how to hide service?

Question

how to hide service?

spider111111 opened this issue 5 years ago · comments

Jora Kornev · Answer 1 · Mon Jul 22 2019 19:57:16 GMT+0800 (China Standard Time)

Hi,

Currently you are able to hide only service registry stuff and its files. But in this case service still can be detected via Service Control Management API. I solved this but haven't published a technology yet. The component that is able to hide services from SCM will be published soon as part of the following repo:
https://github.com/JKornev/scex Can't say an exact ETA but it will be published soon 100%, and after it i'm going to port this rootkit technique to this Hidden driver.

spider111111 · Answer 2 · Tue Jul 23 2019 16:15:20 GMT+0800 (China Standard Time)

@JKornev looking forward

sobuj53 · Answer 3 · Thu Dec 31 2020 19:59:30 GMT+0800 (China Standard Time)

@JKornev This will be the cherry on top. Looking forward to your push.