how to analyze system crash(memory dump)of windows

最新推荐文章于 2015-03-07 21:02:55 发布

coolper

最新推荐文章于 2015-03-07 21:02:55 发布

阅读量614

点赞数

分类专栏： WINDOWS

本文链接：https://blog.csdn.net/coolper/article/details/12037021

版权

WINDOWS 专栏收录该内容

15 篇文章 0 订阅

订阅专栏

Here are simple instructions on how to do it:

1. Make sure that the memory was dumped. To configure it (in XP, in W2K it's similar):

  1.

     Start -> Control Panel -> System -> Advanced -> 'Startup and
     Recovery - click on the 'Settings' button

  2. Make sure under 'System failure' 'Automatically restart' is NOT
     checked; 'Write debugging information' should be set to 'Complete
     memory dump'. You may need to restart the OS.

2. After a BSOD occurred, wait until it is completely written before rebooting the OS. 3. After the OS completed booting, you can look at the memory dump (usually, under %SystemRoot%\memory.dmp - which is usually c:\windows\memory.dmp), using the Debugging Tools for Windows (install from http://www.microsoft.com/whdc/devtools/debugging/installx86.Mspx ). Note! If you use it on 64bit OS, you need the amd64 version). 4. Open WindDbg (Start->All Programs->Debugging Tools for Windows ->WinDbg), go to File->Symbol File Path and enter: SRV*http://msdl.microsoft.com/download/symbols If you have your own symbols as well, use: srv*c:\symbols*http://msdn.microsoft.com/download/symbols

5. Open the crash dump using File->Open Crash Dump

6. Run the command '!analyze -v' (this may take a while).

Copy the whole output - it may be relevant.

阅读(309) | 评论(0) | 转发(0) |

上一篇：windows service 说明

下一篇：compile spice qxl driver for windows