In particular, wants to know how to get the fullpath of the image from
EPROCESS. That one might deserve it’s own list.
>> xxxxx@acm.org 2007-04-04 10:33:37 >>>
“Vossen, Joseph (ISS Atlanta)” wrote in message
news:xxxxx@ntdev…
[snip]
> > I now return you to our usual NTDEV. BTW, while I’m here: My
> > system crashed, can you tell me why?
> Because you were using an IDE to develop a driver in C++ that
performs
> encryption?
You forgot “hooks kernel calls to capture events, pokes inside things
like
EPROCESS to access info, and uses your own brand of spin-locks because
you
think you know how to do them better than the OS”
–
Don Burn (MVP, Windows DDK)
Windows 2k/XP/2k3 Filesystem and Driver Consulting
Website: http://www.windrvr.com
Blog: http://msmvps.com/blogs/WinDrvr
Remove StopSpam to reply
—
Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256
To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer