Process hiding with SSDT modification in x64 Win7

		Exetools > General > x64 OS
Process hiding with SSDT modification in x64 Win7

05-03-2012, 18:16

31337guru

Posts: n/a

Dear fyyre. I found out your hidecon example. Is it implemented by "just remove process from linked list and/or handle table"?
I still want to know a solution to locate the hooked function to the segment of SSDT table.
Anybody to help me?

« Previous Thread | Next Thread »

Posting Rules
You may not post new threads You may not post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is On HTML code is Off Forum Rules

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Hiding a process	securedsolutions	x64 OS	5	08-29-2013 17:59
SSDT in Windows Vista/7 x86	_MAX_	General Discussion	3	08-30-2012 02:56
Best rootkit for win7?	suddenLy	General Discussion	10	03-25-2011 08:52

All times are GMT +8. The time now is 16:42.