Prevent driver disabling

Hello everyone. My question about driver service stopping.Like when i open my driver from process hacker i can stop it. Ok I can use DriverObject->Unload = NULL; But what happen when user restart system is there any way to accept restart notification to clean my global data?

AV services use the Windows “Protected Process” feature to avoid this. More here.

Peter

1 Like

Thank you Mr Viscarola!