none
PROCEXP141.SYS

    Question

  • After installing Process Explorer (or possibly another Sysinternals utility), the procexp141.sys driver is loaded at OS start and is related to the LEGACY_PROCEXP141 Registry key in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_PROCEXP141.
     
    Deleting this key doesn't keep this driver from being loaded; the key is recreated on OS start.  Additionally, this driver does not appear in system32\drivers.
     
    Is it possible to get rid of this driver?
     
    Why does it not appear in system32\drivers?
     
    Thanks.
    Thursday, December 1, 2011 12:44 PM

All replies