BlackINT3 / OpenArk

The Next Generation of Anti-Rookit(ARK) tool for Windows.
https://openark.blackint3.com
GNU Lesser General Public License v2.1
9.51k stars 915 forks source link

v1.3.6 还是不能进入内核模式 #201

Open ReallySilverBell opened 3 months ago

ReallySilverBell commented 3 months ago

报错信息:

[UNONE::ObLoadDriverW] [ERR] NtLoadDriver service:\Registry\Machine\System\CurrentControlSet\Services\OpenArkDrv64 err:c0000365 [Kernel::ParseKernelSymbol] [INFO] PDB: C:\Users\DELL\AppData\Roaming\OpenArk\symbols\ci.pdb\222ada82af6a158f74c8089827c3b7db1\ci.pdb [Kernel::ParseKernelSymbol] [INFO] PDB: C:\Users\DELL\AppData\Roaming\OpenArk\symbols\ntkrnlmp.pdb\2f5adee106e341e8fe0539a8eea780c11\ntkrnlmp.pdb [Kernel::ParseKernelSymbol] [INFO] PDB: C:\Users\DELL\AppData\Roaming\OpenArk\symbols\win32kbase.pdb\79a112f2d0088654c564a004b70f4ffb1\win32kbase.pdb [Kernel::ParseKernelSymbol] [INFO] PDB: C:\Users\DELL\AppData\Roaming\OpenArk\symbols\win32kfull.pdb\801600d057345cbdf13e735512916a101\win32kfull.pdb [Kernel::onEnterKernelMode] [INFO] InstallDriver 1. [Kernel::onEnterKernelMode] [INFO] InstallDriver 2. [Kernel::onEnterKernelMode] [ERR] InstallDriver C:\Users\DELL\AppData\Roaming\OpenArk\kernel\OpenArkDrv64.sys err

Piiij-X commented 1 week ago

我也一样 win10