CodeGuru Home VC++ / MFC / C++ .NET / C# Visual Basic VB Forums Developer.com
Results 1 to 4 of 4
  1. #1
    Join Date
    Dec 2001
    Location
    ROMANIA
    Posts
    30

    how to read physical memory on win NT/2k/XP ???

    hi there !
    i want to be able to read physical memory on win NT/2k/XP platforms...
    right now, i can read that memory on these platforms, but when i try to read memory but ONLY on an administrator account...when i try to run it on a guest account or a limited account it simply pulls me out of my program with no message at all...
    i have attached a small program to test reading the memory, and i hope that somebody can look at it and tell me if i am doing anything wrong, or what access should have the user to read the memory...i've tested the program on win2k...
    thanx a lot, and here are the sources (in the attached file)
    Attached Files Attached Files

  2. #2
    Join Date
    Dec 2001
    Location
    Ontario, Canada
    Posts
    2,236
    The user shouldn't have permission to write memory or read memory that doesn't belong to it. I don't really think that the administrator should have this permission either.

  3. #3
    Join Date
    May 2003
    Posts
    6
    Put this code in a device driver, and launch it like a service, make and app that comunicate with your driver, and there you can read the memory regardless the user that's logged on

  4. #4
    Join Date
    Apr 2003
    Posts
    1,755

    Smile

    In order to read physical memory, you have to be in administrative account. Take the advice of jhad in using a device driver if you want to overcome permissions.

    Go to http://www.internals.com/. They have the tool WinIO which is a driver implementing what you aare trying to accomplish.

    Hope this will help you

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  





Click Here to Expand Forum to Full Width

Featured