search

ksanchezcld / volatility

Automatically exported from code.google.com/p/volatility
GNU General Public License v2.0
1 stars 0 forks source link

winpmem-1.3.exe cannot load driver when run as local administrator #361

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago 
What steps will reproduce the problem?

When run from CLI as user Administrator I got this:

E:\winpmem-1.3>winpmem_1.3.exe output.raw
Driver Unloaded.
Error: StartService(), Cannot start the driver.
Driver Unloaded.

What version of the product are you using? 

winpmem-1.3

On what operating system?

Windows XP SP3

Original issue reported on code.google.com by jereinda...@gmail.com on 13 Nov 2012 at 9:27

GoogleCodeExporter commented 9 years ago

Original comment by jamie.l...@gmail.com on 13 Nov 2012 at 1:15

GoogleCodeExporter commented 9 years ago 
Hi Jamie,
  Sorry for this. There was a problem with the 32 bit driver on windows XP. It seems that you can not have a very large stack size on the 

I updated the download to version 1.3.1 to address this issue.

Thanks,
Michael.

Original comment by scude...@gmail.com on 13 Nov 2012 at 1:28

GoogleCodeExporter commented 9 years ago 
Cool, thanks Michael.  

jereindabox: can you try the latest version of winpmem which was just uploaded 
and see if that fixes your problem?

Original comment by jamie.l...@gmail.com on 13 Nov 2012 at 1:49

GoogleCodeExporter commented 9 years ago 
I confirm that version 1.3.1 fixes the problem.

Original comment by jereinda...@gmail.com on 13 Nov 2012 at 1:52

GoogleCodeExporter commented 9 years ago 
Awesome thanks!  Closing out the issue now.

Original comment by jamie.l...@gmail.com on 13 Nov 2012 at 1:53

GoogleCodeExporter commented 9 years ago 
I had the same issue with v. 1.4 on win7-64bit.
version unstable 1.4.1 seems to work

Original comment by scal...@gmail.com on 8 Nov 2013 at 3:17