HideProcess icon indicating copy to clipboard operation
HideProcess copied to clipboard

Error the system cannot find the path specified

Open masoudr opened this issue 5 years ago • 0 comments

Hi, I have a strange problem, when I try to use loader I get the following error: C:\Users\Rahimi\Desktop>Loader.exe "test.exe"

 Basic DKOM Rootkit to Hide a Process
 Usage : loader.exe [process name]
 Author: Bradley Landherr


[+] Discovered PID of process test.exe: 4792
[*] Grabbing driver device handle...
[*] Loading driver.
[-] Error loading driver: The system cannot find the path specified.

[-] Error creating handle: The system cannot find the path specified.

I put the Rootkit.sys and loader.exe in desktop and here is some part of my loader code:

#define SERVICE "Rootkit"
#define DEVICE "\\\\.\\Rootkit"
#define DRIVER "c:\\\\Users\\Masoud\\Desktop\\Rootkit.sys"
//#define DRIVER "c:\\\\Users\\IEUser\\Desktop\\Rootkit.sys"
//#define DRIVER "C:\\\\WINDOWS\\Rootkit.sys"

It seems that loader cannot find the driver, but don't know why. Thanks.

masoudr avatar May 07 '19 10:05 masoudr