how to delete driver file and still Keep communication

Forum for discussion about kernel-mode development.
nullpointer
Posts: 4
Joined: Sun May 21, 2017 9:07 am

Re: how to delete driver file and still Keep communication

Post by nullpointer » Thu May 03, 2018 8:24 am

EP_X0FF wrote:
Sun Apr 29, 2018 4:05 am
Starting from Windows 10 you cannot delete file of loaded driver as it locked on disk.
If you want similar functionality from your screenshot you need to send IRP to filesystem device driver. Search for KSBinSword for "code". However conseqences of this is unknown for Windows 10.
it work for me can release disk lock by use exploit. though not something to share with rootkit person.

Post Reply