FltUnloadFilter - NtDoc
Native API online documentation, based on the System Informer
(formerly Process Hacker) phnt
headers
// fltkernel.h
NTSTATUS FLTAPI FltUnloadFilter(
[in] PCUNICODE_STRING FilterName
);
View the official Windows Driver Kit DDI referenceNo description available.
A minifilter driver that has loaded a supporting minifilter driver by calling FltLoadFilter can unload the minifilter driver by calling FltUnloadFilter.
FilterName [in]Pointer to a UNICODE_STRING structure containing the minifilter driver service name that was passed to FltLoadFilter.
FltUnloadFilter returns STATUS_SUCCESS or an appropriate NTSTATUS value such as one of the following:
| Return code | Description |
|---|---|
| STATUS_FLT_DELETING_OBJECT | A matching minifilter driver was found, but it is already being torn down. This is an error code. |
| STATUS_FLT_FILTER_NOT_FOUND | No matching minifilter driver was found. This is an error code. |
A minifilter driver that has a dependency on another minifilter driver can unload that minifilter driver by calling FltUnloadFilter. This routine searches for a registered minifilter driver whose service name matches the given FilterName and calls that minifilter driver's FilterUnloadCallback (PFLT_FILTER_UNLOAD_CALLBACK) routine.
If the supporting minifilter driver did not register a FilterUnloadCallback routine, the call to FltUnloadFilter fails.
A minifilter driver cannot call FltUnloadFilter to unload itself.