how to read virtual memory


  1. Posts : 24
    Windows 7 64bit
       #1

    how to read virtual memory


    Hi,

    Can anyone please let me know how the one may read files from virtual memory(pagefile.sys)? Is there a software to read all files from this file in human readable form?
      My Computer


  2. Posts : 5,642
    Windows 10 Pro (x64)
       #2

    What is it you are trying to do? Furthermore, Virtual Memory is more then just the page file.
      My Computer


  3. Posts : 49
    Windows 7 Ultimate x64
       #3

    Winuser said:
    Hi,

    Can anyone please let me know how the one may read files from virtual memory(pagefile.sys)? Is there a software to read all files from this file in human readable form?
    Go To: Computer > System Properties > Advanced System Settings > Performance > Settings > Virtual Memory | Hope That Helped! :)
      My Computer


  4. Posts : 49
    Windows 7 Ultimate x64
       #4

    zsxd45 said:
    Winuser said:
    Hi,

    Can anyone please let me know how the one may read files from virtual memory(pagefile.sys)? Is there a software to read all files from this file in human readable form?
    Go To: Computer > System Properties > Advanced System Settings > Performance > Settings > Virtual Memory | Hope That Helped! :)
    After Performance click advanced then virtual memory is at the bottom.
      My Computer


  5. Posts : 24
    Windows 7 64bit
    Thread Starter
       #5

    zsxd45, how at Computer > System Properties > Advanced System Settings > Performance > Settings > Virtual Memory I am supposed to read Virtual File memory file?
    I wasnt asking about tweaking memory size.
      My Computer


  6. Posts : 5,795
    Windows 7 Ultimate x64 SP1
       #6

    What is it you are trying to do, or why do you think you need to access some kind of information sotred in that file?
      My Computer


  7. Posts : 24
    Windows 7 64bit
    Thread Starter
       #7

    DeaconFrost said:
    What is it you are trying to do, or why do you think you need to access some kind of information sotred in that file?
    There are a number situations where the one would need such a tool.
    For example you are sitting behind your desktop and electricity goes off/or PC freezes/you need to debug something/etc and the only way to recover unsaved work would be to try to look over virtual memory file(considering the temp files etc arent available).
      My Computer


  8. Posts : 5,642
    Windows 10 Pro (x64)
       #8

    You would need very special software what is tailored to a very specific application to recover anything of use from raw memory. Data can be fragmented, broken into pieces, or encoded in some bizarre format. As well the contents of RAM would also have to be in the pagefile which may not be the case.

    Such a tool doesn't exists because it would need to be very specific. However, you can peek in side application's memory by using debugging tools, like Process Explorer.

    Furthermore, Virtual Memory does not mean it is in the pagefile.
      My Computer


  9. Posts : 24
    Windows 7 64bit
    Thread Starter
       #9

    logicearth said:
    You would need very special software what is tailored to a very specific application to recover anything of use from raw memory. Data can be fragmented, broken into pieces, or encoded in some bizarre format. As well the contents of RAM would also have to be in the pagefile which may not be the case.

    Such a tool doesn't exists because it would need to be very specific. However, you can peek in side application's memory by using debugging tools, like Process Explorer.
    It seems that scuh a powerful tool indeed exist MANDIANT: Intelligent Information Security | Free Software

    Furthermore, Virtual Memory does not mean it is in the pagefile.
    Elaborate please.
      My Computer


  10. Posts : 5,642
    Windows 10 Pro (x64)
       #10

    Winuser said:
    It seems that scuh a powerful tool indeed exist
    That does not do what you asked for it. Sure it lets you view memory, the raw data.

    Elaborate please.
    Mysteries of Windows Memory Management Revealed, Part 1 of 2 | PDC 2010 | Channel 9
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 17:54.
Find Us