View list of installed drivers

-


I Msinfo32.exe

 

Software Environment - System Drivers

 



 














List of loaded drivers :  [Started] "Yes"

Kernel Driver List :  [Type] "Kernel Driver"

 

Driver File :  [File]



 

 

II Registry

 

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services















 


ACPI Driver













 

III Folder

 

C:\Windows\System32\drivers

 

 



______________________________________________________________________________________________________

desc

 

 

View list of installed drivers

 

 

You can view the list of installed (registered) drivers by running Msinfo32.exe in the Run

dialog box of the Start menu.

 

Software Environment - System Drivers



 


 




 








The list of currently loaded drivers is displayed as "Yes" in the Started column.

 

The type of driver can be checked through the Type column.  ex) "Kernel Driver"

 

The driver file (.sys) can be found through the File column.

 

Additionally, you can obtain information such as driver name, status, and startup mode.

 

 

The list of drivers displayed by Msinfo32.exe comes from the registry key below.

 

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services

 
















 

 

The contents displayed by selecting ACPI, one of the installed drivers, are as follows.

 

ACPI Driver


 

The type is kernel driver (Type 1) and the driver file is ACPI.sys...

 

Drivers and Windows services are registered together in the Services key.

 

You can distinguish these two by the Type value.

 

If the Type value is 0x10(16), 0x20(32), it is a Windows service, and if it is 1,2,3,4, it is a device driver.

 

 

Most driver files are located in the System32\drivers folder.

 





 

 

______________________________________________________________________________

 

System Internals

System Internals (developer edition)

 

 

Popular posts from this blog

CPU Architecture & Authority Control

-
Image
  General register designations.       ______________________________________________________________________________________________ Till physical address & authority control   ___________________________________________________________________________________________________   Segment Descriptor : 8 Byte size       Content      ___________________________________________________________________________________________________ Segment Descriptor Table       _asm  lgdt  [GDT]       GDTR       __________________________________________________________________________________________ x64    __________________________________________________________________________________________                     ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ explains     Till RAM  & Authority control (of Intel Processor)             --------------------------------------------------------------------------------------------    Process  →   Segment Descriptor   →   Paging   →   RAM (physical address)          
Read more

Known DLLs

-
Image
Certain operating system-supplied DLLs get special treatment. These are called Known DLLs. Operating system always looks for them in the same directory HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs _____________________________________________________________________ LoadLibrary(“abc”)      : search “abc.dll” (normal search rules) LoadLibrary(“abc.dll”)  : search KnownDLLs Registry, ValueName “abc”     LoadLibrary() and LoadLibraryEx(), If you are passing a DLL name that includes the .dll extension like "abc.dll", search KnownDLLS Registry ValueName "abc" If you are passing a DLL name without the .dll extension like "abc", search "abc.dll" using the normal search rule. Known DLLs     Shows the values in the registry key below   HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\ KnownDLLs     __________________________________________________________________________________________________________
Read more

lua command (EnableLUA)

-
Image
Windows actually only grants limited privileges to administrator permission accounts.  You can remove these restrictions by opening the registry editor and specifying the EnableLUA value to 0. Even so, it doesn't seem like you're getting all the privileges  like a  Linux root account, but you can still use most of them. EnableLUA HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System       If you type 'lua' in the System Internals command line, it shows the current value, If the current value is 1, you can enter 'lua off' to change it to 0. System Internals must be run with administrator privileges, and if the value changes, a reboot is requested. _____________________________________________________________________ lua off (0, false) :  set EnableLUA value to 0 lua on (1, true) :  set EnableLUA value to 1 lua code  :    code used lua kn  :    knowledge _____________________________________________________________________ cf) User Account C
Read more