windows rootkits file-hiding vulnerabilities

It's gonna be very simple, but somebody needs to bring it the public
for the goodness of the mankind... or at least the rootkit community;)

When researching some new techniques for files hiding, I came across
the very common bug in many (all?) publicly available windows rootkits
(both user and kernel mode)...

The problem can be noticed when using well known
ZwQueryDirectoryFile() function, with ReturnSingleEntry argument set
to TRUE. All tested rootkits (see below) failed to hide properly the
files or directories which should have need hidden...

As usual the very simple proof-of-concept code is provided:

http://invisblethings.org/tools/flister-0.1.zip