阅读:1724回复:3
minifiter: 只发现vs2005 c++ windows forms application 不能运行
用minifilter框架进行加解密,没有处理加密标志,常用文件如office文件、txt、exe等都能正确加解密,大多数工程如vc6、vb,vs2005 c#, vs2005vb, vs2005 vc++ mfc application, vs2005 vc++ win32 console application等都能正确编译运行,只有vs2005 c++ windows forms application 能编译而不能运行,报错代码:0xc000007b。
根据测试现象,可能是编译生成exe文件时发生错误。因为工程能打开,复制到非加密目录中能编译运行。 真不知是哪里出了问题。 |
|
沙发#
发布于:2008-01-15 09:10
测试表明:似乎与presetinformation中用FltGetFileNameInformation取文件名有关。 在判断更名后再用FltGetFileNameInformation取文件名,则vs2005 c++ windows forms application能编译运行,但是新建visio文件时出错(没有加密)、复制大量office文件,不重启打开时有时会出错;而在判断更名前用FltGetFileNameInformation取文件名,则只有vs2005 c++ windows forms application能编译而不能运行。 |
|
板凳#
发布于:2008-01-15 17:27
自己顶一个
|
|
地板#
发布于:2008-01-16 11:24
运行exe文件,用filemon监视信息如下:
11:19:37 explorer.exe:424 IRP_MJ_CREATE F:\test\vc8wfaapp1\debug\vc8wfaapp1.exe SUCCESS Attributes: N Options: Open 11:19:37 explorer.exe:424 IRP_MJ_CLOSE F:\test\vc8wfaapp1\debug\vc8wfaapp1.exe SUCCESS 11:19:37 explorer.exe:424 FASTIO_QUERY_STANDARD_INFO F:\test\vc8wfaapp1\debug\vc8wfaapp1.exe SUCCESS Size: 38400 11:19:37 explorer.exe:424 FASTIO_QUERY_STANDARD_INFO F:\test\vc8wfaapp1\debug\vc8wfaapp1.exe SUCCESS Size: 38400 11:19:37 explorer.exe:424 IRP_MJ_CLEANUP F:\test\vc8wfaapp1\debug\vc8wfaapp1.exe SUCCESS 11:19:37 explorer.exe:424 IRP_MJ_CLOSE F:\test\vc8wfaapp1\debug\vc8wfaapp1.exe SUCCESS 11:19:37 explorer.exe:424 IRP_MJ_CREATE F:\test\vc8wfaapp1\debug\vc8wfaapp1.exe SUCCESS Attributes: N Options: Open 11:19:37 explorer.exe:424 IRP_MJ_CLOSE F:\test\vc8wfaapp1\debug\vc8wfaapp1.exe SUCCESS 11:19:37 explorer.exe:424 FASTIO_QUERY_STANDARD_INFO F:\test\vc8wfaapp1\debug\vc8wfaapp1.exe SUCCESS Size: 38400 11:19:37 explorer.exe:424 FASTIO_QUERY_STANDARD_INFO F:\test\vc8wfaapp1\debug\vc8wfaapp1.exe SUCCESS Size: 38400 11:19:37 explorer.exe:424 IRP_MJ_CLEANUP F:\test\vc8wfaapp1\debug\vc8wfaapp1.exe SUCCESS 11:19:37 explorer.exe:424 IRP_MJ_CLOSE F:\test\vc8wfaapp1\debug\vc8wfaapp1.exe SUCCESS 11:19:37 explorer.exe:424 IRP_MJ_CREATE F:\test\vc8wfaapp1\debug\vc8wfaapp1.exe SUCCESS Attributes: Any Options: Open 11:19:37 explorer.exe:424 IRP_MJ_CLOSE F:\test\vc8wfaapp1\debug\vc8wfaapp1.exe SUCCESS 11:19:37 explorer.exe:424 FASTIO_QUERY_BASIC_INFO F:\test\vc8wfaapp1\debug\vc8wfaapp1.exe SUCCESS Attributes: A 11:19:37 explorer.exe:424 FASTIO_QUERY_STANDARD_INFO F:\test\vc8wfaapp1\debug\vc8wfaapp1.exe SUCCESS Size: 38400 11:19:37 explorer.exe:424 IRP_MJ_QUERY_INFORMATION F:\test\vc8wfaapp1\debug\vc8wfaapp1.exe SUCCESS FileNameInformation 11:19:37 explorer.exe:424 FASTIO_QUERY_STANDARD_INFO F:\test\vc8wfaapp1\debug\vc8wfaapp1.exe SUCCESS Size: 38400 11:19:37 explorer.exe:424 FASTIO_QUERY_STANDARD_INFO F:\test\vc8wfaapp1\debug\vc8wfaapp1.exe SUCCESS Size: 38400 11:19:37 explorer.exe:424 IRP_MJ_CREATE F:\test\vc8wfaapp1\debug\vc8wfaapp1.exe.Manifest FILE NOT FOUND Attributes: Any Options: Open 11:19:37 explorer.exe:424 IRP_MJ_CLOSE F:\test\vc8wfaapp1\debug\vc8wfaapp1.exe.Manifest SUCCESS 11:19:37 explorer.exe:424 IRP_MJ_CREATE F:\test\vc8wfaapp1\debug\vc8wfaapp1.exe.Config FILE NOT FOUND Attributes: Any Options: Open 11:19:37 explorer.exe:424 IRP_MJ_CLOSE F:\test\vc8wfaapp1\debug\vc8wfaapp1.exe.Config SUCCESS 11:19:37 explorer.exe:424 IRP_MJ_CLEANUP F:\test\vc8wfaapp1\debug\vc8wfaapp1.exe SUCCESS 11:19:37 vc8wfaapp1.exe:280 IRP_MJ_QUERY_INFORMATION F:\test\vc8wfaapp1\debug\vc8wfaapp1.exe SUCCESS FileNameInformation 11:19:37 explorer.exe:424 IRP_MJ_CLOSE F:\test\vc8wfaapp1\debug\vc8wfaapp1.exe SUCCESS 11:19:37 vc8wfaapp1.exe:280 IRP_MJ_QUERY_INFORMATION F:\test\vc8wfaapp1\debug\vc8wfaapp1.exe SUCCESS FileNameInformation 11:19:37 System:4 IRP_MJ_QUERY_INFORMATION F:\test\vc8wfaapp1\debug\vc8wfaapp1.exe SUCCESS FileNameInformation 11:19:38 MDM.EXE:1144 IRP_MJ_QUERY_INFORMATION F:\test\vc8wfaapp1\debug\vc8wfaapp1.exe BUFFER OVERFLOW FileNameInformation 11:19:38 MDM.EXE:1144 IRP_MJ_QUERY_INFORMATION F:\test\vc8wfaapp1\debug\vc8wfaapp1.exe SUCCESS FileNameInformation |
|