Solved

Extract data from user.dmp?

Posted on 2003-11-01
9
195 Views
Last Modified: 2010-04-13
I was using a tv capture application called WinTV from Hauppage.
When you press the "capture" button in WinTV, a picture is being saved in Windows memory. After that you can choose to save this file to the harddrive and delete the original from the memory.
I had made some - well, a _lot_ - captures with this application when it suddenly crashed and I hadn't saved these captures to files on the harddrive.
When it crashed this DrWatson thing was run.
I now have a 73 MB user.dmp file in my DrWatson folder. I don't know the size of this file before the crash.
Now my hope is that there is a way to extract these pictures from the user.dmp.
Is there a way?
0
Comment
Question by:CVic
9 Comments
 
LVL 44

Expert Comment

by:CrazyOne
ID: 9664929
Not that I am aware of but it would be interesting if someone knew how.
0
 
LVL 44

Expert Comment

by:CrazyOne
ID: 9664933
A lot of programs create at tmp files perhaps you could see it this one did

Look in C:\Documents and Settings\YourProfile\Local Settings\Temp
0
 
LVL 15

Expert Comment

by:Rob Stone
ID: 9665558
0
Simplifying Server Workload Migrations

This use case outlines the migration challenges that organizations face and how the Acronis AnyData Engine supports physical-to-physical (P2P), physical-to-virtual (P2V), virtual to physical (V2P), and cross-virtual (V2V) migration scenarios to address these challenges.

 
LVL 49

Expert Comment

by:sunray_2003
ID: 9665614
try downloading this tool and check


http://www.microsoft.com/whdc/ddk/debugging/default.mspx

S
0
 

Author Comment

by:CVic
ID: 9665864
First of all, when data is stored in system memory and the application that helds the data crash, is really all that data dumped to USER.DMP? Or is only *information* about the crash being appended to the file?

Is 73 MB a normal size of a USER.DMP file? Because there was a lot of picture data in system memory when WinTV crashed, like 100-150 pictures in 640x480 with no compression.

CrazyOne: I've checked for that, but no, there is no such tmp file. :-/

Stoner79: Doesn't look like this program actually can *view* the dump file? It can only check information of recent crashes, right?. But as I said, maybe the data (pictures) that was stored in system memory actually wasn't dumped to the file... If so, there's nothing I can do but give up...

sunray_2003: Same here - I don't think this program actually can view eventually data from the file...?


Before WinTV crashed, my allocating memory was at around 800 000 kb, after it terminated it was at around 500 000 kb (yes, I have a lot of applications/windows open at the moment :-) )
So the data was realased from memory, or it was stored in USER.DMP...

Argh, I really want to get back those unsaved pictures :-( But it seems like they're gone forever...
0
 
LVL 44

Expert Comment

by:CrazyOne
ID: 9665964
Unfortunately I think they are gone forever. It depends how the system is setup to do memory dump. It looks like yours is setup for a small memory dump based on the size of this file. If it was setup for a large memory dump then the entire contents of the memory would have been dumped and the file would be much larger then 73MB's. I got to think that those captures were more than 73MB's.
0
 

Accepted Solution

by:
PashaMod earned 0 total points
ID: 10091155
PAQed - no points refunded (of 500)

PashaMod
Community Support Moderator
0

Featured Post

Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
There's a lot of hype surrounding blockchain technology. Here's how it works and some of the novel ways it' s now being used - including for data protection.
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa…

829 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question