MemInfo is a tool to query information on the state of the memory manager page lists, page frame number (PFN) database entries, per-component and per-process memory usage, and for mapping virtual to physical addresses (for certain kinds of kernel-mode pointers).
It can also display the physical memory ranges available for use by Windows and reported by the BIOS and/or ACPI tables.
MemInfo can help detect bad or damaged memory sticks by displaying the size of the bad page list, as well as help in detecting certain kinds of malware or rootkits by showing processes that tools other than the kernel debugger may not show as present. It can also be used to diagnose certain situations where the number of memory available to Windows is different from the amount of memory installed on the system.^ TOP
See this blog entry for some specific usage scenarios for MemInfo.
usage: meminfo [-a][-u][-r][-s][-p page frame index][-v virtual address]
Dump full information about each page in the PFN database.
Show summary page usage information for the system.
Show valid physical memory ranges detected.
Display summary information about the pages on the system.
Physical page number to display information about.
Show generic information about the specified virtual address, including the corresponding physical address.^ TOP
This command displays the PFN entry for the virtual address 0xFFDFF000:
meminfo -v 0xFFDFF000
To display the PFN entry for the physical address 0x1BC000:
meminfo -p 0x1BC
To view memory usage for Explorer:
meminfo -u | findstr /i explorer.exe
To check for damaged or bad memory:
meminfo -s | findstr /i bad^ TOP
You can download a .zip file containing both the 32-bit and 64-bit versions of MemInfo from this link (183kb).
Please note that MemInfo requires Windows Vista or higher as well as full (elevated) administrative privileges.