|
MKz, those patches just patch the window name, not the driver.
The driver itself is digitally signed too, so tampering with it causes an 'invalid driver' message!! The driver is located in the filemon.exe between 0x19F90 and 0x2C3CF (v7.03 of filemon.exe).
Changing the name of the driver file 'filem701.sys' does not work either. There is reference to FILEMON701 in the file so this must be the connection between filemon and the driver, but seeing as you can't tamper with the driver it seems this is going to be impossible?
|