The beauty of WinDivert's design is that it does not require any special installation or setup from a user. Instead, when the application needing its functions runs for the first time, WinDivert automatically loads its core component, the , into the system kernel.
The message "WinDivert driver cannot be installed — you must restart your computer" appears when software that uses the WinDivert packet-capture driver (commonly VPNs, network filtering tools, or traffic-modifying utilities) fails to load or update the kernel driver and the installer requests a reboot to complete driver installation or replacement.
: If you are on Windows 10/11, go to Windows Security > Device Security > Core Isolation and try turning off Memory Integrity .
) for 64-bit Windows or the 32-bit version for 32-bit systems. Stack Overflow For more technical details, you can refer to the official WinDivert Documentation on GitHub
using Microsoft.Win32;
Download the absolute latest version of the application triggering the error. Newer releases bundle updated, signed WinDivert binaries compatible with recent Windows security updates.
Check if the developer of the software you are using has released an update. Often, they will update the bundled WinDivert version to a newer build that is compatible with the latest Windows security patches.
WinDivert operates at the kernel level of your operating system. When an application utilizes WinDivert, it registers and starts a temporary kernel driver ( WinDivert.sys or WinDivert64.sys ).
Navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ . Look for any entry named WinDivert and delete it 1.2.2 . Summary Checklist Target Issue Full Restart Clears memory-locked driver files Run as Admin Fixes permission errors Delete .sys files Removes corrupt drivers Disable Sig Enforcement Allows unsigned driver loading The beauty of WinDivert's design is that it
| Step | Action | Expected Outcome | |------|--------|------------------| | 1 | Open cmd as administrator and run: sc query windivert | If exists, note STATE . If RUNNING , attempt sc stop windivert . | | 2 | Check pending file renames: reg query "HKLM\SYSTEM\CurrentControlSet\Control\Session Manager" /v PendingFileRenameOperations | If non-empty, especially with windivert paths, reboot is mandatory. | | 3 | List loaded drivers: fltmc filters | Look for windivert . If present but version mismatch, reboot needed. | | 4 | Verify driver file: dir C:\Windows\System32\drivers\windivert64.sys | If file exists but cannot be deleted/modified due to Access Denied , handle via takeown and icacls . |
The error message itself suggests restarting your computer. This simple step can often resolve issues related to system file corruption or conflicts with other software.
A previous instance of the software failed to shut down properly, keeping the .sys file locked in memory 1.2.4 .
Sometimes, your security software can be too eager to protect you. Antivirus programs, personal firewalls, and other security suites often monitor driver installations in real-time. They might mistakenly flag the WinDivert driver as a potential threat or interfere with its installation process, causing the operation to fail. : If you are on Windows 10/11, go
Because WinDivert operates at the kernel level (the core of your operating system), Windows treats it as a critical system driver. Consequently, Windows has strict rules about installing, updating, or removing this driver—often requiring a reboot to finalize changes.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinDivert Delete this entry and then restart your computer Fix WMI Errors
If Windows still refuses to load the driver, it might be due to security policies regarding unsigned drivers. Open the app in Windows. Go to Update & Security > Recovery . Under Advanced startup , click Restart now .
(Note: If it says the service is not running, proceed to the next step.) Delete the service registration completely: sc delete windivert Use code with caution. Under Advanced startup
How to Fix "WinDivert Driver Cannot Be Installed: You Must Restart Your Computer"
