Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Got a BSOD. Had about 40 unsaved Notepad files.

12 Apr 2020   #11
wither 2

Windows 7 Pro SP1 64 bit
 
 

I know I'm a lightweight on this but, out of curiousity, how does one run a utility on a system where a BSOD is displayed on the screen? I'm also wandering why it stopped since a BSOD always reboots my system.
My System SpecsSystem Spec
.
12 Apr 2020   #12
Alejandro85

Windows 7 Ultimate x64
 
 

Quote   Quote: Originally Posted by wither 2 View Post
I know I'm a lightweight on this but, out of curiousity, how does one run a utility on a system where a BSOD is displayed on the screen?
A cold boot attack is performed by freezing the RAM to near absolute zero (using liquid nitrogen for example) to preserve its contents, then rebooting the computer and booting some memory dumping utility on it. This way, RAM contents are keep for long enough after reboot to boot a small program that records its whole content into disk, for latter forensic analysis. It's not done with the system still BSODed.

All this is possible thanks to the fact that typical RAM sticks don't magically lose their data instantly after power off, but it last a few seconds afterwards, even more if they're cooled. The saved data can then be analyzed safely, often for malicious purposes, or on this case, to recover the previous unsaved workspace.


Quote   Quote: Originally Posted by wither 2 View Post
I'm also wandering why it stopped since a BSOD always reboots my system.
That depends on the system configuration, which is by default to reboot after a few seconds. You can choose to keep the blue screen there indefinitely, until a manual hard reset.
My System SpecsSystem Spec
12 Apr 2020   #13
wither 2

Windows 7 Pro SP1 64 bit
 
 

Excellent response!
My System SpecsSystem Spec
.

13 Apr 2020   #14
ElielC

Windows 7 Ultimate x64
 
 

Hiring an expert...no i don't think.
It's not that hard to do it.

1) Connect USB drive with loaded dump memory utility
2) Freezing the memory with compressed air can
3) Pushing reset bouton on the PC
4) Hold F12 key (on my Gigabyte) to load boot menu options
5) Choosing the USB drive

Step 2 is recommended but not required.
I also don't need to unplug the PC, i can reset it.
So the memory should not have the time to vanish.
Unless BIOS check the RAM and write on it at the boot.
It depends on the BIOS and the motherboard from what i have learn.

I do have pagefile enabled.
This is the first thing i do after installing Windows.
Why ?
Because i have an UPS to prevent loss of work in the case of power cut.
And hibernation take relay when battery is low so i don't lose work even if i'm not at home during the power loss.

But my PC is configured to never enter in sleep when in idle mode so i don't think it moved the notepads to pagefile.

But it is the first thing that i was thinking off to do after the first boot, even if chances are slim on this side.

About the BSOD not rebooting my machine, yes the default parameter is to reboot just after the blue screen which is the most stupid thing that i can think off.
Off course i always change this parameter.

I can't remember if when changing this parameter i also changed the option to make full dump of the memory.

Sad that Windows does not indicate which sort of dump it has created on the BSOD screen.
My System SpecsSystem Spec
Reply

Thread Tools




Similar help and support threads
Thread Forum
disassociate Notepad from the .gex files.
I would like to disassociate Notepad from the .gex files. Could you please post the restore information for a .gex file.
Software
Problem after permanent hibernations, unsaved files
Hi there guys! I have a problem after using hibernation to "turn off" my desktop PC. It's a simple way to continue working on my projects after resuming, so I used to hibernate the machine for about month and a half... or even two months. But one day, after resuming, the PC started acting not...
General Discussion
Accidently set Notepad to open btn files
I was trying to open this btn file and windows told me it does not recognized the file oh chose to try a program from a list. i chose notepad but i forgot to uncheck "always use the selected program to open this type of file". how do I undo that?
General Discussion
.reg files open Notepad - do not change registry to read older files
Running Win7Pro 64-bit. Am unable to open older Office 97 files with Office2003 which is installed and running fine. I found a couple of files here and elsewhere with .reg extensions that were supposed to make the necessary registry changes. eg. "UnlockWord.reg" and a more elaborate-looking...
Microsoft Office
files open up to notepad
i need help trying to fix my exe files back and allowing my programs to run again
General Discussion


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 04:50.
Twitter Facebook