Solved

Windbg - how to list drivers by date?

Posted on 2011-09-22
5
1,148 Views
Last Modified: 2012-05-12
Trying to learn how to use Windbg to analyze crash dumps.  I came across this post:

http://www.sevenforums.com/crashes-debugging/64321-windows-7-blue-screen.html

 where poster #2 mentions there are a number of old drivers on the system and attaches a list of drivers by date stamp.  What command does he use to make this list?  I was thinking lmt, but the output wasn't the same.

thanks!
0
Comment
Question by:smocohiba
  • 3
5 Comments
 
LVL 66

Accepted Solution

by:
johnb6767 earned 125 total points
ID: 36584660
lmnt lists in a simple view, with 1 driver per line. I would see you could simply copy that into Excel, and then use the AutoFilters....

From the looks of it, that data was comiled in another source COPIED from Windbg.... I would wait to see if others know how to do it in native format.....
0
 
LVL 76

Assisted Solution

by:arnold
arnold earned 125 total points
ID: 36585016
lm list the modules
lmvm <module Name from the list above> will return the information on the module including the module/dll timestamp.
All this information be entered in an excel spreadsheet.
0
 
LVL 76

Expert Comment

by:arnold
ID: 36585018
in windbg enter ? and it will list all valid commands with some descriptions on what those commands do
0
 
LVL 76

Expert Comment

by:arnold
ID: 36585027
lmv will dump the entire listing of modules with their dates.
0
 

Author Closing Comment

by:smocohiba
ID: 36595094
thanks for the help!
0

Featured Post

Maximize Your Threat Intelligence Reporting

Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

Join & Write a Comment

Hallo! I guess almost every Windows Administrator must have got stumped with this question "Where does WINDOWS store a users cached credentials? Every user who had once logged onto a Server/Desktop while it was connected to the domain could sti…
My purpose is to describe the basic concepts of virtual memory as implemented in a modern Windows-based operating system. I will also describe the problems inherent in older systems and how virtual memory solves them. The dark ages - before virtu…
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now