detect memory leak by umdh.exe