How does this meminfo tool able to access PFN Database from User mode ?
http://www.winsiderss.com/tools/meminfo/meminfo.htm#examples
It probably loads a driver using one of the standard tricks for doing
so in a mostly hidden fashion. Try running it from a network share,
that usually bollixes the whole thing.
Mark Roddy
On Thu, Feb 17, 2011 at 8:23 PM, wrote:
> How does this meminfo tool able to access PFN Database from User mode ?
>
> http://www.winsiderss.com/tools/meminfo/meminfo.htm#examples
>
> —
> NTDEV is sponsored by OSR
>
> For our schedule of WDF, WDM, debugging and other seminars visit:
> http://www.osr.com/seminars
>
> To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer
>
It uses undocumented system information classes added for SuperFetch. See
here:
http://www.alex-ionescu.com/?p=51
-scott
–
Scott Noone
Consulting Associate and Chief System Problem Analyst
OSR Open Systems Resources, Inc.
http://www.osronline.com
wrote in message news:xxxxx@ntdev…
How does this meminfo tool able to access PFN Database from User mode ?
http://www.winsiderss.com/tools/meminfo/meminfo.htm#examples