microsoft.public.win32.programmer.kernel
- Re: Why does my workingsetsize always equal 0?
- Why does my workingsetsize always equal 0?
- Re: Quadratic timing behaviour of long pathname access in NT 5.x?
- Re: Copy dll's Exports table to another dll
- Re: NTFS transaction using native functions in user mode
- RE: Quadratic timing behaviour of long pathname access in NT 5.x?
- From: "Jeffrey Tan[MSFT]"
- Re: NTFS transaction using native functions in user mode
- From: "Jeffrey Tan[MSFT]"
- Re: mapping physical Ram addresses (MmMapIoSpace)
- Re: Multithreaded pipe server, deadlock problem
- From: Alexander Grigoriev
- Re: Multithreaded pipe server, deadlock problem
- Re: Copy dll's Exports table to another dll
- Re: Multithreaded pipe server, deadlock problem
- From: Ben Voigt [C++ MVP]
- Re: Copy dll's Exports table to another dll
- From: Ben Voigt [C++ MVP]
- Quadratic timing behaviour of long pathname access in NT 5.x?
- Re: Copy dll's Exports table to another dll
- Re: Copy dll's Exports table to another dll
- Re: Copy dll's Exports table to another dll
- Re: NTFS transaction using native functions in user mode
- Re: Time critical process interrupted by pagefault from nowhere.
- From: Pavel Lebedinsky [MSFT]
- Re: Copy dll's Exports table to another dll
- Re: NTFS transaction using native functions in user mode
- From: "Jeffrey Tan[MSFT]"
- Re: How to dump system service dispatch table?
- From: "Jeffrey Tan[MSFT]"
- Multithreaded pipe server, deadlock problem
- Re: ISA driver under XP
- Re: ISA driver under XP
- ISA driver under XP
- Re: How to dump system service dispatch table?
- Re: New release of undocumented.ntinternals.net
- New release of undocumented.ntinternals.net
- Re: Copy dll's Exports table to another dll
- From: Ben Voigt [C++ MVP]
- Re: Copy dll's Exports table to another dll
- mapping physical Ram addresses (MmMapIoSpace)
- Re: NTFS transaction using native functions in user mode
- From: "Jeffrey Tan[MSFT]"
- Re: NTFS transaction using native functions in user mode
- Re: NTFS transaction using native functions in user mode
- From: "Jeffrey Tan[MSFT]"
- Re: Question about process IDs (PIDs)
- Re: Copy dll's Exports table to another dll
- Re: SetLastError/CreateProcess bug on Vista/2008
- From: "Jeffrey Tan[MSFT]"
- Re: Copy dll's Exports table to another dll
- Re: NTFS transaction using native functions in user mode
- Re: NTFS transaction using native functions in user mode
- Re: Copy dll's Exports table to another dll
- Re: Copy dll's Exports table to another dll
- From: sharon.sahar@xxxxxxxxx
- Re: NTFS transaction using native functions in user mode
- From: Pavel Lebedinsky [MSFT]
- Re: Call ReleaseMutex() several times
- Time critical process interrupted by pagefault from nowhere.
- From: no . spam . for . me12
- Re: AutoRun May Not Work After First Insert a "usb flash drive like a CD ROM"
- Re: SetLastError/CreateProcess bug on Vista/2008
- Re: AutoRun May Not Work After First Insert a "usb flash drive like a CD ROM"
- Re: Atomic Port I/O
- SetLastError/CreateProcess bug on Vista/2008
- Re: AutoRun May Not Work After First Insert a "usb flash drive like a CD ROM"
- From: Alexander Grigoriev
- Re: CreateProcess and Sandboxing
- Re: AutoRun May Not Work After First Insert a "usb flash drive like a CD ROM"
- Re: NTFS transaction using native functions in user mode
- Re: NTFS transaction using native functions in user mode
- Re: Copy dll's Exports table to another dll
- Re: Driver for handling bad ram modules (like BadRAM for Linux)
- Re: To get the total memory occupied by a process
- Re: Call ReleaseMutex() several times
- Re: Question about process IDs (PIDs)
- Re: To get the total memory occupied by a process
- Call ReleaseMutex() several times
- Re: Question about process IDs (PIDs)
- Re: Find interactive user name / token (again) problems
- NTFS transaction using native functions in user mode
- Re: To get the total memory occupied by a process
- Re: Question about process IDs (PIDs)
- Re: How can I check that if a process is running or not ?
- Re: NtCreateProcess and fork
- Re: Question about process IDs (PIDs)
- Re: How to dump system service dispatch table?
- From: "Jeffrey Tan[MSFT]"
- Question about process IDs (PIDs)
- Re: Find interactive user name / token (again) problems
- Re: Unexpected return value of FindFirstChangeNotification
- Re: Find interactive user name / token (again) problems
- Re: To get the total memory occupied by a process
- Re: Read/Write to storage class device using sector/block addresses
- From: Ben Voigt [C++ MVP]
- Re: Read/Write to storage class device using sector/block addresses
- Re: Read/Write to storage class device using sector/block addresses
- Re: Read/Write to storage class device using sector/block addresses
- Re: Find interactive user name / token (again) problems
- Re: How can I check that if a process is running or not ?
- From: Ben Voigt [C++ MVP]
- Re: Read/Write to storage class device using sector/block addresses
- From: Ben Voigt [C++ MVP]
- Re: How to dump system service dispatch table?
- Re: How to dump system service dispatch table?
- Re: How to Hook ZwReadVirtualMemory and ZwWriteVirtualMemory
- To get the total memory occupied by a process
- Re: Find interactive user name / token (again) problems
- GINA and HKEY_CURRENT_USER\Volatile Environment
- Re: How to dump system service dispatch table?
- From: "Jeffrey Tan[MSFT]"
- Re: How to dump system service dispatch table?
- From: "Jeffrey Tan[MSFT]"
- ZwCreateFile returns STATUS_INVALID_PARAMETER in Windows 2008/Vist
- Re: Copy dll's Exports table to another dll
- From: sharon.sahar@xxxxxxxxx
- Re: Find interactive user name / token (again) problems
- AutoRun May Not Work After First Insert a "usb flash drive like a CD ROM"
- Re: Read/Write to storage class device using sector/block addresses
- Re: Copy dll's Exports table to another dll
- Re: How to Hook ZwReadVirtualMemory and ZwWriteVirtualMemory
- Re: How can I check that if a process is running or not ?
- Re: How to Hook ZwReadVirtualMemory and ZwWriteVirtualMemory
- Re: Unexpected return value of FindFirstChangeNotification
- Re: Unexpected return value of FindFirstChangeNotification
- Re: Unexpected return value of FindFirstChangeNotification
- Re: Unexpected return value of FindFirstChangeNotification
- Re: Atomic Port I/O
- Re: Unexpected return value of FindFirstChangeNotification
- Unexpected return value of FindFirstChangeNotification
- Re: How can I check that if a process is running or not ?
- Re: How to dump system service dispatch table?
- Re: How to dump system service dispatch table?
- Find interactive user name / token (again) problems
- Re: Writing to a file being copied
- Re: How to Hook ZwReadVirtualMemory and ZwWriteVirtualMemory
- Re: Driver for handling bad ram modules (like BadRAM for Linux)
- From: david . grimbichler
- Re: How to Hook ZwReadVirtualMemory and ZwWriteVirtualMemory
- Re: Driver for handling bad ram modules (like BadRAM for Linux)
- Driver for handling bad ram modules (like BadRAM for Linux)
- From: david . grimbichler
- Re: Read/Write to storage class device using sector/block addresses
- Read/Write to storage class device using sector/block addresses
- Re: How to Hook ZwReadVirtualMemory and ZwWriteVirtualMemory
- Re: CreateProcess and Sandboxing
- Re: How can I check that if a process is running or not ?
- How can I check that if a process is running or not ?
- Re: CreateProcess and Sandboxing
- Problem while getting file size from IFilter for a .doc file
- Re: Writing to a file being copied
- Re: Copy dll's Exports table to another dll
- Re: How to Hook ZwReadVirtualMemory and ZwWriteVirtualMemory
- How to Hook ZwReadVirtualMemory and ZwWriteVirtualMemory
- Writing to a file being copied
- Re: CreateProcess and Sandboxing
- RE: How to dump system service dispatch table?
- From: "Jeffrey Tan[MSFT]"
- CreateProcess and Sandboxing
- table of waitable timers - utility to view?
- RE: Windows and HDD shock protection behavior
- Re: NtCreateProcess and fork
- Re: /LARGEADDRESSAWARE LAA
- Re: Copy dll's Exports table to another dll
- Copy dll's Exports table to another dll
- How to dump system service dispatch table?
- /LARGEADDRESSAWARE LAA
- Re: NtCreateProcess and fork
- Re: Programming Trusted Platform Module TPM 1.2 using TBS in C#
- Re: Memory caching question
- Re: Memory caching question
- From: Alexander Grigoriev
- RE: Memory caching question
- From: "Jeffrey Tan[MSFT]"
- Re: can not get MEMORY_BASIC_INFORMATION
- Re: Memory caching question
- Memory caching question
- Re: NtCreateProcess and fork
- Re: NtCreateProcess and fork
- Re: Can memory be freed,...?
- Re: Can memory be freed,...?
- Re: Can memory be freed,...?
- Re: can not get MEMORY_BASIC_INFORMATION
- From: Alexander Grigoriev
- Re: Can memory be freed,...?
- From: Alexander Grigoriev
- Re: Atomic Port I/O
- Re: Atomic Port I/O
- From: Ben Voigt [C++ MVP]
- Re: can not get MEMORY_BASIC_INFORMATION
- Re: Can memory be freed,...?
- can not get MEMORY_BASIC_INFORMATION
- Can memory be freed,...?
- Querying file security info
- Re: NtCreateProcess and fork
- [Commercial] Windows System Programming:Develope unique aspects of Windows
- Re: Detecting parent process
- Re: Detecting parent process
- From: Alexander Grigoriev
- Re: Pool Nonpaged Memory
- From: Pavel Lebedinsky [MSFT]
- Re: Detecting parent process
- Re: Resource(handle) leak due to new thread...
- Re: Detecting parent process
- Re: Detecting parent process
- Detecting parent process
- Re: Resource(handle) leak due to new thread...
- Re: Atomic Port I/O
- Re: Atomic Port I/O
- Re: Atomic Port I/O
- Pool Nonpaged Memory
- Re: Resource(handle) leak due to new thread...
- From: Ben Voigt [C++ MVP]
- NtCreateProcess and fork
- Resource(handle) leak due to new thread...
- Re: WaitForMultipleObjects
- Re: How to best protect against Spyware and Rookits
- Re: WaitForMultipleObjects
- Re: WaitForMultipleObjects
- Re: How to best protect against Spyware and Rookits
- Re: Atomic Port I/O
- Re: WaitForMultipleObjects
- Re: Atomic Port I/O
- Atomic Port I/O
- Re: How to best protect against Spyware and Rookits
- Re: WaitForMultipleObjects
- From: Scott McPhillips [MVP]
- Re: WaitForMultipleObjects
- Re: MsgWaitFor...()-compatible condvar implementation that can be shared across processes
- Re: WaitForMultipleObjects
- Re: MsgWaitFor...()-compatible condvar implementation that can be shared across processes
- Re: WaitForMultipleObjects
- From: Scott McPhillips [MVP]
- MsgWaitFor...()-compatible condvar implementation that can be shared across processes
- WaitForMultipleObjects
- Re: resource/overhead cost of event, shared memory, mutex
- Re: resource/overhead cost of event, shared memory, mutex
- Re: Calling ANSI version of GetEnvironmentStrings() in Unicode program
- Restarting Windows 2003 Server
- Windows XP VSS Technology Features
- Re: How to best protect against Spyware and Rookits
- Re: How to best protect against Spyware and Rookits
- Re: Vista and access to HD Serial No
- Re: Vista and access to HD Serial No
- Re: How to best protect against Spyware and Rookits
- Re: Vista and access to HD Serial No
- Re: Vista and access to HD Serial No
- Re: Vista and access to HD Serial No
- Re: How to best protect against Spyware and Rookits
- Re: How to best protect against Spyware and Rookits
- How to best protect against Spyware and Rookits
- Re: Vista and access to HD Serial No
- StartThreadpoolIo
- resource/overhead cost of event, shared memory, mutex
- Re: Explorer.exe User Process cant be killed after disconnecting USB HDD Device,...
- Re: ExitProcess() hangs. Process image stays in memory
- From: Alexander Grigoriev
- Re: Explorer.exe User Process cant be killed after disconnecting USB HDD Device,...
- Re: Explorer.exe User Process cant be killed after disconnecting USB HDD Device,...
- Re: Forum Windows DDK en Français disponible
- Re: Explorer.exe User Process cant be killed after disconnecting USB HDD Device,...
- Explorer.exe User Process cant be killed after disconnecting USB HDD Device,...
- Re: Terminal Services
- Re: Find out if monitor is off
- Re: Terminal Services
- Re: Terminal Services
- Re: Terminal Services
- Re: ExitProcess() hangs. Process image stays in memory
- ExitProcess() hangs. Process image stays in memory
- Re: Terminal Services
- Re: Terminal Services
- Re: Calling ANSI version of GetEnvironmentStrings() in Unicode program
- Re: Calling ANSI version of GetEnvironmentStrings() in Unicode program
- From: Alexander Grigoriev
- Re: Calling ANSI version of GetEnvironmentStrings() in Unicode program
- Re: Calling ANSI version of GetEnvironmentStrings() in Unicode program
- Calling ANSI version of GetEnvironmentStrings() in Unicode program
- Re: Find out if monitor is off
- From: Volodymyr M. Shcherbyna
- Re: Terminal Services
- Re: Terminal Services
- Re: Terminal Services
- Re: Vista and access to HD Serial No
- ISensLogon, SERVICE_CONTROL_SESSIONCHANGE failing with automatic l
- Re: Terminal Services
- Re: Terminal Services
- Re: Find out if monitor is off
- Re: Terminal Services
- Re: Find out if monitor is off
- Re: Terminal Services
- Re: Find out if monitor is off
- Re: char, wchar, and TCHAR: Oh My!
- Re: Find out if monitor is off
- From: Volodymyr M. Shcherbyna
- Re: stdio redirection using CreateProcess with inherit set to Fals
- Re: char, wchar, and TCHAR: Oh My!
- From: Ben Voigt [C++ MVP]
- Re: stdio redirection using CreateProcess with inherit set to Fals
- Re: Find out if monitor is off
- Re: Windows and HDD shock protection behavior
- Access flash drive partition on Vista
- Re: Windows and HDD shock protection behavior
- Re: Find out if monitor is off
- Re: Terminal Services
- Re: Find out if monitor is off
- Re: Find out if monitor is off
- Re: Find out if monitor is off
- Re: Terminal Services
- Re: Find out if monitor is off
- Re: Terminal Services
- Re: Terminal Services
- Re: Terminal Services
- Re: Windows and HDD shock protection behavior
- Re: Terminal Services
- Re: Windows and HDD shock protection behavior
- Terminal Services
- RE: Windows and HDD shock protection behavior
- Re: CreateService needs restart of the box
- Re: Windows and HDD shock protection behavior
- Re: CreateService needs restart of the box
- Re: Windows and HDD shock protection behavior
- Forum Windows DDK en Français disponible
- Re: Windows and HDD shock protection behavior
- Re: CreateFile for USB device returns ERROR_FILE_NOT_FOUND
- Prefetch question
- Re: Find out if monitor is off
- Re: char, wchar, and TCHAR: Oh My!
- Re: CreateService needs restart of the box
- From: Volodymyr M. Shcherbyna
- Re: CreateService needs restart of the box
- Windows and HDD shock protection behavior
- Re: CreateFile for USB device returns ERROR_FILE_NOT_FOUND
- Re: can I call a function exported by a DLL in the remote process?
- Re: CreateService needs restart of the box
- Re: Would wait on a signed event cause thread to switch to kernel mode?
- Re: Combobox window does not appear in the application
- Re: Find out if monitor is off
- From: Volodymyr M. Shcherbyna
- Re: CreateService needs restart of the box
- From: Volodymyr M. Shcherbyna
- Re: CreateService needs restart of the box
- Re: can I call a function exported by a DLL in the remote process?
- From: Volodymyr M. Shcherbyna
- Re: Symbol files for Media Cneter 2005?
- From: Volodymyr M. Shcherbyna
- Re: CreateService needs restart of the box
- From: Volodymyr M. Shcherbyna
- Re: can I call a function exported by a DLL in the remote process?
- Re: can I call a function exported by a DLL in the remote process?
- Re: CreateFile for USB device returns ERROR_FILE_NOT_FOUND
- CreateService needs restart of the box
- Re: can I call a function exported by a DLL in the remote process?
- Re: char, wchar, and TCHAR: Oh My!
- can I call a function exported by a DLL in the remote process?
- Re: how to send a debug_event by myself to anothor process?
- Re: Find out if monitor is off
- Re: Find out if monitor is off
- Re: char, wchar, and TCHAR: Oh My!
- Symbol files for Media Cneter 2005?
- Re: char, wchar, and TCHAR: Oh My!
- char, wchar, and TCHAR: Oh My!
- Re: Combobox window does not appear in the application
- Re: Combobox window does not appear in the application
- Combobox window does not appear in the application
- CreateFile for USB device returns ERROR_FILE_NOT_FOUND
- Re: Find out if monitor is off
- Re: how to send a debug_event by myself to anothor process?
- From: Volodymyr M. Shcherbyna
- Re: Validate if Copy process for File/Directory complete
- From: Volodymyr M. Shcherbyna
- Re: Find out if monitor is off
- From: Volodymyr M. Shcherbyna
- Re: how to implement the same function of getCallModule() in madCodeHook development Kit?
- From: Volodymyr M. Shcherbyna
- Re: Would wait on a signed event cause thread to switch to kernel mode?
- Find out if monitor is off
- Re: Validate if Copy process for File/Directory complete
- From: Alexander Grigoriev
- how to send a debug_event by myself to anothor process?
- Re: how to implement the same function of getCallModule() in madCodeHook development Kit?
- Re: Validate if Copy process for File/Directory complete
- Validate if Copy process for File/Directory complete
- Re: Would wait on a signed event cause thread to switch to kernel mode?
- Re: Programming Trusted Platform Module TPM 1.2 using TBS in C#
- Re: Would wait on a signed event cause thread to switch to kernel mode?
- Re: Create low-integrity UI within normal process
- From: "Jeffrey Tan[MSFT]"
- Programming Trusted Platform Module TPM 1.2 using TBS in C#
- Re: Would wait on a signed event cause thread to switch to kernel mode?
- From: Alexander Grigoriev
- Re: Create low-integrity UI within normal process
- inheriting stdin console handle in the child - "handle invalid"
- RE: Reset power to USB device ????? - njoycodin
- Re: Would wait on a signed event cause thread to switch to kernel mode?
- From: Volodymyr M. Shcherbyna
- Re: Would wait on a signed event cause thread to switch to kernel mode?
- From: Ben Voigt [C++ MVP]
- Re: Would wait on a signed event cause thread to switch to kernel mode?
- From: Alexander Grigoriev
- Re: Create low-integrity UI within normal process
- From: "Jeffrey Tan[MSFT]"
- Re: Advisory file locking support?
- From: "Jeffrey Tan[MSFT]"
- Re: how to implement the same function of getCallModule() in madCodeHook development Kit?
- RE: inheriting stdio handles even if explicitly set to false
- Re: Would wait on a signed event cause thread to switch to kernel mode?
- RE: system idle process
- Re: Would wait on a signed event cause thread to switch to kernel mode?
- Re: how to implement the same function of getCallModule() in madCodeHook development Kit?
- From: Volodymyr M. Shcherbyna
- Re: how to implement the same function of getCallModule() in madCodeHook development Kit?
- From: Ivan Brugiolo [MSFT]
- Re: TS session id in vista
- From: Ivan Brugiolo [MSFT]
- Re: SIG_BLOCK
- From: Volodymyr M. Shcherbyna
- Re: how to implement the same function of getCallModule() in madCodeHook development Kit?
- From: Volodymyr M. Shcherbyna
- Re: inheriting stdio handles even if explicitly set to false
- From: Ben Voigt [C++ MVP]
- Re: how to implement the same function of getCallModule() in madCodeHook development Kit?
- From: Ben Voigt [C++ MVP]
- Re: Would wait on a signed event cause thread to switch to kernel mode?
- From: Scott McPhillips [MVP]
- RE: inheriting stdio handles even if explicitly set to false
- Would wait on a signed event cause thread to switch to kernel mode?
- Re: how to implement the same function of getCallModule() in madCodeHook development Kit?
- Re: TS session id in vista
- From: Volodymyr M. Shcherbyna
- Re: service and socket
- From: Volodymyr M. Shcherbyna
- Re: how to implement the same function of getCallModule() in madCodeHook development Kit?
- From: Volodymyr M. Shcherbyna
- how to implement the same function of getCallModule() in madCodeHook development Kit?
- Re: SetSystemTime failure - Invalid Parameter
- RE: Power Management Tab
- From: "Jeffrey Tan[MSFT]"
- Re: SetSystemTime failure - Invalid Parameter
- Re: TS session id in vista
- Re: TS session id in vista
- Re: how to get all the thread handles in a remote process?
- Re: how to get all the thread handles in a remote process?
- how to get all the thread handles in a remote process?
- Re: SetSystemTime failure - Invalid Parameter
- SetSystemTime failure - Invalid Parameter
- Re: TS session id in vista
- service and socket
- SIG_BLOCK
- Re: Advisory file locking support?
- Re: execution user priviledge for VirtualAllocEx, writeProcessMemo
- inheriting stdio handles even if explicitly set to false
- Re: execution user priviledge for VirtualAllocEx, writeProcessMemo
- Re: CreateRemoteThread fails on Server 2008
- Re: TS session id in vista
- From: Volodymyr M. Shcherbyna
- Re: GetFileVersionInfoSize returns 0 on certain disks
- RE: Create low-integrity UI within normal process
- From: "Jeffrey Tan[MSFT]"
- how to work WSASend
- Re: stdio redirection using CreateProcess with inherit set to False
- Re: execution user priviledge for VirtualAllocEx, writeProcessMemory
- Re: Enumerating services on remote 2008 fails to enum all services
- From: "Jeffrey Tan[MSFT]"
- Re: CreateRemoteThread fails on Server 2008
- From: Pavel Lebedinsky [MSFT]
- RE: execution user priviledge for VirtualAllocEx, writeProcessMemory
- execution user priviledge for VirtualAllocEx, writeProcessMemory
- stdio redirection using CreateProcess with inherit set to False
- Re: Read Only Object accessed by multiplle threads
- Re: Read Only Object accessed by multiplle threads
- Re: GetFileVersionInfoSize returns 0 on certain disks
- Re: CreateRemoteThread fails on Server 2008
- GetFileVersionInfoSize returns 0 on certain disks
- Re: Read Only Object accessed by multiplle threads
- Re: Enumerating services on remote 2008 fails to enum all services
- Re: CreateRemoteThread fails on Server 2008
- RE: Create low-integrity UI within normal process
- Hooking Raw Input - Detect HID mice
- Re: Read Only Object accessed by multiplle threads
- From: Steven Cheng [MSFT]
- Re: CreateRemoteThread fails on Server 2008
- From: Pavel Lebedinsky [MSFT]
- Re: Read Only Object accessed by multiplle threads
- Re: Read Only Object accessed by multiplle threads
- Read Only Object accessed by multiplle threads
- Re: CreateRemoteThread fails on Server 2008
- Re: [solved] BackupRead and overly large security data
- Re: TS session id in vista
- From: Ivan Brugiolo [MSFT]
- Re: How detect Server 2008 Core?
- Re: TS session id in vista
- BackupRead and overly large security data
- TS session id in vista
- RE: Proper way to call SetThreadAffinityMask
- From: "Jeffrey Tan[MSFT]"
- Re: CreateRemoteThread fails on Server 2008
- From: Volodymyr M. Shcherbyna
- Re: Proper way to call SetThreadAffinityMask
- Proper way to call SetThreadAffinityMask
- Re: CreateRemoteThread fails on Server 2008
- CreateRemoteThread fails on Server 2008
- CreateRemoteThread
