Windivert Driver Cannot Be Installed You - Must Restart Your Computer __hot__

How to Fix "WinDivert Driver Cannot Be Installed: You Must Restart Your Computer"

If you are seeing the error "WinDivert driver cannot be installed; you must restart your computer," you’ve likely encountered a stubborn roadblock while trying to run software like GoodbyeDPI, certain VPNs, or network traffic injectors.

The frustrating part? Often, restarting your computer doesn’t actually fix it. This error usually stems from a driver conflict, leftover files from a previous installation, or Windows security blocking the driver from loading.

Here is a comprehensive guide to clearing this error and getting your software back up and running. 1. The Basic Restart (With a Twist)

Before diving into technical fixes, try a "Cold Boot." Windows 10 and 11 use a feature called Fast Startup, which saves the state of drivers to the disk instead of fully refreshing them during a "Shut Down."

The Fix: Don’t just click "Shut Down." Click Restart. This forces Windows to clear the kernel and reload all drivers, including WinDivert. 2. Manually Remove Old WinDivert Services

The most common cause is a previous instance of the WinDivert driver being "marked for deletion" but still hanging in the system's memory. Open the Command Prompt (CMD) as an Administrator.

Type the following command and hit Enter:sc stop windivert(It’s okay if it says the service isn't running.) Type this command and hit Enter:sc delete windivert How to Fix "WinDivert Driver Cannot Be Installed:

If you have used different versions of the driver, repeat this for windivert1.4 or windivert2.2 (depending on the version mentioned in your error). 3. Clear the Temporary Driver Files

WinDivert often extracts itself to your System32 folder or keeps a temporary handle in your Temp folder. Navigate to C:\Windows\System32\drivers. Look for a file named WinDivert64.sys or WinDivert.sys.

Delete it. (Note: You may need to restart in Safe Mode if the system says the file is currently in use).

Clear your temp folder by pressing Win + R, typing %temp%, and deleting the contents. 4. Check for Anti-Malware Interference

Since WinDivert interacts directly with the network stack, many Antivirus programs and Windows Defender flag it as "Potentially Unwanted Software" or a "Rootkit."

The Fix: Temporarily disable your real-time protection. If the software works afterward, you will need to add the folder containing your application (and the WinDivert.dll / WinDivert64.sys files) to your Antivirus Exclusion List. 5. Verify Digital Signature Requirements

Modern versions of Windows (especially 64-bit) require all drivers to be digitally signed. If you are using an older version of a tool (like an old GoodbyeDPI build), the WinDivert driver signature might be expired or revoked. Solution 2: Delete Leftover Driver Files If a

The Fix: Ensure you are using the latest version of the software that uses WinDivert. Developers frequently update the driver to ensure it complies with the latest Windows security certificates. 6. Check for Multiple Instances

If you are trying to run two different programs that both use WinDivert (e.g., a gaming VPN and a censorship circumvention tool), they will clash. WinDivert generally cannot be "installed" by two different processes at the exact same time.

The Fix: Close all network-related tools and try running only one at a time. Summary Checklist Restart (use the Restart button, not Shut Down). Delete the service via CMD (sc delete windivert). Update your software to the latest version. Exclude the folder from your Antivirus.

By following these steps, you should clear the "Must Restart" loop and allow the driver to hook into your network stack correctly.

Are you seeing a specific error code like 1722 or 5 alongside this message, or did this occur immediately after a Windows Update?

Solution 2: Delete Leftover Driver Files

If a restart doesn't help, remnants of a previous WinDivert installation are likely conflicting with the new one. Windows is detecting the old "signed" driver and refusing to overwrite it until a reboot clears the memory—except the reboot never clears the file.

Steps to clear the driver cache:

1. Close the application giving you the error.
2. Navigate to your C: drive.
3. Search for files named WinDivert.sys, WinDivert64.sys, or WinDivert32.sys.
   • Common locations include the application folder itself or C:\Windows\System32\drivers.
4. Delete these .sys files.
5. Also look for WinDivert.dll and WinDivert.inf in the application folder and delete them.
6. Restart your computer (refer to Solution 1 for a "real" restart).
7. Launch the application again; it should regenerate the driver cleanly.

Solution 1: The "Real" Restart (Fast Startup Issue)

This is the most common reason the error persists. By default, Windows 10 and 11 use a feature called Fast Startup. When you click "Shut Down," Windows doesn't actually perform a full cold boot; it saves the system state to a file to load faster next time.

If the driver installation is stuck in a "pending" state, a standard shutdown won't clear it.

How to do a "Hard" Restart:

1. Open the Start Menu.
2. Click the Power button.
3. Hold down the Shift key on your keyboard and click Restart.
4. Keep holding Shift until the computer boots into the "Choose an option" screen.
5. Select Troubleshoot > Advanced options > UEFI Firmware Settings (or Startup Settings).
6. If you chose Startup Settings, press 4 or F4 to boot into Safe Mode.
7. Once in Safe Mode, restart the computer normally.

Alternatively, open Command Prompt as Administrator and type: shutdown /s /f /t 0 to force a complete shutdown.

2.1 Pending File Operations

Windows maintains a PendingFileRenameOperations registry key (under HKLM\SYSTEM\CurrentControlSet\Control\Session Manager). If a previous installation attempted to overwrite windivert64.sys but the file was in use, Windows schedules a replacement on next reboot. Subsequent installers detect this pending operation and demand a reboot before proceeding.

What is WinDivert?

Before we fix it, it helps to know what it is. WinDivert is a user-mode packet capture/divert driver. It allows software to intercept, filter, and modify network traffic on your Windows machine. It is a legitimate tool used by many open-source and commercial applications to manage network flows without requiring a complex kernel-mode driver.

However, because it interacts deeply with the Windows networking stack, Windows protects it aggressively. If a previous installation attempt failed, or if Windows Update installed a generic driver over it, the system puts a "lock" on the driver that requires a reboot to clear. Close the application giving you the error

2. Run the application as Administrator

WinDivert requires kernel‑level access. Right‑click the program that uses WinDivert and select Run as administrator. If it’s a VPN or tool that starts automatically, set its shortcut or executable to always run as admin.