I need to unload a driver (.sys) on Windows 2000/XP. I realize this is going to require an unorthodox approach, because API calls to do this probably aren't provided, but if I have to write a driver ...
The DRIVER UNLOADED WITHOUT CANCELLING PENDING OPERATION bug check error has an error value of 0x000000CE. This means that a driver failed to cancel pending ...
ndis.sys is sort of a "wrapper" around the NIC card driver, the various network protocol drivers like tcpip.sys, etc. No idea what pprocess.sys is, but you could look at the file's properties to see.