r77-rootkit icon indicating copy to clipboard operation
r77-rootkit copied to clipboard

GPU/CPU Utilization

Open kkaze5348-ops opened this issue 4 months ago • 1 comments

Does it still work and hides CPU/GPU usage of the process on latest windows releases?

kkaze5348-ops avatar Nov 20 '25 02:11 kkaze5348-ops

GPU usage is hidden, I implemented this in version 1.5.1 in 2023.

CPU usage is hidden in some task managers. You can run the provided Example.exe, it has a ComboBox where you can simulate CPU usage.

Because there are many different ways to compute CPU usage and task managers implement this in various different ways, it is not possible to hook one single function - because there is no one single function like GetCpuUsage().

Particularly the CPU usage graph in Windows TaskMgr is difficult. I believe that I need to hook NtDeviceIoControlFile and find the right device to intercept, but research on this stalled, even if the original tasks seems trivial.

bytecode77 avatar Nov 22 '25 20:11 bytecode77