Joined February 2015
Have a running exe delete itself while running
10
102
461
By renaming the primary unnamed data stream we "move" the locked section. You cannot delete a mapped stream, though deleting a primary stream also deletes the others.
0
3
33
so- the super skilled @analyzev of osr.com is looking into it. the root cause is totally unexpected- we are talking about a temp filter until its officially patched. will keep you updated, I consider him an absolute authority on the subject
1
1
19
Show this thread
Reminder for my new reader: If you can open a file with delete access, you can also "blank it" by renaming the nameless implicit datastream of type :$data. You do that by renaming it to a filename that starts with : - like :wtf - a new empty primary data stream is auto created.
3
6
81
can anybody guess why i think that trick needed to be refreshed?
4
0
12
It is a given you cannot write to a file that is loaded as a driver- but of course you can still append data to it
1
3
37