This driver has been blocked from loading
raichaa opened this issue · 5 comments
"This driver has been blocked from loading" is such a vague error that I would guess it is form the service manager and not from the kernel.
Can you try the following?
sc delete TitanHide
- Open
regedit
, go toHKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services
and manually delete theTitanHide
key if it exists. (sc
does not always do this immediately.) sc create TitanHide binPath= %systemroot%\system32\drivers\TitanHide.sys type= kernel
to recreate the driver service.sc run TitanHide
If that still doesn't work, please compile and run the following program and report back what it prints (you'll need ntdll.h
from here).
#include "ntdll.h"
#include <stdio.h>
#pragma comment(lib, "ntdll.lib")
int main()
{
BOOLEAN Discard;
NTSTATUS Status = RtlAdjustPrivilege(SE_LOAD_DRIVER_PRIVILEGE, TRUE, FALSE, &Discard);
if (!NT_SUCCESS(Status))
{
printf("Could not acquire SE_LOAD_DRIVER_PRIVILEGE\n");
return Status;
}
UNICODE_STRING ServiceName = RTL_CONSTANT_STRING(L"\\Registry\\Machine\\System\\CurrentControlSet\\Services\\TitanHide");
Status = NtLoadDriver(&ServiceName);
if (!NT_SUCCESS(Status))
{
printf("NtLoadDriver failed: 0x%08lX\n", Status);
}
else
{
printf("Driver loaded successfully.\n");
NtUnloadDriver(&ServiceName);
}
return Status;
}
oh, it is so sad to listen
@Mattiwatti Even though OP never replied I wanted to let you know that the time you took to reply to him helped me get the driver loaded. I don't remember exactly what it was but I was trying to load it incorrectly somehow. Following your directions worked :)
Great, glad to hear it helped someone at least :)
I'm having the same issue, nothing helped
ps. i can load other drivers such as BlackBone etc.
but this one gets me this error
"This driver has been blocked from loading"
EDIT/: FIXED i was releasing x86 instead of x64