How to remove Filemon driver from mem?

		Exetools > General > General Discussion
How to remove Filemon driver from mem?

11-01-2006, 02:42

Mkz

Friend

Join Date: Jan 2002

Posts: 98

Rept. Given: 0

Rept. Rcvd 2 Times in 2 Posts

Thanks Given: 5

Thanks Rcvd at 25 Times in 17 Posts

Check the sysinternals forums. There is (at least) a thread regarding this issue, and the quick answer is "You can't".
There is no 100% safe way of unloading a kernel driver, that's why the author didn't implement this.
Your options seem to be:
- reboot to unload the driver
- patch the app+driver to avoid detection whenever you load it
- code your own almost-safe way to unload the driver (?)

« Previous Thread | Next Thread »

Posting Rules
You may not post new threads You may not post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is Off HTML code is Off Forum Rules

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Filemon and Regmon on 64 bit windows	omidgl	General Discussion	2	10-24-2010 00:32

All times are GMT +8. The time now is 03:32.