(1) Launch the file “test.exe”, in SoftIce we’ll see the proc “test”
(2) Rename “test.exe” to “ttt.exe”
(3) Launch the “ttt.exe”, in Softice, the proc name is still “test”
but the taskmanager display the right “ttt.exe” in the list.
If system was rebooted, the Softice will show “ttt” correctly.
Seems the new file name was cached for user mode, kernel didn’t
get updated? is there a way to force this synchronized?
Can anyone give some idea?
thanks,
AFei