We help IT Professionals succeed at work.

How to analyze Memory Dump

pc_helper
pc_helper asked
on
I have a full memory dump of a customers computer that BSOD'sd all the time. I have downloaded and installed Windbg 6.8 to analyze the dump file. I cant figure out where to begin. The Windbg program has a Open dump file option that is greyed out. How do i analyze this file?
Comment
Watch Question

You first need to point Windbg to the symbols. Configure the symbols path to:
SRV*c:\symbols*http://msdl.microsoft.com/download/symbols

After loading the symbols, save the workspace.

Then you can open the dump file and debug it.
When you close Windbg, it will ask you again about saving the workspace. Say no this time.

Hope that helps
Commented:
Mark Russinovich, from Microsoft formally from Sysinternals, has a great free webcast on this topic. You will need a passport ID.

http://msevents.microsoft.com/CUI/WebCastEventDetails.aspx?culture=en-US&EventID=1032298076&CountryCode=US
LeeTutorretired
BRONZE EXPERT
Top Expert 2009
Commented:
This is a pretty good article about how to use that tool:

http://www.networkworld.com/news/2005/041105-windows-crash.html?page=1
How to solve Windows system crashes in minutes

Author

Commented:
Wow, So much info. I will wade through it and repost tomorrow morning. Thanks for the heads up on this stuff.

Explore More ContentExplore courses, solutions, and other research materials related to this topic.