Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: How to pick a specific event for BSOD analysis be found in the dmp?

1 Week Ago   #1
Gadgety

Windows 7 Professional 64 bit
 
 
How to pick a specific event for BSOD analysis be found in the dmp?

OK, so how can I pick a specific event for BSOD analysis?

I've had two BSOD events, one yesterday, one almost exactly one month ago. So I installed, configured and tested WinDBG for BSOD Analysis according to this thread:

WinDBG - Install and Configure for BSOD Analysis

Worked fine.

Then I went ahead and just tried Open Crashdump, and pushed the analyze-v to get detailed debugging information. I got four pages of text, mixing English and my local language. I got three "Followup: MachineOwner", which I understand to mean that three *.dmp files have been completely read.

But they only refer to, partially at that, to the latest BSOD, not the one I had a month ago. How can I find that one? Is it a buffer, so previous files get over written? They can still be found in the Log Book for administrative occurences (sorry if this is the incorrect term, Windows mixes English with local language).

Now, the codes displayed for the errors don't seem to correspond to the two crashes I've had. For example it says BugCheck 24, whereas the BugcheckCode for both crashes in the logbook was 244.

So the first Bugcheck Analysis text says:

BugCheck 24, {1904fb, fffff88008f94c48, fffff88008f944a0, fffff80002ddde2e}


Probably caused by : ntkrnlmp.exe ( nt!FsRtlNotifyFilterReportChange+122 )


The second is probably related to the crash I had yesterday as the BugcheckParameter is identical to the BugcheckParameter2 number in the logbook. The text reads "Can't switch processors on a kernel triage dump" But the BugcheckParameters3 and 4 which are part of the LogBook reading, are not part of the Bugcheck analysis reading. The Bugcheck Analysis refers to the NTFS_FILE_SYSTEM (24)



If you see NtfsExceptionFilter on the stack then the 2nd and 3rd parameters are the exception record and context record. Do a .cxr
on the 3rd parameter and then kb to obtain a more informative stack
trace.


So this looks like I have to do additional processing. However, there are only a Parameter 2, and a Parameter 1. Then there's two more pages of stack_text. Part of that includes




CUSTOMER_CRASH_COUNT: 1


DEFAULT_BUCKET_ID: VERIFIER_ENABLED_VISTA_MINIDUMP


PROCESS_NAME: qw.exe

Which I suspect then is the culprit of the crash.

Apart from trying to find out what happened, I wonder howcome the first BSOD event, a month ago, doesn't show up. Are the dumps overwritten as more events happen?

Furthermore, as I tried to redo the BugcheckAnalysis, after this first run, the Windows system now says no memory.dmp files can be found. Once analyzed, gone?


My System SpecsSystem Spec
.
1 Week Ago   #2
Gadgety

Windows 7 Professional 64 bit
 
 

Sorry for the title, but it cannot be changed afaik. Posted in the middle of the night. I was auto logged out because it took a while to write the post, then logged in again, and had to rewrite the tile. The title should read "How can a specific event for BSOD analysis be found in the .dmp?"


Join Date: Mar 2014

Windows 7 Professional 64 bit
17 posts
Local Time: 10:59






How to pick a specific event for BSOD analysis be found in the dmp?


Join Date: Mar 2014

Windows 7 Professional 64 bit
17 posts
Local Time: 10:59






How to pick a specific event for BSOD analysis be found in the dmp?
My System SpecsSystem Spec
Reply

 How to pick a specific event for BSOD analysis be found in the dmp?




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
No BSOD/memory dump, Random Freezes, Event Log Analysis, Desperate
My kingdom for a resolution! I've troubleshooted everything I can think of. My computer just randomly freezes. I receive no BSOD either. It just stops responding, the monitor goes dead since it loses signal, yet the computer fans and HD lights continue to run. There is no response from it...
BSOD Help and Support
BSOD and spontaneous restarts (No known recurring event found)
Hello all, I will provide as many details as I can since the thread title is a bit ambiguous. I'm having a problem with my parents computer that I can't seem to pin down. Attached is the latest dump file from a BSOD. However, the machine will also spontaneously restart on its own, most often...
BSOD Help and Support
BSOD Everyday with no specific time or event. Error 0x000000FE
Hello! I usually can Google and figure things out my self to fix computer issues. However, I have recently gotten BUGCODE_USB_DRIVERS (0x000000FE) BSOD about once per day. It started out only occurring once every week and slowly got worse. I've done my best to get the most update USB drivers...
BSOD Help and Support
msistk32.dll specific module could not be found error on startup
Hi there On startup I get the error of msistk32.dll could not be started specific module could not be found I've done some investigations already, using a program called 'autoruns' which found the error and the file location is in the registry under:...
BSOD Help and Support
BSOD: At specific times of the week Event ID: 1001
Hi everyone Nice to have a community like this, i have found many solutions on this site For once my own machine is having some issues. Once a week i am getting the dreaded blue screen. Could someone please interpret the dump file for me so i can get this sorted out Would really...
BSOD Help and Support
Pick a specific program to run in Safemode?
I'm curious if there is a way to run a specific program when I choose to reboot into safemode with networking? Specifically looking to run or make sure the service for Logmein starts. The work I have to do would be best done in safe mode, and of course connecting remotely would be great. ...
General Discussion


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 20:10.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App