Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 08-25-2004, 20:33
Sergey Nameless
 
Posts: n/a
WinDBG Virtual PC

I used WinDBG for debugging my drivers. Now I'm working on file system driver and want to save myself from OS reinstallations. So I thought running file system filter driver would be easy on MS Virtual PC. I installed Win XP SP1 on Virtual PC 2004, changed boot.ini to enable debug mode and if I select it, then my CPU goes to 100% and Virtual PC halts for a very long time. Hyperterminal works with the same settings as in boot.ini. Does any one ever tried it, or it would be easier to make HD image?
Reply With Quote
  #2  
Old 08-25-2004, 23:13
nahoda nahoda is offline
Friend
 
Join Date: Feb 2004
Posts: 19
Rept. Given: 0
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 0
Thanks Rcvd at 0 Times in 0 Posts
nahoda Reputation: 0
Why you need reinstall ? I am not so skilled in file system filter but by my opinion you may load and unload system driver dynamically. On ftp you may find MS IFS kit (installable file system kit) and Compuware Driver studio with many samples about file system hooks.

nahoda
Reply With Quote
  #3  
Old 08-26-2004, 03:03
babar0ga
 
Posts: n/a
Maybe this can help(WinDbg and VMWare):

hxxp://silverstr.ufies.org/lotr0/
Reply With Quote
  #4  
Old 08-26-2004, 08:56
Sergey Nameless
 
Posts: n/a
The idea is following:
Virtual PC can run in "HD changes undo mode", where all changes to HD lost after reboot. This is kind of read-only run mode.

Reason: I need to change data written to HD, first time most likely it's not going to work perfectly and I'll destroy some files. I had this experience before, defenately not plesent.

I hope to get access to FTP so I can download IFS, so far I'm using what's available on the public samples.
Reply With Quote
  #5  
Old 08-27-2004, 09:08
willcodeforfood
 
Posts: n/a
Lightbulb Virtual Disk, Real PC

Hi Sergey Nameless,

Your undo reasoning is sound, but another way to simplify file system development is to use a virtual drive on a real system. There is a great one here:

hxxp://www.insidewindows.info/filedisk.zip

This allows you to create a sparse file which is mounted like a real hard drive. As the file is sparse, it will be only as big as the data you put on it. You can keep multiple copies, old problem setups and even do diffs via sourcesafe or another version control system.

hxxp://www.insidewindows.info/ also has a number of cool source file systems and recognizers based on the NTIFS.h (also on that site). If you're in a hurry you might also want to check out
hxxp://www.exetools.com/forum/showthread.php?t=4617

Enjoy, WFCC
Reply With Quote
  #6  
Old 08-28-2004, 03:13
zzsx
 
Posts: n/a
Have you tried VMWare? I found it very easy for me to test programs and to undo the undesirable side effects.
Reply With Quote
  #7  
Old 09-06-2004, 16:13
SkyYear
 
Posts: n/a
Undo Function??
VMWARE also has the function.
and u can set "Undo After Shutdown" also.

I like VMWARE much betten then VIRTUALPC.

more powerful.
Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Windbg in IDA 6.5 zeuscane General Discussion 8 11-02-2014 14:13
WINDBG question ricnar456 General Discussion 3 08-17-2006 04:07


All times are GMT +8. The time now is 20:51.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )