Re: Overwriting Files In Use



Antivirus software may do something special to against virus. For those
purpose, use special method to wipe out on disk viurs data is not a problem.
Dealing with in memory active virus is tricky.

--
best regards,
Lu Lin
TTC senior engineer
http://ttcone.com
Inside Programming
http://lu0.126.com
<linestyle@xxxxxxx> wrote in message news:dnmom9$4q6$1@xxxxxxxxxxxxxxxxx
> Many antivirus software and virus want to replace the in use file,:),but
> always fail.
> -----------------------------------------
> ÔÚ Tue, 13 Dec 2005 15:19:07 +0800 £¬lu0дµÀ£º
>>I'm sure this is not a regular way to design software. I just point out
>>the
>>way you(your boss?) choosing was wrong.
>>
>>--
>>best regards,
>>Lu Lin
>>TTC senior engineer
>>http://ttcone.com
>>Inside Programming
>>http://lu0.126.com
>>"Rafael Rivera Jr." <rafael@*n0sp4m*anti-tgtsoft.com> wrote in message
>>news:eq2dnUMbl4ivPADeRVn-qQ@xxxxxxxxxxxxxxx
>>> lu0,
>>>
>>> Thanks, would you be able to point me in the right direction for
>>> designing
>>> such a 'helper'? I'm aware of the problems you indicated and would like
>>> to
>>> continue down this road.
>>>
>>> Rafael Rivera Jr.
>>>
>>> lu0 wrote:
>>>> Overwite file in use especially having memory mapped in user mode is
>>>> impossible. The key is you have no chance to obtain the handle.
>>>>
>>>> Anyway, I had tested some approchs to overwrite exclusive opened files,
>>>> locked files, memory mapped file, assume appclication don't aware of
>>>> there is a utility underlying.
>>>> With kernel mode helper to commit new data to storage to that file is
>>>> possbile. New data appears after application closes handle (map handle
>>>> and file handle) and re-open it.
>>>> Anyway, you'll have to facing to a lot of problems. e.g. memory mapped
>>>> file size can't be shrink, keep same size or extend size seems not to
>>>> be
>>>> a problem. Application don't aware of new data, they may overwrite the
>>>> data you just wrote. New data doesn't come into other processes
>>>> automaticly.
>>>>
>>>> You'd better to design another upgrade mode.
>>>>
>>
>>
>
> -----------------------------------------
>
> Ö Àñ£¡
> zhaoqigang
> linestyle@xxxxxxx
>


.



Relevant Pages

  • Re: HELP ON XP RE-INSTALLATION...
    ... > IF I REINSTALL XP ON MY COMPUTER HELP IF I HAVE A VIRUS THAT I CANT ... Don't have an AntiVirus software? ... There are more applications you may need to run to completely clean your ... It will probably save you time and effort in re-installing Windows XP ...
    (microsoft.public.windowsxp.general)
  • Re: RE-INSTALLING XP
    ... > IF I REINSTALL XP ON MY COMPUTER HELP IF I HAVE A VIRUS THAT I CANT ... Don't have an AntiVirus software? ... There are more applications you may need to run to completely clean your ... It will probably save you time and effort in re-installing Windows XP ...
    (microsoft.public.windowsxp.general)
  • Re: OE6s *.dbx files cached somewhere in Win2000 environment?
    ... Maintenance | Store Folder. ... > Outgoing mail is certified Virus Free. ... Because of this tendency of attachments to infect, ... Turn off email scanning in your antivirus software. ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)
  • Answers to frequently asked questions - 17SEP03
    ... I have this mystery re trying to install Norton ... Internet Security 2003 on my XP Pro. ... > specific virus, please tell us what it's name is! ... > date with antivirus software and more importantly ...
    (microsoft.public.security.virus)
  • Answers to frequently asked questions - 07SEP03
    ... specific virus, please tell us what it's name is! ... date with antivirus software and more importantly ... takes advantage of a security flaw in Windows 2000 ... Most antivirus software is designed to prevent infection ...
    (microsoft.public.security.virus)