Archive for category HKLM

Identify Drivers Loading During Windows 7 Boot Process

This article is somewhat not complete, and it may contain some incorrect definitions, but it’s out there mainly for reference. Updates coming soon!


  1. Open Regedit and go to HKLM
  2. Expand HKLM\Select and look at the value of Current key
  3. Based on the value of Current key (1, 2 or 3), select the proper HKLM\System\ControlSet00x
  4. Expand HKLM\System\ControlSet00x\Control\Class
  5. Under Class you’ll get a list of drivers that load during the boot process of Windows 7
  6. In each driver entry, under the Class folder, look for the following keys: LowerFilters and UpperFilters – these are some of the drivers that load during the boot process


Leave a comment