Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Extract data from user.dmp?

Posted on 2003-11-01
9
Medium Priority
?
216 Views
Last Modified: 2010-04-13
I was using a tv capture application called WinTV from Hauppage.
When you press the "capture" button in WinTV, a picture is being saved in Windows memory. After that you can choose to save this file to the harddrive and delete the original from the memory.
I had made some - well, a _lot_ - captures with this application when it suddenly crashed and I hadn't saved these captures to files on the harddrive.
When it crashed this DrWatson thing was run.
I now have a 73 MB user.dmp file in my DrWatson folder. I don't know the size of this file before the crash.
Now my hope is that there is a way to extract these pictures from the user.dmp.
Is there a way?
0
Comment
Question by:CVic
7 Comments
 
LVL 44

Expert Comment

by:CrazyOne
ID: 9664929
Not that I am aware of but it would be interesting if someone knew how.
0
 
LVL 44

Expert Comment

by:CrazyOne
ID: 9664933
A lot of programs create at tmp files perhaps you could see it this one did

Look in C:\Documents and Settings\YourProfile\Local Settings\Temp
0
[Webinar] Cloud and Mobile-First Strategy

Maybe you’ve fully adopted the cloud since the beginning. Or maybe you started with on-prem resources but are pursuing a “cloud and mobile first” strategy. Getting to that end state has its challenges. Discover how to build out a 100% cloud and mobile IT strategy in this webinar.

 
LVL 49

Expert Comment

by:sunray_2003
ID: 9665614
try downloading this tool and check


http://www.microsoft.com/whdc/ddk/debugging/default.mspx

S
0
 

Author Comment

by:CVic
ID: 9665864
First of all, when data is stored in system memory and the application that helds the data crash, is really all that data dumped to USER.DMP? Or is only *information* about the crash being appended to the file?

Is 73 MB a normal size of a USER.DMP file? Because there was a lot of picture data in system memory when WinTV crashed, like 100-150 pictures in 640x480 with no compression.

CrazyOne: I've checked for that, but no, there is no such tmp file. :-/

Stoner79: Doesn't look like this program actually can *view* the dump file? It can only check information of recent crashes, right?. But as I said, maybe the data (pictures) that was stored in system memory actually wasn't dumped to the file... If so, there's nothing I can do but give up...

sunray_2003: Same here - I don't think this program actually can view eventually data from the file...?


Before WinTV crashed, my allocating memory was at around 800 000 kb, after it terminated it was at around 500 000 kb (yes, I have a lot of applications/windows open at the moment :-) )
So the data was realased from memory, or it was stored in USER.DMP...

Argh, I really want to get back those unsaved pictures :-( But it seems like they're gone forever...
0
 
LVL 44

Expert Comment

by:CrazyOne
ID: 9665964
Unfortunately I think they are gone forever. It depends how the system is setup to do memory dump. It looks like yours is setup for a small memory dump based on the size of this file. If it was setup for a large memory dump then the entire contents of the memory would have been dumped and the file would be much larger then 73MB's. I got to think that those captures were more than 73MB's.
0
 

Accepted Solution

by:
PashaMod earned 0 total points
ID: 10091155
PAQed - no points refunded (of 500)

PashaMod
Community Support Moderator
0

Featured Post

Ask an Anonymous Question!

Don't feel intimidated by what you don't know. Ask your question anonymously. It's easy! Learn more and upgrade.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
In this post, I will showcase the steps for how to create groups in Office 365. Office 365 groups allow for ease of flexibility and collaboration between staff members.
Whether it be Exchange Server Crash Issues, Dirty Shutdown Errors or Failed to mount error, Stellar Phoenix Mailbox Exchange Recovery has always got your back. With the help of its easy to understand user interface and 3 simple steps recovery proced…
Is your OST file inaccessible, Need to transfer OST file from one computer to another? Want to convert OST file to PST? If the answer to any of the above question is yes, then look no further. With the help of Stellar OST to PST Converter, you can e…

782 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question