce-370863-
>> xxxxx@lists.osr.com] On Behalf Of Dmitry G
>> Sent: Tuesday, June 23, 2009 4:24 PM
>> To: Windows File Systems Devs Interest List
>> Subject: [ntfsd] PsSetCreateProcessNotifyRoutine and
>> PsSetCreateThreadNotifyRoutine
>>
>> Hey, guys
>> I have recently registered a thread notification CB and noticed that
>> process
>> notification CB has stopped being called by the system. Is this
>> possible or
>> am I missing something? Can both CBs work in harmony?
>>
>> Regards,
>> Dmitry
>>
>>
>>
>>
>> —
>> NTFSD is sponsored by OSR
>>
>> For our schedule of debugging and file system seminars
>> (including our new fs mini-filter seminar) visit:
>> http://www.osr.com/seminars
>>
>> To unsubscribe, visit the List Server section of OSR Online at
>> http://www.osronline.com/page.cfm?name=ListServer
>
>

4

How are you using ExitProcess and thread id together?

-----Original Message-----
From: xxxxx@lists.osr.com [mailto:bounce-370874-
xxxxx@lists.osr.com] On Behalf Of Dmitry G
Sent: Tuesday, June 23, 2009 7:36 PM
To: Windows File Systems Devs Interest List
Subject: Re:[ntfsd] PsSetCreateProcessNotifyRoutine and
PsSetCreateThreadNotifyRoutine

I am trying to make ExitProcess work in one of user-mode threads,
so I need a thread Id which is lacking in CreateProcess CB.

“Ayush Gupta” wrote in message
> news:xxxxx@ntfsd…
> > Yups! They work together… Atleast they were working the last time I
> had
> > used them together.
> > BTW, what exactly are you doing in both the routines?
> >
> > Regards,
> > Ayush Gupta
> > http://www.linkedin.com/in/guptaayush
> >
> >> -----Original Message-----
> >> From: xxxxx@lists.osr.com [mailto:bounce-370863-
> >> xxxxx@lists.osr.com] On Behalf Of Dmitry G
> >> Sent: Tuesday, June 23, 2009 4:24 PM
> >> To: Windows File Systems Devs Interest List
> >> Subject: [ntfsd] PsSetCreateProcessNotifyRoutine and
> >> PsSetCreateThreadNotifyRoutine
> >>
> >> Hey, guys
> >> I have recently registered a thread notification CB and noticed that
> >> process
> >> notification CB has stopped being called by the system. Is this
> >> possible or
> >> am I missing something? Can both CBs work in harmony?
> >>
> >> Regards,
> >> Dmitry
> >>
> >>
> >>
> >>
> >> —
> >> NTFSD is sponsored by OSR
> >>
> >> For our schedule of debugging and file system seminars
> >> (including our new fs mini-filter seminar) visit:
> >> http://www.osr.com/seminars
> >>
> >> To unsubscribe, visit the List Server section of OSR Online at
> >> http://www.osronline.com/page.cfm?name=ListServer
> >
> >
>
>
>
> —
> NTFSD is sponsored by OSR
>
> For our schedule of debugging and file system seminars
> (including our new fs mini-filter seminar) visit:
> http://www.osr.com/seminars
>
> To unsubscribe, visit the List Server section of OSR Online at
> http://www.osronline.com/page.cfm?name=ListServer