Re: Get running process by volume
- From: "anton bassov" <soviet_bloke@xxxxxxxxxxx>
- Date: 18 Sep 2006 14:04:02 -0700
Hi mate
I think you can take advantage on the fact that, unlike actual file IO,
opening file handle is* ALWAYS* synchronous operation, so that FS
drivers receive IRP_MJ_CREATE request in context of a thread that has
made CreateFile() call. Therefore, you can write FS filter and make it
fail all IRP_MJ_CREATE requests to files, located in your target
directory (apart from the one that are sent by your process, of
course). Once no one, apart from your process, is able to open file
handles, no one, apart from your process, will be able to read from or
write to these files
Anton Bassov
Zeeshan wrote:
I want to lock a partition so the no IO operation can be done except my own
process. Some how i m not able in certain cases. Now i want to get the
information about the running processes in the system and identify the
process which are reading/writing or querying informtion on that particular
partition. What must be the possible solution???
To be precise the answer i want is to get the list of running processes at
certain volume of path
I ll be grateful if anyone can help me in this regard
.
- Prev by Date: Re: Getting Registry properties by Class
- Next by Date: Re: windbg in Vista
- Previous by thread: Getting Registry properties by Class
- Next by thread: Re: Get running process by volume
- Index(es):