A forum for reverse engineering, OS internals and malware analysis 

Forum for discussion about kernel-mode development.
 #23625  by Raheel
 Sun Aug 17, 2014 1:53 am
I have made a Rootkit that works fine. I just want the functionality to get this running after system startup automatically. If have configured my driver to auto-load but If my user-land application is set to start-up folder, then it is easy to catch it. Also if I add it to autorun registry, that is also possible for the user to detect it easily. So my question is that Is there any way to put running code in driver to load it.
In simple words, how to use driver to run a process?
 #23626  by EP_X0FF
 Sun Aug 17, 2014 5:01 am
APC inject dll in existing process and start it from there using dll routine.
 #23627  by Raheel
 Sun Aug 17, 2014 6:54 am
If you don't mind, can you give me any link from where I can study this all to do so. Thanks for the help.