[Xitami] :: denial of service ::

[Thomas J. Hruska]

At 03:28 PM 10/25/2004 -0600, admin writeth:
>At 04:38 PM 10/25/2004 -0400, you wrote:
>>At 01:31 PM 10/25/2004 -0600, admin writeth:
>
>>When Windows starts swapping out memory
>
>If it does LOL
>As far I know Windows Explorer.exe should not require 225 Mb Ram at any one 
>time on a prescot chip.

Windows does start swapping after following its rules about when to use
swap space:

1)  When the Available memory goes to nil, start using system cache.
2)  When the system cache goes to nil, swap out memory of existing
processes to the hard drive to recover the system cache.
3)  Repeat step #2 until allowed to resume with #1.

Obviously, Windows isn't being terribly smart when to use swap.

Your case, however, seems really odd.  Explorer.exe loads in a ton of junk
at boot, when you first right-click, etc.  Try running Process Explorer to
see what DLLs are loaded in, and, IIRC, it also gives you the amount of
memory each one is using.  If it does, it will be a rough estimate, but
good enough to find the trouble DLL.  Explorer.exe doesn't do much - what
it loads, however, could do a lot - that's why a lot of trojans/etc. love
explorer.exe - they can hide inside the EXE and not be seen from Task Manager.


Thomas J. Hruska
shinelight@shininglightpro.com

Shining Light Productions
Home of the Nuclear Vision scripting language and ProtoNova web server.
http://www.slproweb.com/