Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

File and process Hiding is not working with windows server #38

Open
ymg2006 opened this issue Jun 16, 2022 · 4 comments
Open

File and process Hiding is not working with windows server #38

ymg2006 opened this issue Jun 16, 2022 · 4 comments

Comments

@ymg2006
Copy link

ymg2006 commented Jun 16, 2022

Hello, thank you for this project. I have been testing V1.0 and V1.1 with a windows server from 1809 B17763.1 to the latest update of windows server 2022.

File-System monitor tests result:

Test 1: create single file, hide it, unhide it
Error, hidden file has been found0
failed!

Registry monitor tests result:

Test 1: create single reg key, hide it, unhide it
successful!
Test 2: create single reg value, hide it, unhide it
successful!

Process monitor prot tests result:

Test 1: attach, test, detach protection
successful!
Test 2: create process, protect, check, unprotect
successful!

Process monitor excl tests result:

Test 1: hide file, add excluded process, check file
Error, hidden file has been found
failed!

Process monitor hide tests result:

Test 1: hide, test, unhide protection
successful!
Test 2: create process, hide, check, unhide
Error, process isn't hidden
failed!

@ymg2006 ymg2006 changed the title File Hiding is not working with latest Update of windows 1809 B17763.737 File Hiding is not working with windows server Jun 16, 2022
@ymg2006 ymg2006 changed the title File Hiding is not working with windows server File and process Hiding is not working with windows server Jun 16, 2022
@ymg2006 ymg2006 changed the title File and process Hiding is not working with windows server File and process Hiding is not working with windows server 2019 Jun 16, 2022
@ymg2006 ymg2006 changed the title File and process Hiding is not working with windows server 2019 File and process Hiding is not working with windows server Jun 16, 2022
@JKornev
Copy link
Owner

JKornev commented Jun 20, 2022

Hi @ymg2006,

Did you take a release binaries (1.1, 1.0) or tried to compile by your own? This is an important question because release 1.1 doesn't have a process hiding feature and there are about 30 commits since the latest release 1,1. Process hiding feature isn't included to any release so if you want it you have to recompile the latest code by your own.

Regards,
JK

@ymg2006
Copy link
Author

ymg2006 commented Jun 20, 2022

I hope you are fine.
I have cloned and compiled the latest commit and tested them, moreover all the releases, I also tried on windows 10(1809) and 8.1 because I was suspicious of the base of my windows server(1809) so I started to test with the windows server's first release and updated it as of today. Afterward, I tested with windows server 2022 and this was interesting that neither file hiding nor process hiding did not work on the server edition of windows.

@JKornev
Copy link
Owner

JKornev commented Jun 20, 2022

Ok thanks, sounds like a bug. Did you try to hide something manually using hiddencli tool? Or you just checked an issue by hiddentests?

@ymg2006
Copy link
Author

ymg2006 commented Jun 20, 2022

I use hidden to hide vmware tools and tested with al-khaser which detects all drivers files which I included to hide inside config. I also thought config is not loading properly and added files manually with hiddencli but it did not hide too.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants