• Remove Mcafee Antivirus File System Filter Driver
• File Filter Driver
• File System Filter

May 09, 2011  I want to mount an image using ImageX.exe, you must first install the Windows Imaging File System Filter (WIM FS Filter) Driver. Hi, I'm trying to develop a Windows 7 WDF file system mini-filter driver. I'd like to know if it is possible to obtain the physical drive's sector address or byte.

The Minispy sample is a tool to monitor and log any I/O and transaction activity that occurs in the system. Minispy is implemented as a minifilter.

Remove Mcafee Antivirus File System Filter Driver

Universal Windows Driver Compliant

This sample builds a Universal Windows Driver. It uses only APIs and DDIs that are included in OneCoreUAP.

Design and Operation

File Filter Driver

Minispy consists of both user-mode and kernel-mode components. The kernel-mode component registers callback functions that correspond to various I/O and transaction operations with the filter manager. These callback functions help Minispy record any I/O and transaction activity occurring in the system. When a user can request the recorded information, the recorded information is passed to the user-mode component, which can either output it on screen or log it to a file on disk.

To observe I/O activity on a device, you must explicitly attach Minispy to that device by using the Minispy user-mode component. Similarly, you can request Minispy to stop logging data for a particular device.

File System Filter

For more information on file system minifilter design, start with the File System Minifilter Drivers section in the Installable File Systems Design Guide.