windowswideopen.com

Technorati Tags: Disable filter driver , kernel mode driver

There are are times that you are troubleshooting Windows issues and need to uninstall an application with a kernel mode driver (e.g antivirus programs)to determine if it is the source of the problem. You can avoid uninstalling the app and preserve those precious settings by disable the kernel mode driver.

Here are the steps to disable a kernel mode filter driver:

1. Stop all services belonging to the application and set the startup type to manual or disabled.
2. Set the start registry key of the corresponding filter driver to 0×4 = Disabled. On a Windows 2000 system and beyond backup the HKLM\System hive before proceeding
3. Open HKLM\System\CurrentControlSet\Services and navigate to the relevant driver that you need to disable.
4. Modify the Start key to 0×4
5. Reboot the system

The driver should not be disabled.

In the event that you get a BSOD on boot then you can reverse you actions in Safe Mode.

Reference: Driver and Service Startup types:

0×0 Boot
0×1 System
0×2 Automatic
0×3 Manual
0×4 Disabled

See more tips at: WindowsWideOpen.com
Operating SystemOperating System

Filed under: Operating System