Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: Principles of WinDBG functioning

26 Nov 2016   #1

Windows 7 Professional 64 bit
Principles of WinDBG functioning

On the forum I find instructions of how to install and test WinDBG, but I have a hard time finding descriptions of how it works in principle.

Here are my questions:

1. Are dumpfiles overwritten? That is, does dmp work as a buffer, so when new dmp files are created by the system, the old ones are overwritten? I read somewhere the dmp file can get pretty large, in that case dmp files would be saved until explicitly deleted. I'm asking because when doing the BugCheckAnalysis of the dmp only the latest BSOD is part of the readout. They can still be found in the Log Book for administrative occurences (sorry if this Log Book is the incorrect term, Windows mixes English with local language)

2. Are dumpfiles temporary and once read and analysed, are they gone? I can't regenerate the report.

My System SpecsSystem Spec
26 Nov 2016   #2

Desk1 7 Home Prem / Desk2 10 Pro / Main lap Asus ROG 10 Pro 2 laptop Toshiba 7 Pro Asus P2520 7 & 10

Hello mate look as far as I know the dump files should be in a list form and I am wondering if you have cleared any dump files by using a disk clean up something like this Disk Cleanup - Open and Use the first option in C: Properties - right click on the C: drive > Properties > General tab > Disk Cleanup will list clear dump files for example there is a second option that will clear old updates etc too

Edit Imeant to add that the dumps should remain after reading them not deleted so try this Dump Files - Configure Windows to Create on BSOD
My System SpecsSystem Spec
27 Nov 2016   #3

Windows 7 Professional 64 bit

Thank you ICIT2LOL. No I haven't done any dump file clearing or disk clean up. Thank you for the link.
My System SpecsSystem Spec

27 Nov 2016   #4

Windows 10 Pro

Hi Gadgety,

- The MEMORY.dmp (located in %systemroot%) is the dump that gets overwritten by default, because it contains all kernel data the RAM had at the time of the crash, depending on the amount of memory the size could get up to gigabytes.
If you uncheck the overwrite option, Windows will not delete this file and insteads creates a new file, the downside of this is that it takes a lot of space on the disk.

- The minidumps (located in %systemroot%\minidump) are the dumps that do not get overwritten. However some do get deleted when there are about 50 dumps in this location present (if I'm correct). These dumps we mostly use.

Dump files are not temporary files, dumps are present on the disk so long as they are not deleted by utilities like disk cleanup or Ccleaner.
My System SpecsSystem Spec

 Principles of WinDBG functioning

Thread Tools

Similar help and support threads
Thread Forum
Hello I have installed the framework net on my system and also with the help of Jonthan_King installed the windbg, can someone tell me how to use and get into the analyze -V or any of the other tools, also he installed on my desktop a BSOD file that appears to be from my own system. When I click on...
Chillout Room
Can somebody in here explain to me how WinDbg works and how to use it? What I know: Where to find symbol paths. How to open .dmp files. I use Bug Check 0x9F: DRIVER_POWER_STATE_FAILURE to find info on the bug check. What I'm not so good at: Understanding the arguments. Understanding...
BSOD Help and Support
Nice to see a CELEB with Principles
Hi all We see so many instances of celebs really not being very good examples to younger people in particular but when I read this story I had to read it again to make sure I actually understood what it was saying. It restores my faith in Human Beings again -- to turn down a decent size Gig in...
Chillout Room
[Advanced] Principles of debugging
Adventures In A 32-bit Minidump, Part 0 Yes, I realise it has "stacked", but how?!? One of the items of information stored in a minidump is the "stack" of the crashing thread. All threads have a stack, at all times, and the word "stack" is not used here in the slang sense (to crumple and...
Crash and lockup debug 'How To'

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 01:31.
Twitter Facebook Google+