Message 3 of 3
16 Mar 17 07:00
Join Date: 03 Mar 2008
Posts To This List: 319
Shutting down the entire filter manager will disrupt the entire system
because there might be many filters ( AVs, encryption ,virtualization
etc...) that are built to run withing the filter manager. All the MSFT
filter are based on filter manager now.
By shutting down the filter manager you will for sure disrupt the normal
behavior of the system.
If you have admin privileges then you can do whatever you want anyway
without having to stop the filter manager from working.
You can simply delete the filter. The filter may support manual instance
detach. So you can detach the filter from all the attached volumes. You
could also mark the start type of the filter service in registry as
disabled ( 4 ) this way the filter will not be loaded all together.
To unload it during run-time without the unload callback is not an option.
On Wed, Mar 15, 2017 at 6:29 PM, Scott Noone wrote:
> How can one unload a mini filter driver if it does not support the unload
> Disable the filter's service and reboot. This is the only supported way.
<...excess quoted lines suppressed...>