I start adaptation of my (not mini) filter to Windows 7 and see in trace the calling strange names such as:
“$Secure:$SDSv2.0.6\namespace4E99D9.pfA.pftions\Windows\Projects\SystemIndex\Indexer\CiFiles\CiAD0002.002orer.lnk”
“$Extend$RmMetadata$TxfLogsers\Default\AppData*”
What these name means?
Unfortunately driver has some problems with them…
Thanks & Regards,
MG.
Email secured by Check Point
Email secured by Check Point
Michael Grabelkovsky wrote:
I start adaptation of my (not mini) filter to Windows 7 and see in trace the calling strange names such as:
“$Secure:$SDSv2.0.6\namespace4E99D9.pfA.pftions\Windows\Projects\SystemIndex\Indexer\CiFiles\CiAD0002.002orer.lnk”
“$Extend$RmMetadata$TxfLogsers\Default\AppData*”
Are you sure you’re reading the Length from the UNICODE_STRING
correctly? These strings look like they have multiple iterations of
stale data.
“$Secure:$SDS” is the security descriptor stream.
“$Extend$RmMetadata$TxfLog” is the directory containing Txf’s logs.