keyboard filter windbg

My keyboard filter is causing a bugcheck so I am trying to remove the filter driver through windbg so that I can update the driver, I have tried “.reload \u driver.sys” but this doesn’t remove the filter from the kbdclass device stack.

.reload /u just unloads the driver from the debugger’s internal loaded
module list on the host, it does not change anything on the target.

Easiest way to update the driver is with .kdfiles:

https://www.osr.com/nt-insider/2014-issue3/updating-drivers-kdfiles/

-scott
OSR
@OSRDrivers

wrote in message news:xxxxx@ntdev…

My keyboard filter is causing a bugcheck so I am trying to remove the filter
driver through windbg so that I can update the driver, I have tried “.reload
\u driver.sys” but this doesn’t remove the filter from the kbdclass device
stack.

xxxxx@edu.salford.ac.uk wrote:

My keyboard filter is causing a bugcheck so I am trying to remove the filter driver through windbg so that I can update the driver, I have tried “.reload \u driver.sys” but this doesn’t remove the filter from the kbdclass device stack.

There is no way to unload a driver from an existing driver stack. Once
the stack is built, it stays built until the whole thing is torn down.
Can you boot into safe mode?


Tim Roberts, xxxxx@probo.com
Providenza & Boekelheide, Inc.