[prev in list] [next in list] [prev in thread] [next in thread] 

List:       focus-ms
Subject:    RE: Flushing DLLs from memory
From:       "Kinsey, Robert" <Robert.Kinsey () Veridian ! com>
Date:       2001-10-23 16:29:50
[Download RAW message or body]

HC, & all:

---------snip-------------
I've been looking into 'live' forensics issues on
NT/2K, and one thing I'm not having any luck with is
how to flush DLLs from memory.

---------snip-------------

I've recently found two tools on the (may God forgive me) PC World download
site.  They are freeware but both (i *think*) have a "pro" version for a few
$'s.  One is called Clean System (???) which hunts down the dlls in the dll
cache and compares against the programs installed.  Any DLL that is not
actively associated with an installed program is listed for you.  Those
listed can be moved to a \backupdll dir on Win(dows/Nt)\system(32)\ dir.
The software cautions you against removing the files right away.

The other tool is a RAM mgmt tool that also removes any stale DLL out of the
cache/RAM.  It is called CacheMan (there is another one called WinRAM
Turbo).  Seems to perform as advertised - has a straight forward GUI -
allows you to adjust the amount of RAM optimized.

These sound like what you are looking for.

rk

[prev in list] [next in list] [prev in thread] [next in thread]