Can I remove BootCamp HFS+ driver

So, I have an iMac 27" Late 2012, and I have just installed Windows 10 Home 64Bit through BootCamp. BootCamp comes along with several "support software", useful drivers made for Windows and Apple hardware. I have recently noticed that one of the drivers mounts and makes read-and-writeable drives that are formatted in HFS+, including my Mac drive (which appears read-only) and an external HDD I make backups to. Since I'm afraid of Windows Ransomware, I'd like to remove any access to HFS+ drivers from Windows side of things. Is there any way to remove (or at least disable) the driver that enables HFS+?

Solution 1:

AFAIK the Apple HFS+ drivers are read-only. You may have installed another read/write driver like Paragon.

To remove Apple HFS+ Driver:

1. Browse to C:\Windows\System32\drivers\
2. Move AppleHFS.sys & AppleMNT.sys to the Recycle Bin

3. Create a Remove_AppleHFS.reg file with a text editor like NotePad and the following content:

   Windows Registry Editor Version 5.00
   
   [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\AppleHFS]
   
   [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\AppleMNT]
   

   You may have to add a trailing empty line.

   Merging a reg file with the registry should work as following:

   • Click on Start and then Run...
   • Type in regedit, and then press OK
   • In regedit, click on File, and then Import
   • Enter the filename or otherwise locate the ".reg" file you want to enter, and press OK
   • The contents of that ".reg" file will be entered into the registry.

4. Restart