I wondered why registry functions don't use the current transaction field from TEB the same way as filesystem operations do. I tried to force it, and now I see: That would make the use of transactions unstable. Here is why: 1/3
-
-
Okay, I managed to create a process from a file under
$txfLog. Why does yours show this weird image name? Is it because you named it with three dots?pic.twitter.com/AYLoIPK1VJ
-
i rename it to that, windg sees the filename as the symlink that launched it. ph show original name some place, renamed into others
- Show replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.
3/3