[Thanat0S]

Hello, I want to patch a rootkit ( I'm using a hex editor ) but when I try to load the rootkit parched the driverLoader says:
"the specified driver is invalid"
any ideas? or it's impossible...

[EP_X0FF]

Fix checksum.

[frank_boldewin]

fixing the checksum can be easly done with pe editors like petools or lordpe.

[feryno]

the checksum may be calculated using MapFileAndCheckSum exported from imagehelp.dll
http://msdn.microsoft.com/en-us/library ... 85%29.aspx
it is also possible to do it manually (let me know if you are interested)