File Hiding
February 9th, 2009
I’ve just implemented the first beta of the file hiding feature for my rootkit. As usual, I’ve attached a screenshot:
As you can see, any files with the prefix “__PJB_F” are hidden from view. I’ve implemented it by hooking NtQueryDirectoryFile. Tested and working on both Vista and XP with only minor bugs (which should be smoothed out soon). Once I’ve smoothed out most of the bugs in the project I’m hoping to release portions of the source so if you’re waiting on that then stay tuned, I’ll have more information in the near future.
P.S. WoW related post incoming in the next few days probably.
yay wow, hope its the morph
gj
@Bert
I already did that.
http://www.cypherjb.com/blog/2009/02/01/world-of-warcraft-morph-hack/
@ramey
Thanks.
Registry next!
im too stupid to use it :s
Well. Why don’t you tell me what you don’t understand so maybe I can help?
“If you don’t, please consult the WoW Memory Editing forums on MMOwned, there is more than enough information there on the topic.”
mmowned is down and i dont have any experience at stuff like this :/
@Bert
MMOwned will be back up soon, be patient. Also, doesn’t matter if you don’t have any experience, nothing stopping you from starting and learning.
@Bert
There you go MMOwned back up