PureBasic Forums - English

Looks useful for me.
Atleast it might hide my detected bot in games
or this method might not work.

--edit

oh its still detected with this method.

what if you hide the game its self

I dont think it will work.
The game uses a 3rd party protection like gameguard.
The only way is unhooking it or killing the created thread that monitors detection.

hide the thread?

Just guessing. I don't have any use for this really but I got curious about it.

for gameguard I think you have to do a system wide hook first.

Mmmh...

I realy think, Ishould say some things by now:
At end7 -> When you are coppying code from a japanese site, pleaae try a little to understand, what you are doing - I think, you don't.
First of all: CloseHandle doesn't close a handle, which is opened by Zw...
Then: The last entry in the list which you are changing, doesen't point to the next entry, but to the end of the list. So HideHook(0) can lead to hard (BSOD) crashes in kernel!

I'm not progging in PB at all, but your way to create a unicode string is very horrible.

Im not sure at all, but it seems that there is an unfixed bug in Windows, which under some conditions could lead to system crashes or hanging programs when opening a security descriptor for writing or reading - I've had this problem several times, and I fixed it by changing priority of my own thread to a lower level.

On Windows2003 Microsoft has changed Security - so you have do write a driver to hide a process. On Vista, it will be so, too.

But - WHY do you wan't do hide a process at all? By my own I know eight methods to find those "hidden" processes - and I'm surely not the best progger in the world . By "hiding" yourself, you only show the world "here I am, just kill me, I'm malware".

You could use this method (directly write to kernelspace in usermode) for many interesting thing - why use it for writing RootKits ore malware? That's stupid! Look at Sony!!!

is there a code for vista?
this code good work on xp sp2 but can't hide process in vista.

I say what Rook said: Interesting .....

omg, here has some peoples with skepticism.
but most peoples are Astute and its good.
I asked a question, but you say Interesting.
wath is passed on your mind? you don't must be insult to other user.
you think that all peoples are subversive and you are a goodman.
if don't know a thing, please ask it befor open your throat.

I'm newbie and its pragmatism that i be interests to things that befor i don't see there.
Rook make mistake with you.