Configuration: Enabling Kernel Mode Driver
To gain full access to system information and overcome potential permission restrictions, especially when trying to inspect protected system processes (like csrss.exe, antivirus processes) or dealing with modern Windows security features (Windows 11+), enabling System Informer's Kernel Mode Driver is often necessary and highly recommended.
Download and Install: Obtain the latest version of System Informer from the official source (
https://systeminformer.sourceforge.io/). Ensure you download the setup or binary files, not just the source code.Run as Administrator: Always launch System Informer with administrative privileges (Right-click -> Run as administrator). This is required to install and utilize the kernel driver and access all process information.
Access Options: Once running, navigate to the main menu: Hacker > Options.
Enable Kernel Driver: In the Options window, go to the General tab. Find and check the box labeled Enable Kernel-Mode Driver. Click OK.
Restart System Informer: Close the application completely and restart it again as administrator. The kernel driver should now load (you might see a brief UAC prompt or notification). If you encounter errors stating the driver couldn't load, it might be temporarily incompatible with a very recent Windows security update (developers usually update it quickly) or blocked by aggressive third-party security software.
Last updated