Re: FBWF Related

Just to clarify 1.
You can commit new files which only exist in the cache
provided the directory it exists in was already on the device.

-milong
"Sean Liming (eMVP)" <sean_liming@xxxxxxxxxxxx> wrote in message news:%23A40RHVcHHA.3980@xxxxxxxxxxxxxxxxxxxxxxx

1. Difficult to answer since you can commit inidividual files on the disk with out having to reboot. Files that don't exist, but are created inthe overlay need a re-boot. I might be mistaken.
2. Yes.
3. No. You have to re-boot.
4. FBWF allows you to create holes in the protection so you could open a hole to the location of the virus definition files.
5. Registry updates - not exactly. Registry filer by default protects two registry keys - TSCALs and domain secret key. It might be possible to modify to support other keys.


Regards,

Sean Liming
www.sjjmicro.com / www.seanliming.com
XP Embedded Book Author - XP Embedded Advanced, XP Embedded Supplemental Toolkit


"Roshan R.D" <RoshanRD@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:E88B299F-8DD7-4706-BC27-A1FE267ACDBE@xxxxxxxxxxxxxxxx
Hi All,

Please try to answer the following questions related to FBWF (File Based
Write Filter)
1.If write filter is enabled we can perform commit operation on protected
volume during runtime without needing to reboot the machine? For e.g. by
using FbwfCommitFile API
2.Can we protect the entire volume using FBWF?
3.We can enable or disable FBWF during runtime without needing to reboot the
machine? For e.g. by using FbwfProtectVolume API
4.If antivirus is running on XPe system then how to provide virus updates if
write filter is enabled with out needing to shutdown the system?
5.FBWF can be used to provide registry based updates or Registry Filter have
to be used. In both the cases the system is required to be rebooted?

Thanks & regards
Roshan.




.

Relevant Pages

  • Re: FBWF Related
    ... I just want to know if write filter is enabled on the device ... and commit is performed with out disabling the write filter and if the system ... It sounds as if FBWF with the Registry filter are the way to go. ...
    (microsoft.public.windowsxp.embedded)
  • Re: FBWF Related
    ... with out having to reboot. ... FBWF allows you to create holes in the protection so you could open a ... Registry updates - not exactly. ... 1.If write filter is enabled we can perform commit operation on protected ...
    (microsoft.public.windowsxp.embedded)
  • Re: Getting linking errors for DllCanUnloadNow and DllGetClassObject
    ... i want to thnx everyone who helped me to solve this error specially ... dllentry and dllsetup base class in my source filter. ... A good way to make sure you are not missing any registry keys that eVC ...
    (microsoft.public.windowsce.platbuilder)
  • RE: Microstaff installation chaos!
    ... I'm still sifting through the registry information from ... >or filter driver. ... The Device Manager shows no devices. ...
    (microsoft.public.win2000.applications)
  • Re: Building Custom DirectShow Filters
    ... It seems the call to DllRegisterServer with the EZRGB24.dll is not producing ... the right registry entries. ... can do this for other objects, too, by changing the GUID and the Dll ... > unable to register the filter. ...
    (microsoft.public.windowsce.app.development)
Quantcast