Comments (19)
manning120008
commented on July 27, 2024
2
[UNONE::FsReadFileDataW] [WARN] C:\Users\Leee\AppData\Roaming\OpenArk\console\history.txt is empty file
[ArkDrvApi::Process::OpenProcess] [ERR] OpenProcess by Kernel pid:4 err:2
[ArkDrvApi::Process::OpenProcess] [ERR] OpenProcess by Kernel pid:4 err:2
[OpenArk::onActionCheckUpdate] [INFO] requset server:http://upt.blackint3.com/openark/version.txt
[OpenArk::onActionCheckUpdate::::operator ()] [INFO] server responsed:{"appbd":"201906051417","appfsurl":"http://222.210.144.84:50200/openark/files","appurl":"https://github.com/BlackINT3/OpenArk/releases","appver":"1.0.0","err":0}
[OpenArk::onActionCheckUpdate::::operator ()] [INFO] local appver:1.1.0, build:202011191100
[OpenArk::onActionCheckUpdate::::operator ()] [INFO] OpenArk is latest.
[UNONE::ObLoadDriverW] [ERR] NtLoadDriver service:\Registry\Machine\System\CurrentControlSet\Services\OpenArkDrv64 err:c0000428
[Kernel::onClickKernelMode] [ERR] InstallDriver C:\Users\Leee\AppData\Local\Temp\OpenArkDrv64.sys err
[UNONE::ObLoadDriverW] [ERR] NtLoadDriver service:\Registry\Machine\System\CurrentControlSet\Services\OpenArkDrv64 err:c0000428
[Kernel::onClickKernelMode] [ERR] InstallDriver C:\Users\Leee\AppData\Local\Temp\OpenArkDrv64.sys err
from openark.
BlackINT3
commented on July 27, 2024
1
@lordcommander001 點擊左下角的按鈕，进入控制臺，把錯誤日誌貼上來。
from openark.
hexadecimal233
commented on July 27, 2024
1
看了一下错误代码，是签名验证不过，64位系统有限制，你驱动是自己编译的吧，你要签名一下或者开testsigning模式
from openark.
alexjinchina
commented on July 27, 2024
@lordcommander001 點擊左下角的按鈕，进入控制臺，把錯誤日誌貼上來。
我这里的情况是没有相应
from openark.
CrazyLeoJay
commented on July 27, 2024
作者你好，我也发现了类似的问题，在点击进入内核模式时，没有反应。希望能帮忙看一眼，谢谢。这个是我的日志：
[UNONE::ObLoadDriverW] [ERR] RegSetValueW err:5
[UNONE::ObLoadDriverW] [ERR] RegSetValueW err:5
[UNONE::ObLoadDriverW] [ERR] RegSetValueW err:5
[UNONE::ObLoadDriverW] [ERR] NtLoadDriver service:\Registry\Machine\System\CurrentControlSet\Services\OpenArkDrv64 err:c0000160
[Kernel::onClickKernelMode] [ERR] InstallDriver C:\Users\CRAZYL~1\AppData\Local\Temp\OpenArkDrv64.sys err
[UNONE::PsGetProcessPathW] [ERR] VirtualOpenProcess pid:16124 err:2
[UNONE::PsGetProcessPathW] [ERR] VirtualOpenProcess pid:16124 err:2
[UNONE::PsGetProcessPathW] [ERR] VirtualOpenProcess pid:16124 err:2
[UNONE::PsGetProcessPathW] [ERR] VirtualOpenProcess pid:16124 err:2
from openark.
BlackINT3
commented on July 27, 2024
作者你好，我也发现了类似的问题，在点击进入内核模式时，没有反应。希望能帮忙看一眼，谢谢。这个是我的日志：
[UNONE::ObLoadDriverW] [ERR] RegSetValueW err:5 [UNONE::ObLoadDriverW] [ERR] RegSetValueW err:5 [UNONE::ObLoadDriverW] [ERR] RegSetValueW err:5 [UNONE::ObLoadDriverW] [ERR] NtLoadDriver service:\Registry\Machine\System\CurrentControlSet\Services\OpenArkDrv64 err:c0000160 [Kernel::onClickKernelMode] [ERR] InstallDriver C:\Users\CRAZYL~1\AppData\Local\Temp\OpenArkDrv64.sys err [UNONE::PsGetProcessPathW] [ERR] VirtualOpenProcess pid:16124 err:2 [UNONE::PsGetProcessPathW] [ERR] VirtualOpenProcess pid:16124 err:2 [UNONE::PsGetProcessPathW] [ERR] VirtualOpenProcess pid:16124 err:2 [UNONE::PsGetProcessPathW] [ERR] VirtualOpenProcess pid:16124 err:2
用最新的版本试试。
若还报错，检查HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\OpenArkDrv64注册表键值是否被禁止。
from openark.
LipsonX
commented on July 27, 2024
我的也有错误，具体日志是：
[UNONE::FsReadFileDataW] [WARN] C:\Users\Lipson\AppData\Roaming\OpenArk\console\history.txt is empty file
[ArkDrvApi::Process::OpenProcess] [ERR] OpenProcess by Kernel pid:4 err:2
[ArkDrvApi::Process::OpenProcess] [ERR] OpenProcess by Kernel pid:4 err:2
[OpenArk::onActionCheckUpdate] [INFO] requset server:http://upt.blackint3.com/openark/version.txt
[OpenArk::onActionCheckUpdate::::operator ()] [INFO] server responsed:{"appbd":"201906051417","appfsurl":"http://125.71.120.71:50200/openark/files","appurl":"https://github.com/BlackINT3/OpenArk/releases","appver":"1.0.0","err":0}
[OpenArk::onActionCheckUpdate::::operator ()] [INFO] local appver:1.1.0, build:202011191100
[OpenArk::onActionCheckUpdate::::operator ()] [INFO] OpenArk is latest.
from openark.
1099255210
commented on July 27, 2024
同样的问题：
[UNONE::ObLoadDriverW] [ERR] NtLoadDriver service:\Registry\Machine\System\CurrentControlSet\Services\OpenArkDrv64 err:c000009a
[Kernel::onClickKernelMode] [ERR] InstallDriver C:\Users\10992\AppData\Local\Temp\OpenArkDrv64.sys err
from openark.
Nero-Li
commented on July 27, 2024
同样的系统版本,2019LTSC,amd的cpu就报这个错,iu就没问题,是不支持AMD吗
from openark.
lz347396004
commented on July 27, 2024
试了所有能想到的办法 bios也更新到最新版了 还是无法进入
[OpenArk::onActionCheckUpdate::::operator ()] [INFO] local appver:1.0.8, build:202009041346
[OpenArk::onActionCheckUpdate::::operator ()] [INFO] OpenArk is latest.
[UNONE::ObLoadDriverW] [ERR] NtLoadDriver service:\Registry\Machine\System\CurrentControlSet\Services\OpenArkDrv64 err:c0000603
[Kernel::onClickKernelMode] [ERR] InstallDriver C:\Users\ZZZX\AppData\Local\Temp\OpenArkDrv64.sys err
from openark.
fish862003
commented on July 27, 2024
跟上面同样的错误，有什么办法解决么
from openark.
lawrenceching
commented on July 27, 2024
作者你好，我也发现了类似的问题，在点击进入内核模式时，没有反应。希望能帮忙看一眼，谢谢。这个是我的日志：
[UNONE::ObLoadDriverW] [ERR] RegSetValueW err:5 [UNONE::ObLoadDriverW] [ERR] RegSetValueW err:5 [UNONE::ObLoadDriverW] [ERR] RegSetValueW err:5 [UNONE::ObLoadDriverW] [ERR] NtLoadDriver service:\Registry\Machine\System\CurrentControlSet\Services\OpenArkDrv64 err:c0000160 [Kernel::onClickKernelMode] [ERR] InstallDriver C:\Users\CRAZYL~1\AppData\Local\Temp\OpenArkDrv64.sys err [UNONE::PsGetProcessPathW] [ERR] VirtualOpenProcess pid:16124 err:2 [UNONE::PsGetProcessPathW] [ERR] VirtualOpenProcess pid:16124 err:2 [UNONE::PsGetProcessPathW] [ERR] VirtualOpenProcess pid:16124 err:2 [UNONE::PsGetProcessPathW] [ERR] VirtualOpenProcess pid:16124 err:2用最新的版本试试。
若还报错，检查HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\OpenArkDrv64注册表键值是否被禁止。
同样的问题，检查过注册表发现并没有这个键值。可否再提供些建议。谢谢。
OpenArk Console
Copyright (C) 2019 BlackINT3 https://github.com/BlackINT3/OpenArk
[UNONE::FsReadFileDataW] [WARN] C:\Users\***\AppData\Roaming\OpenArk\console\history.txt is empty file
[ArkDrvApi::Process::OpenProcess] [ERR] OpenProcess by Kernel pid:4 err:2
[ArkDrvApi::Process::OpenProcess] [ERR] OpenProcess by Kernel pid:4 err:2
[OpenArk::onActionCheckUpdate] [INFO] requset server:http://upt.blackint3.com/openark/version.txt
[OpenArk::onActionCheckUpdate::::operator ()] [INFO] server responsed:{"appbd":"201906051417","appfsurl":"http://221.237.29.124:50200/openark/files","appurl":"https://github.com/BlackINT3/OpenArk/releases","appver":"1.0.0","err":0}
[OpenArk::onActionCheckUpdate::::operator ()] [INFO] local appver:1.1.0, build:202011191100
[OpenArk::onActionCheckUpdate::::operator ()] [INFO] OpenArk is latest.
[UNONE::ObLoadDriverW] [ERR] NtLoadDriver service:\Registry\Machine\System\CurrentControlSet\Services\OpenArkDrv64 err:c0000603
[Kernel::onClickKernelMode] [ERR] InstallDriver C:\Users\***\AppData\Local\Temp\OpenArkDrv64.sys err
[ArkDrvApi::Object::ObjectSectionEnumR3] [ERR] NtOpenDirectoryObject status:-1073741772
[ArkDrvApi::Object::ObjectSectionEnumR3] [ERR] NtOpenDirectoryObject status:-1073741766
[ArkDrvApi::Object::ObjectSectionEnumR3] [ERR] NtOpenDirectoryObject status:-1073741766
[UNONE::ObLoadDriverW] [ERR] NtLoadDriver service:\Registry\Machine\System\CurrentControlSet\Services\OpenArkDrv64 err:c0000603
[Kernel::onClickKernelMode] [ERR] InstallDriver C:\Users\***\AppData\Local\Temp\OpenArkDrv64.sys err
[UNONE::ObLoadDriverW] [ERR] NtLoadDriver service:\Registry\Machine\System\CurrentControlSet\Services\OpenArkDrv64 err:c0000603
[Kernel::onClickKernelMode] [ERR] InstallDriver C:\Users\***\AppData\Local\Temp\OpenArkDrv64.sys err
[UNONE::ObLoadDriverW] [ERR] NtLoadDriver service:\Registry\Machine\System\CurrentControlSet\Services\OpenArkDrv64 err:c0000603
[Kernel::onClickKernelMode] [ERR] InstallDriver C:\Users\***\AppData\Local\Temp\OpenArkDrv64.sys err
[UNONE::ObLoadDriverW] [ERR] NtLoadDriver service:\Registry\Machine\System\CurrentControlSet\Services\OpenArkDrv64 err:c0000603
[Kernel::onClickKernelMode] [ERR] InstallDriver C:\Users\***\AppData\Local\Temp\OpenArkDrv64.sys err
[UNONE::ObLoadDriverW] [ERR] NtLoadDriver service:\Registry\Machine\System\CurrentControlSet\Services\OpenArkDrv64 err:c0000603
[Kernel::onClickKernelMode] [ERR] InstallDriver C:\Users\***\AppData\Local\Temp\OpenArkDrv64.sys err
系统：Windows10 专业版 20H2 19042.1165
from openark.
GavinKing1995
commented on July 27, 2024
作者你好，我也发现了类似的问题，在点击进入内核模式时，没有反应。希望能帮忙看一眼，谢谢。这个是我的日志：
[UNONE::ObLoadDriverW] [ERR] RegSetValueW err:5 [UNONE::ObLoadDriverW] [ERR] RegSetValueW err:5 [UNONE::ObLoadDriverW] [ERR] RegSetValueW err:5 [UNONE::ObLoadDriverW] [ERR] NtLoadDriver service:\Registry\Machine\System\CurrentControlSet\Services\OpenArkDrv64 err:c0000160 [Kernel::onClickKernelMode] [ERR] InstallDriver C:\Users\CRAZYL~1\AppData\Local\Temp\OpenArkDrv64.sys err [UNONE::PsGetProcessPathW] [ERR] VirtualOpenProcess pid:16124 err:2 [UNONE::PsGetProcessPathW] [ERR] VirtualOpenProcess pid:16124 err:2 [UNONE::PsGetProcessPathW] [ERR] VirtualOpenProcess pid:16124 err:2 [UNONE::PsGetProcessPathW] [ERR] VirtualOpenProcess pid:16124 err:2用最新的版本试试。
若还报错，检查HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\OpenArkDrv64注册表键值是否被禁止。同样的问题，检查过注册表发现并没有这个键值。可否再提供些建议。谢谢。
OpenArk Console Copyright (C) 2019 BlackINT3 https://github.com/BlackINT3/OpenArk [UNONE::FsReadFileDataW] [WARN] C:\Users\***\AppData\Roaming\OpenArk\console\history.txt is empty file [ArkDrvApi::Process::OpenProcess] [ERR] OpenProcess by Kernel pid:4 err:2 [ArkDrvApi::Process::OpenProcess] [ERR] OpenProcess by Kernel pid:4 err:2 [OpenArk::onActionCheckUpdate] [INFO] requset server:http://upt.blackint3.com/openark/version.txt [OpenArk::onActionCheckUpdate::::operator ()] [INFO] server responsed:{"appbd":"201906051417","appfsurl":"http://221.237.29.124:50200/openark/files","appurl":"https://github.com/BlackINT3/OpenArk/releases","appver":"1.0.0","err":0} [OpenArk::onActionCheckUpdate::::operator ()] [INFO] local appver:1.1.0, build:202011191100 [OpenArk::onActionCheckUpdate::::operator ()] [INFO] OpenArk is latest. [UNONE::ObLoadDriverW] [ERR] NtLoadDriver service:\Registry\Machine\System\CurrentControlSet\Services\OpenArkDrv64 err:c0000603 [Kernel::onClickKernelMode] [ERR] InstallDriver C:\Users\***\AppData\Local\Temp\OpenArkDrv64.sys err [ArkDrvApi::Object::ObjectSectionEnumR3] [ERR] NtOpenDirectoryObject status:-1073741772 [ArkDrvApi::Object::ObjectSectionEnumR3] [ERR] NtOpenDirectoryObject status:-1073741766 [ArkDrvApi::Object::ObjectSectionEnumR3] [ERR] NtOpenDirectoryObject status:-1073741766 [UNONE::ObLoadDriverW] [ERR] NtLoadDriver service:\Registry\Machine\System\CurrentControlSet\Services\OpenArkDrv64 err:c0000603 [Kernel::onClickKernelMode] [ERR] InstallDriver C:\Users\***\AppData\Local\Temp\OpenArkDrv64.sys err [UNONE::ObLoadDriverW] [ERR] NtLoadDriver service:\Registry\Machine\System\CurrentControlSet\Services\OpenArkDrv64 err:c0000603 [Kernel::onClickKernelMode] [ERR] InstallDriver C:\Users\***\AppData\Local\Temp\OpenArkDrv64.sys err [UNONE::ObLoadDriverW] [ERR] NtLoadDriver service:\Registry\Machine\System\CurrentControlSet\Services\OpenArkDrv64 err:c0000603 [Kernel::onClickKernelMode] [ERR] InstallDriver C:\Users\***\AppData\Local\Temp\OpenArkDrv64.sys err [UNONE::ObLoadDriverW] [ERR] NtLoadDriver service:\Registry\Machine\System\CurrentControlSet\Services\OpenArkDrv64 err:c0000603 [Kernel::onClickKernelMode] [ERR] InstallDriver C:\Users\***\AppData\Local\Temp\OpenArkDrv64.sys err [UNONE::ObLoadDriverW] [ERR] NtLoadDriver service:\Registry\Machine\System\CurrentControlSet\Services\OpenArkDrv64 err:c0000603 [Kernel::onClickKernelMode] [ERR] InstallDriver C:\Users\***\AppData\Local\Temp\OpenArkDrv64.sys err
系统：Windows10 专业版 20H2 19042.1165
遇到了同样的问题[UNONE::ObLoadDriverW] [ERR] NtLoadDriver service:\Registry\Machine\System\CurrentControlSet\Services\OpenArkDrv64 err:c0000603
Win10企业版 21H1 19043.1165
from openark.
mikasaol
commented on July 27, 2024
签名的证书被吊销了
from openark.
autLory
commented on July 27, 2024
[UNONE::ObLoadDriverW] [ERR] NtLoadDriver service:\Registry\Machine\System\CurrentControlSet\Services\OpenArkDrv64 err:c0000603
[Kernel::onClickKernelMode] [ERR] InstallDriver C:\Users\lx\AppData\Local\Temp\OpenArkDrv64.sys err
[UNONE::ObLoadDriverW] [ERR] NtLoadDriver service:\Registry\Machine\System\CurrentControlSet\Services\OpenArkDrv64 err:c0000603
[Kernel::onClickKernelMode] [ERR] InstallDriver C:\Users\lx\AppData\Local\Temp\OpenArkDrv64.sys err
我也遇到这个问题，进不去内核模式
from openark.
Rascalpirate
commented on July 27, 2024
[UNONE::ObLoadDriverW] [ERR] NtLoadDriver service:\Registry\Machine\System\CurrentControlSet\Services\OpenArkDrv64 err:c0000603
[Kernel::onClickKernelMode] [ERR] InstallDriver C:\Users\WTT\AppData\Local\Temp\OpenArkDrv64.sys err
同是注册表内没有OpenArkDrv64，系统：Windows 10 版本号 20H2 操作系统内部版本 19042.1165
from openark.
andronoob
commented on July 27, 2024
from openark.
BlackINT3
commented on July 27, 2024
v1.2.0 fixed.
from openark.
owen118z
commented on July 27, 2024
1.2.2 也是这个问题
from openark.
Related Issues (20)
- 1.3.4 在无网络的情况下难以进入内核模式 HOT 4
- OpenArk v1.3.4 无法进入内核模式 HOT 2
- 64 位操作系统, 基于 ARM 的处理器进入内核报错 HOT 1
- 编译文档中下载链接失效
- 点击进入内核模式无反应 HOT 3
- 1.3.6 Kernel mode was detected as Trojan.
- WIN11 进入内核模式 无反应
- 差点被格机 HOT 1
- 希望支持高分屏缩放
- in file doc/build-openark.md,download link is not available
- 打开内核模式下载所需文件时无法下载
- HVCI模式代码区域内存读写改进
- 下载失败，错误:301是怎么回事？ HOT 1
- 进程的模块列表，点击【路径】这一列没有排序效果 HOT 1
- 最新版的win11刷不出热键占用了 HOT 4
- HelloGitHub 徽章计划
- 运行过旧版本的环境里再打开新版本会一直打不开 HOT 1
- "CopyTo..." function in "Kernel Storage" does not use highest privilege. HOT 1
- Ability to install tools to system HOT 1
- About LICENSE
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from openark.