Help Me Find My Memory Leak

[tinjaw]

I want to find the memory leak that plagues my laptop. Explorer.exe will grow to nearly 1GB. I am almost positive it is a shell extension, but I don't know how to determine which one it is except to selectively turn them on and off. Using Sysinternals/Microsoft Autoruns I can see which shell extensions are loaded and I can selectively turn them on and off.

However, I know there are several gurus around here than love the low level stuff and would like to solicit their advice on how I should go about going all CSI on this thing.

How do I find out what is leaking? Is there some trick I can use via OllyDbg? Show me the way to enlightenment.

[Lashiec]

OK, I'll try my hand at this one. A tool that its developer claims it's useful for this work is HeapMemView. Give it a try. And I suppose you can use Process Explorer in combination with Process Monitor to pinpoint the possible culprit, using the performance graph of Process Explorer (it logs "Private Bytes" history, along with a timeline) and Process Monitor to trace the app(s) working at that point time (and what are they doing). Process Monitor also has "Boot Logging", but that one could be a nightmare to filter...

If it is a shell extension, it had to be leaking like mad. Well, I hope this can help, at least until f0dder comes along

[Cpilot]

Easy Detection of Memory Leaks
You'll have to register to download the project.