Crash Dump Analysis View previous topic :: View next topic  


NFOHump.com Forum Index - Operating Systems
Page 1 of 2 Goto page 1, 2  Next
[sYn]
[Moderator] Elitist



Posts: 8374
PostPosted: Sun, 3rd Apr 2011 13:54    Post subject: Crash Dump Analysis
I figured I would offer up my services in crash dump analysis to you guys, I can't promise I'll be able to figure them out but the more I get to look at the better I'll be Wink!

If you want me to take a look at any dumps, email them over to dumps@poweredoff.com. A full kernel dump would be better than a minidump but obviously they're going to be a fair bit bigger.. If you have a full kernel dump and want to send it over, upload it to a file storage service and just email me the link!


Last edited by [sYn] on Mon, 2nd May 2011 01:51; edited 1 time in total
Back to top
Frant
King's Bounty



Posts: 24555
Location: Your Mom
PostPosted: Sun, 3rd Apr 2011 14:08    Post subject:
Usenet okay for dumps?

Ph'nglui mglw'nafh Cthulhu R'lyeh wgah'nagl fhtagn!

"The sky was the color of a TV tuned to a dead station" - Neuromancer
Back to top
[sYn]
[Moderator] Elitist



Posts: 8374
PostPosted: Sun, 3rd Apr 2011 17:40    Post subject:
Aye, not a problem my end. Might be an idea to password protect it though as dumps may give away information about your machine (although, not a huge amount apart from processes/services running on the box).
Back to top
Theescapist




Posts: 4107
Location: Manchester U.K
PostPosted: Sun, 30th Oct 2011 17:37    Post subject:
This is what i need syn, but how do i gather a kernal dump?

Ryzen 5 3600 cpu@3.60 Mhz.
hyper x 32 gb ddr 4 memory.
Msi Carbon gaming pro ac motherboard.
Evga 600 psu.
Msi Armour rx 8 gb 5700 Graphic card.
Ps4 Standard 500gb.
Lg 4k 42 inch tv.
Oculus Quest 2.
Back to top
human_steel




Posts: 33269
PostPosted: Sun, 30th Oct 2011 18:01    Post subject:
You have to have a minidump folder in the windows folder in your system partition...
Back to top
TSR69
Banned



Posts: 14962
Location: Republic of the Seven United Provinces
PostPosted: Sun, 30th Oct 2011 18:21    Post subject:
And how does one change it to full kernel dump?

Formerly known as iconized
Back to top
human_steel




Posts: 33269
PostPosted: Sun, 30th Oct 2011 18:31    Post subject:
Confused
Back to top
TSR69
Banned



Posts: 14962
Location: Republic of the Seven United Provinces
PostPosted: Sun, 30th Oct 2011 18:46    Post subject:
[sYn] wrote:
A full kernel dump would be better than a minidump but obviously they're going to be a fair bit bigger..

Formerly known as iconized
Back to top
WhiteBarbarian




Posts: 6006
Location: Russia
PostPosted: Sun, 30th Oct 2011 19:22    Post subject:


System Control Panel --> Advanced system settings --> tab "Advanced", "Settings..." button from "Startup and Recovery" group.
Back to top
PumpAction
[Schmadmin]



Posts: 26759
PostPosted: Sun, 30th Oct 2011 22:01    Post subject:
Hey, I know, a very nubish question, but why exactly would you need something like this? Smile

=> NFOrce GIF plugin <= - Ryzen 3800X, 16GB DDR4-3200, Sapphire 5700XT Pulse
Back to top
TSR69
Banned



Posts: 14962
Location: Republic of the Seven United Provinces
PostPosted: Sun, 30th Oct 2011 22:21    Post subject:
...


Last edited by TSR69 on Mon, 10th Dec 2018 00:28; edited 3 times in total
Back to top
garus
VIP Member



Posts: 34200
PostPosted: Sun, 30th Oct 2011 22:28    Post subject:
snip


Last edited by garus on Tue, 27th Aug 2024 21:38; edited 1 time in total
Back to top
Mister_s




Posts: 19863
PostPosted: Mon, 31st Oct 2011 09:32    Post subject:
Samaritans collect dumps? Crazy people.
Back to top
PumpAction
[Schmadmin]



Posts: 26759
PostPosted: Mon, 31st Oct 2011 10:39    Post subject:
garus wrote:
PumpAction wrote:
Hey, I know, a very nubish question, but why exactly would you need something like this? Smile


Because he is a good Samaritan?

Huh? No I asked why one would need this service in the first place:)
Back to top
Theescapist




Posts: 4107
Location: Manchester U.K
PostPosted: Mon, 31st Oct 2011 23:36    Post subject:
WhiteBarbarian wrote:


System Control Panel --> Advanced system settings --> tab "Advanced", "Settings..." button from "Startup and Recovery" group.


Ok I've found that thx, now how do i save the kernal file to view it and upload it somewhere?

Ryzen 5 3600 cpu@3.60 Mhz.
hyper x 32 gb ddr 4 memory.
Msi Carbon gaming pro ac motherboard.
Evga 600 psu.
Msi Armour rx 8 gb 5700 Graphic card.
Ps4 Standard 500gb.
Lg 4k 42 inch tv.
Oculus Quest 2.
Back to top
TSR69
Banned



Posts: 14962
Location: Republic of the Seven United Provinces
PostPosted: Mon, 31st Oct 2011 23:40    Post subject:
You need to crash your system 1st. Wink

Formerly known as iconized
Back to top
Theescapist




Posts: 4107
Location: Manchester U.K
PostPosted: Tue, 1st Nov 2011 22:19    Post subject:
Problem Event Name: BlueScreen
OS Version: 6.1.7600.2.0.0.256.1
Locale ID: 2057

Additional information about the problem:
BCCode: 124
BCP1: 0000000000000000
BCP2: FFFFFA8004D2A8F8
BCP3: 0000000000000000
BCP4: 0000000000000000
OS Version: 6_1_7600
Service Pack: 0_0
Product: 256_1

Files that help describe the problem:
C:\Windows\Minidump\110111-25506-01.dmp
C:\Users\xxxc\AppData\Local\Temp\WER-32947-0.sysdata.xml

Read our privacy statement online:
http://go.microsoft.com/fwlink/?linkid=104288&clcid=0x0409

If the online privacy statement is not available, please read our privacy statement offline:
C:\Windows\system32\en-US\erofflps.txt


Thats the error message i got when it restarted 'again'.

Ryzen 5 3600 cpu@3.60 Mhz.
hyper x 32 gb ddr 4 memory.
Msi Carbon gaming pro ac motherboard.
Evga 600 psu.
Msi Armour rx 8 gb 5700 Graphic card.
Ps4 Standard 500gb.
Lg 4k 42 inch tv.
Oculus Quest 2.
Back to top
WhiteBarbarian




Posts: 6006
Location: Russia
PostPosted: Tue, 1st Nov 2011 23:31    Post subject:
Minidump will be in C:\Windows\Minidump\110111-25506-01.dmp file. If you change setting to full dumps, by default it will go to C:\Windows\MEMORY.DMP

Now, for [sYn] to do the analysis you need to provide him with either of these dump files.



Last edited by WhiteBarbarian on Tue, 1st Nov 2011 23:33; edited 1 time in total
Back to top
human_steel




Posts: 33269
PostPosted: Tue, 1st Nov 2011 23:32    Post subject:
Just say the error code it spews out.
Back to top
Theescapist




Posts: 4107
Location: Manchester U.K
PostPosted: Wed, 2nd Nov 2011 12:07    Post subject:
Heres that file.
http://www.mediafire.com/?bsj3xs25kqb0s7e

Hope it's done right?
Thx.

Ryzen 5 3600 cpu@3.60 Mhz.
hyper x 32 gb ddr 4 memory.
Msi Carbon gaming pro ac motherboard.
Evga 600 psu.
Msi Armour rx 8 gb 5700 Graphic card.
Ps4 Standard 500gb.
Lg 4k 42 inch tv.
Oculus Quest 2.
Back to top
Sin317
Banned



Posts: 24322
Location: Geneva
PostPosted: Wed, 8th Feb 2012 23:57    Post subject:
http://www.mediafire.com/?uaq6uglow64w7rz dumpfile

dump file after bsod caused by bf3.exe, hope someone can find something in there Sad
Back to top
[sYn]
[Moderator] Elitist



Posts: 8374
PostPosted: Thu, 9th Feb 2012 21:12    Post subject:
WHEA_UNCORRECTABLE_ERROR (124)

As its just a minidmp there isn't a huge amount of information in there (no loaded drivers list, hardware information, memory dump, etc..). The error was caused by a hardware failure that couldn't be recovered from, most probably a driver crashing.. Could be caused by almost anything, but a good step would be to update your GFX card drivers, monitor its temps and keep track of how often the crash occurs. If it happens quite a lot it might be worth considering uploading a full memory dump.. but thats going to be multiple GB's of data..
Back to top
Sin317
Banned



Posts: 24322
Location: Geneva
PostPosted: Thu, 9th Feb 2012 21:18    Post subject:
[sYn] wrote:
WHEA_UNCORRECTABLE_ERROR (124)

As its just a minidmp there isn't a huge amount of information in there (no loaded drivers list, hardware information, memory dump, etc..). The error was caused by a hardware failure that couldn't be recovered from, most probably a driver crashing.. Could be caused by almost anything, but a good step would be to update your GFX card drivers, monitor its temps and keep track of how often the crash occurs. If it happens quite a lot it might be worth considering uploading a full memory dump.. but thats going to be multiple GB's of data..


ah sorry, was resolved, turned out to be a conflict between punkbuster, its services and the onboard audio chip ^^.
Back to top
NFOAC




Posts: 6015
Location: India
PostPosted: Wed, 23rd Jan 2013 06:13    Post subject:
My pc has been re-starting at times and at some times it says Unknown CPU detected i need to know which of my hardware is dying.

MiniDump

http://www.putlocker.com/file/EA2B95651B5883EC
Back to top
NFOAC




Posts: 6015
Location: India
PostPosted: Wed, 23rd Jan 2013 10:23    Post subject:
Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7601.2.1.0.256.1
Locale ID: 1033

Additional information about the problem:
BCCode: d1
BCP1: 8CBF2000
BCP2: 00000002
BCP3: 00000000
BCP4: 8CBC9A55
OS Version: 6_1_7601
Service Pack: 1_0
Product: 256_1

The BCCode keeps changing from d1 - 8e


Last edited by NFOAC on Wed, 23rd Jan 2013 10:30; edited 1 time in total
Back to top
Mr.Tinkles




Posts: 12378
Location: Reino de Suecia
PostPosted: Wed, 23rd Jan 2013 10:24    Post subject:
I've got a dump you can take a look at... Smug

Cool Face
Back to top
Frant
King's Bounty



Posts: 24555
Location: Your Mom
PostPosted: Wed, 23rd Jan 2013 10:27    Post subject:
NFOAC wrote:
Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7601.2.1.0.256.1
Locale ID: 1033

Additional information about the problem:
BCCode: d1
BCP1: 8CBF2000
BCP2: 00000002
BCP3: 00000000
BCP4: 8CBC9A55
OS Version: 6_1_7601
Service Pack: 1_0
Product: 256_1


This it?

""Stop error code 0x000000D1" error message when you turn your computer off"

http://support.microsoft.com/kb/317326

Oh, BCCode..

http://answers.microsoft.com/en-us/windows/forum/windows_7-system/blue-screen-error-bccode-d1-windows-7-64-bit/803905d1-1d49-45c7-a118-50c69348f487


Here's a good tool to go through your own minidumps: http://www.nirsoft.net/utils/blue_screen_view.html but I guess unless you have extensive knowledge about how an OS/Kernel works and/or develop/debug software you're not going to get much out of it by yourself.

Ph'nglui mglw'nafh Cthulhu R'lyeh wgah'nagl fhtagn!

"The sky was the color of a TV tuned to a dead station" - Neuromancer
Back to top
NFOAC




Posts: 6015
Location: India
PostPosted: Wed, 23rd Jan 2013 10:43    Post subject:
I have attached the MiniDump file above.
Back to top
Frant
King's Bounty



Posts: 24555
Location: Your Mom
PostPosted: Wed, 23rd Jan 2013 11:28    Post subject:
Why is it an exe??!?!?! I'm not running that.

Ph'nglui mglw'nafh Cthulhu R'lyeh wgah'nagl fhtagn!

"The sky was the color of a TV tuned to a dead station" - Neuromancer
Back to top
JBeckman
VIP Member



Posts: 34733
Location: Sweden
PostPosted: Wed, 23rd Jan 2013 12:03    Post subject:
What exe file?

The file should be 012313-17986-01.dmp

Maybe you got some (really annoying when it happens.) adware download manager instead, sometimes even with ad-blockers the actual download link gets a bit obscured by the link to that download manager crap.
Back to top
Page 1 of 2 All times are GMT + 1 Hour
NFOHump.com Forum Index - Operating Systems Goto page 1, 2  Next
Signature/Avatar nuking: none (can be changed in your profile)  


Display posts from previous:   

Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB 2.0.8 © 2001, 2002 phpBB Group