Navigate to: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinDivert
What are you trying to run? (e.g., GoodbyeDPI, a specific VPN, or custom software) Which Windows version are you currently using?
If your software uses a specific version of WinDivert (like version 1.4 or 2.2), the service might be named accordingly. Try running these variations if the basic command fails: sc delete WinDivert1.4 sc delete WinDivert2.2 Use code with caution.
Open (or your third-party antivirus software). Go to Virus & threat protection > Protection history .
WinDivert operates as a kernel-level driver ( WinDivert32.sys or WinDivert64.sys ). Because it interacts directly with the network stack, Windows imposes strict security and operational constraints. The "restart your computer" loop generally stems from four specific system conditions: WinDivert not working on Windows 10 20H2 #253 - GitHub Try running these variations if the basic command
Also check that C:\Windows\System32\drivers\ is writable and not corrupted.
To identify which program is currently using the driver, open Task Manager , go to the Performance tab, and open Resource Monitor . In the CPU tab, search for "WinDivert" under Associated Handles to see which apps need to be closed. WinDivert not working on Windows 10 20H2 #253 - GitHub
Some security tools block dynamically loading kernel drivers:
The conflict could be caused by a background program, such as an antivirus. WinDivert operates as a kernel-level driver ( WinDivert32
are all in the same folder as your application's executable. Architecture Match : Ensure you are using the 64-bit driver ( WinDivert64.sys
Open the Windows Registry Editor by pressing Win + R , typing regedit , and hitting Enter .
The application lacks the administrative authority required to install a kernel driver.
immediately after this step to ensure the kernel resets. Check for Driver Signing & Security In other cases
Sometimes the "restart your computer" part of the error message is literal. Windows may have a from a previous update that is holding a lock on system files, thus blocking any new driver installation. In other cases, residual registry keys from a previous installation of WinDivert can interfere with a new installation, leading to errors like code 433.
WinDivert (Windows Packet Divert) is a powerful user-mode packet interception library used by various network applications, VPNs, proxies (such as GoodbyeDPI or Cl clash), and bandwidth managers. Because it operates at the kernel level, installing and starting the driver requires strict interaction with the Windows Service Control Manager.
Many applications extract the WinDivert.sys file to your system's temporary directory during execution. If this file becomes corrupted, installation fails. Press Windows Key + R to open the Run dialog box. Type %temp% and press .
The driver file itself is stored in the system directory. Navigate to C:\Windows\System32\drivers and look for any of the following files: