Thanks for everybody responses.
Is Norton 2005 hooking system call table to filter windows register table as well ?
So,it messed up the system call tables When i uninstall Norton 2005?
/////////////////////////////////////////////////////////////////////
Well, hooking is not kosher and is usually bad, but unloading the hooker
is just plain stupid.Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
xxxxx@storagecraft.com
http://www.storagecraft.com----- Original Message -----
From: “Ladislav Zezula”
> To: “Windows File Systems Devs Interest List”
> Sent: Wednesday, July 13, 2005 6:59 PM
> Subject: Re: Re:[ntfsd] UnInstall Norton 2005 BugCheck 8E, {c0000005, 6f642c6d,
> f5f33cb4, 0}
>
>
> > > YOU ARE HOOKING RIGHT! Well so does Norton (curse them) and if you hook,
> > > write on the black board 1 billion times: I WILL NEVER LET A DRIVER THAT
> > > HOOKS UNLOAD!
> >
> > Well, let me write some off-topic note: I believe that the changes in
> > 2003 SP1 for 64-bit targets (Exactly: disabled hooking the system call
> > table,
> > protecting the kernel from patching, protecting from switching stack)
> > will be soon implemented in all 32-bit operating systems too,
> > to hell with existing software compatibility. This will force driver
> > writers to develop drivers good way.
> >
> > The fact that Microsoft discourages it and/or Driver Verifier
> > bugchecks on some of these practices is apparently not enough.
> >
> > L.
> >
> >
> > —
> > Questions? First check the IFS FAQ at
> https://www.osronline.com/article.cfm?id=17
> >
> > You are currently subscribed to ntfsd as: xxxxx@storagecraft.com
> > To unsubscribe send a blank email to xxxxx@lists.osr.com
>
>
> —
> Questions? First check the IFS FAQ at https://www.osronline.com/article.cfm?id=17
>
> You are currently subscribed to ntfsd as: secosx@163.com
> To unsubscribe send a blank email to xxxxx@lists.osr.com
>