landhb/HideProcess

Error the system cannot find the path specified

masoudr opened this issue · 0 comments

Hi,
I have a strange problem, when I try to use loader I get the following error:
C:\Users\Rahimi\Desktop>Loader.exe "test.exe"

 Basic DKOM Rootkit to Hide a Process
 Usage : loader.exe [process name]
 Author: Bradley Landherr


[+] Discovered PID of process test.exe: 4792
[*] Grabbing driver device handle...
[*] Loading driver.
[-] Error loading driver: The system cannot find the path specified.

[-] Error creating handle: The system cannot find the path specified.

I put the Rootkit.sys and loader.exe in desktop and here is some part of my loader code:

#define SERVICE "Rootkit"
#define DEVICE "\\\\.\\Rootkit"
#define DRIVER "c:\\\\Users\\Masoud\\Desktop\\Rootkit.sys"
//#define DRIVER "c:\\\\Users\\IEUser\\Desktop\\Rootkit.sys"
//#define DRIVER "C:\\\\WINDOWS\\Rootkit.sys"

It seems that loader cannot find the driver, but don't know why.
Thanks.