Re: Matching window handles and open file handles

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance



"Sam Hobbs" <samuel@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:%23ZC4VFMjFHA.3448@xxxxxxxxxxxxxxxxxxxxxxx
> "mr_unreliable" <kindlyReplyToNewsgroup@xxxxxxxxxxx> wrote in message
> news:uVreh7XiFHA.3716@xxxxxxxxxxxxxxxxxxxxxxx
> >
> > This CAN be done.
>
> That depends on what you mean by "CAN". Yes, it can be done by someone as
> knowledgeable as the people at SysInternals.com. However I have seen
> questions such as this asked many times, and the SysInternals.com utility is
> the only sample I have seen suggested as something that can do it. And as
> you say, they do not provide source code. If they do, however, provide a
> documented interface to their software, then that is good.
>
> > However, they are not saying how they do it, and it's not readily
> > apparent to me.
>
> It uses undocumented parts of Windows and obviously they don't want us to
> know how it works. Obviously Microsoft does not want to tell us either.

Sysinternals also has a product called "Handle" that does pretty much what I was trying to do.

I have since abandoned that approach in favor of examining the running processes' CommandLines, then matching PIDs to Windows Handles, which is easier and more reliable than matching open file handles to windows handles because a process can open a file, read all of it into memory, then close the physical (notepad, for example).

-Peter
.



Relevant Pages

  • Re: OT-- should I defrag???
    ... I predict that Microsoft will either kill off any versions of the ... SysInternals tools for future Windows releases, or put a pretty retail cover on ... Microsoft web site, ...
    (alt.sys.pc-clone.dell)
  • Re: Matching window handles and open file handles
    ... > apparent to me. ... It uses undocumented parts of Windows and obviously they don't want us to ... Obviously Microsoft does not want to tell us either. ... Prev by Date: ...
    (microsoft.public.vb.winapi)
  • Re: Cant send fax from Win XP fax
    ... The modem is internal. ... I've never had a problem use Microsoft ... Fax with Windows 2000 laptops. ... > Modem incompatibility is not apparent during installation or the initial ...
    (microsoft.public.windowsxp.print_fax)
  • SecurityFocus Microsoft Newsletter #176
    ... MICROSOFT VULNERABILITY SUMMARY ... Microsoft Windows XP HCP URI Handler Arbitrary Command Execu... ... PHPNuke Category Parameter SQL Injection Vulnerability ... Microsoft Baseline Security Analyzer Vulnerability Identific... ...
    (Focus-Microsoft)
  • SecurityFocus Microsoft Newsletter #49
    ... Subject: SecurityFocus Microsoft Newsletter #49 ... Microsoft Windows NNTP Denial of Service Vulnerability ... Microsoft IIS SSI Buffer Overrun Privelege Elevation Vulnerability ... Microsoft ISA Server H.323 Memory Leak Denial of Service... ...
    (Focus-Microsoft)