Failed to send the IOCTL (process pid doenst exist or is already hidden) (000001F)

[leesumin1]

failed to send the IOCTL (process pid doenst exist or is already hidden) (000001F)

How can I solve it?

[ZeroMemoryEx]

Hello @leesumin1 , is the driver loaded or not? Could you attach a screenshot?

[ZeroMemoryEx]

Oops, I guess I broke something in the last update. I will fix it shortly and notify you @leesumin1 !

[leesumin1]

[ZeroMemoryEx]

Yes indeed @leesumin1 . I apologize i made some updates a few days ago and didn’t test them, thinking I was sure of what I’d done, but I guess I broke everything. I’ll fix it now and push a new update. I’ve already found the issue and will have it resolved in 10–20 minutes i will notify you once fixed!

[ZeroMemoryEx]

@leesumin1 I’ve fixed it. Please run cmd as administrator and type sc stop Chaos-Rootkit & sc delete Chaos-Rootkit to clean up the previous driver service. Then delete chaos-rootkit.sys and download the new version I just pushed from here https://github.com/ZeroMemoryEx/Chaos-Rootkit/releases/tag/v4.

[ZeroMemoryEx]

if it worked, lemme know!

[leesumin1]

work ! thx ~!!

[ZeroMemoryEx]

cool, happy hacking!!

[ZeroMemoryEx]

Note: the issue was that I’m probing a kernel buffer, which raises STATUS_ACCESS_VIOLATION exception.