Thank you Dejan.
But do you mean that IoRegisterFsRegistrationChange() does not work as it is described in IFS DDK if it is not loaded at boot time?So if I want to filter a later mounted volume I have to intercept the mount IRP and attach the filter driver to the FSD manually?
The other question is that I try to load R. Nagar’s sfilter at system boot time.But it result in my system crashing.I want to know is there anybody who succeeded in doing that? Or i have to do sth before I can do it?
Thanks again!
Best Regards!
Jim
You are probably starting the driver in other than Boot start mode.
On Windows 2000 and NT a file system filter that uses IoRegisterFsRegistrationChange must load as a Boot start driver. On Windows XP, the OS will call your FSD notification routine for every already registered FSD as well.Regards, Dejan.
truename wrote:
> hello everybody:
> I’m a new comer and I’m studying how to write file system filter driver now.It’s rather hard to me.I hope I can get help from you.
> I’m testing R. Nagar’s sample filter driver “sfilter”.It works properly in one Win XP computer.But in another Win2000 computer something seems wrong with it.I use SoftIce to debug the driver and set a breakpoint on the begining of the function “SFilterFSDNotification”,which was passed to the function “IoRegisterFsRegistrationChange” as the secnond paramete.In the XP computer,after sfilter was loaded,it does jump to the breakpoint if a new volume is mounted,as the IFS DDK says.But under Win2000 it doesn’t arrive to the breakpoint at all.I don’t know why.I hope u can tell me the reason.thanks very much!
>
> Best Regards.
>
> Jim
>
> —
> You are currently subscribed to ntfsd as: xxxxx@alfasp.com
> To unsubscribe send a blank email to xxxxx@lists.osr.com–
Kind regards, Dejan M. MVP for DDK
http://www.alfasp.com E-mail: xxxxx@alfasp.com
Alfa Transparent File Encryptor - Transparent file encryption services.
Alfa File Protector - File protection and hiding library for Win32 developers.
Alfa File Monitor - File monitoring library for Win32 developers.
You are currently subscribed to ntfsd as: xxxxx@netease.com
To unsubscribe send a blank email to xxxxx@lists.osr.com