One of our clients is having an issue with the NDIS driver causing spikes in bandwidth. Don't ask me how, since we have 700 other machines with KAV installed and no issue, but they requested that we remove the driver from all of their workstations. I tried using the KPacker utility to simulate the uninstall of the NDIS filter which always tests fine on the same machine it's created on but when tested on another machine it either deletes the network adapters entirely or just screws it up and doesn't let you get into the adapter properties. I've even located the registry key and the system file (HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Network\{4d36e974-e325-11ce-bfc1-08002be10318}\{C477F579-9F31-474D-86CC-E1567F0BFD1D}\Ndi) and tried deleting it... caused the same results. The system file is klim6.sys. Attached below is the filter I'm talking about.
