iPower / KasperskyHook

Hook system calls on Windows by using Kaspersky's hypervisor
MIT License
1.08k stars 261 forks source link

Hello, i have a issue with hvm_thread_object, value is null #16

Open 0x1ffll opened 1 month ago

0x1ffll commented 1 month ago

When i reading hvm_thread_object value is null image In screenshot it: "[+] klhk.sys!HVMThreadObject @ 0x0000000000000000" DbgPrintEx( 0, 0, e( "[+] klhk.sys!HVMThreadObject @ 0x%p\n" ), - ( uint64_t - )impl::g_hvm_thread_object ); ( - just because github hide * I'm on VMWare, Windows 10 22H2, other hypervisors off, HVCI off, antivirus fully unistalled

iPower commented 1 month ago

Did you try updating klhk.sys to see if that solves your issue?

0x1ffll commented 1 month ago

Yes, i updated klhk.sys ( 3 june 2024 build ), but have same issue

iPower commented 1 month ago

Hmmm I'll take a look when I have some free time.

providence121 commented 1 month ago

Did you find the problem? I have the same problem.

iPower commented 4 weeks ago

Did you try following the troubleshooting steps? Try installing Kaspersky, maybe some settings changed. Haven't had a chance to take a look yet because I'm too busy with work.