Version 1.4.202 seems to want access to \Device\HarddiskVolume3 and \Device\HarddiskVolumeShadowCopy3. Why?

[cridus]

As the title says, version 1.4.202 wants to access \Device\HarddiskVolume3 and \Device\HarddiskVolumeShadowCopy3. Windows defender prevented the access automatically.
Why does HidHide need access to these paths now?

[nefarius]

The driver code hasn't changed last 3 releases, no idea where that comes from.

[cridus]

All I know is that while updating HidHide I got these two warnings:

App or process blocked: msiexec.exe
Protected folder: \Device\HarddiskVolume3

and

App or process blocked: SrTasks.exe
Protected folder: \Device\HarddiskVolumeShadowCopy3

and the installation failed.

[nefarius]

Both msiexec.exe (Windows Installer) and SrTasks.exe (System Restore Point manager) are core Windows components I have nothing to do with. From what you described it looks like a system restore point was (attempted) to be created - which is quite normal for MSI to trigger that - and that was somehow flagged as malicious. In essence still has nothing to do with my software but the Windows Installer procedure so IDK how to help you.

[cridus]

Then I don't know why the installation failed. Welp.