Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Solution for reading Win7 dumps in Win10(WinDBG)

01 Oct 2015   #1
Laith

Windows 10 Professional x64
 
 
Solution for reading Win7 dumps in Win10(WinDBG)

Guys and gals, i'm here honored to present to you the solution for reading dumps made by Windows 7 on Windows 10 with the latest SDK. After hours and hours of re-search with no success i decided to experiment myself. I got this crazy idea when i was transferring files from my other computer to this computer. The idea was basically, what happens if you transfer the Windows 7 symbols to Windows 10? I decided to try it out, to my surprise it worked and i was able to analyze Windows 7 dumps without any symbol issues at all.

Here is a little tutorial on how to do it.

1. Download my Windows 7 symbol package from here: http://1drv.ms/1VsdqyK

2. Right-click the symcache.zip folder and download it(obviously)

3. When you have downloaded it and opened it you will see that there's a folder inside called "symcache", extract it to your desired place.

4. Go into WinDBG and go to File -> Symbol File Path

5. Click Browse and navigate to where your symbol folder is(in my case it's symcache located in root)

6. Click OK and go to File -> Save Workspace and you are done.

Another way to do is to download and install the symbols from here: Symbols for Service Pack 1(x64) machines, for Service Pack 1(x86),for RTM(x86) and for RTM(x86).

Now you should be able to read Windows 7 dumps without any problems. Please do note that you can't read Windows 10 dumps using this method. If you do want to read Windows 10 dumps you'll need the Windows 10 symbols. Hope this helped you out, this has been driving me nuts since July, i'm sure many of you aswell are tired of seeing this every single time when analyzing a Windows 7 dump.

We can just hope that MS fixes this problem, which they won't do in some time. Anyways that's it.

//Laith


My System SpecsSystem Spec
.
01 Oct 2015   #2
derekimo

Microsoft Community Contributor Award Recipient

Win 10 Pro x64
 
 

What is different about your symcache?
My System SpecsSystem Spec
01 Oct 2015   #3
Laith

Windows 10 Professional x64
 
 

The symcache i uploaded includes the Windows 7 symbols. Normally if you have Windows 10 and set the symbol file path to download from MS it will begin downloading Windows 10 symbols, which aren't suited for Windows 7 dumps so it will just give alot of errors saying that the symbols aren't the correct symbols etc.
My System SpecsSystem Spec
.

01 Oct 2015   #4
derekimo

Microsoft Community Contributor Award Recipient

Win 10 Pro x64
 
 

That's not quite how it works.

Quote:
When you start to debug a crash dump file or an application, the Windows Debugger checks whether the symbol information for a module that it loads is in the local folder. If the symbol information of the module is not located in the local folder, WinDbg tries to download the appropriate symbol file or files from the Symbol Server.

Because it may take time to download symbol files, keep in mind that the debugger may appear to stop responding (hang) the first time that you debug an application. This occurs because most of the symbol files for the system DLLs (such as Ntdll.dll, Kernel32.dll, and others) must be downloaded.
Source

You can download the symbols all the way back to XP from here,

https://msdn.microsoft.com/en-us/win...wnload_windows

Although you shouldn't really need to if your path is set correctly.

That's also why the symcache folder will grow over time.
My System SpecsSystem Spec
01 Oct 2015   #5
Laith

Windows 10 Professional x64
 
 

That's good info aswell. I'll put it in the thread too.
My System SpecsSystem Spec
02 Oct 2015   #6
Laith

Windows 10 Professional x64
 
 

Thanks Derek!
My System SpecsSystem Spec
Reply

 Solution for reading Win7 dumps in Win10(WinDBG)




Thread Tools




Similar help and support threads
Thread Forum
Win7 vs Win10
Windows 10 is very slow than Windows 7 Windows 10 uses lots of resources than Windows 7 windows 10 uses lots of background processes than windows 7
Chillout Room
I'm staying with WIN7 and not Win10
I installed Windows 10 on my travel touchscreen laptop because it has Windows 8.1. It works OK but my desktop will stay Windows 7 as long as I can. I feel Win7 is very stable and for most regular users it works well. How about you? Will you stay with Win7 and not upgrade?
General Discussion
Win7 to Win10 Possibilities?
Anyone exploring the possibilities of moving from Win7 to Win10 upon release. Anyone with experience with Win10 can share insights for Win7 users - probably done before, but haven't seen much lately (mainly just Win8 to Win10). Thanks gumboman
General Discussion
How to install windbg for win7
Hello Everyone, I tried to install windbg from the link below: Debugging Tools for Windows 32-bit Version but when open the crash file it gives me the following message: Unable to load image \SystemRoot\system32\ntkrnlpa.exe, Win32 error 0n2 *** WARNING: Unable to verify timestamp for...
BSOD Help and Support
Windbg: How to debug 32 bit dump file on 64bit Win7
I'm struggling to get WinDBG to work with a 32 bit dump file on 64 bit Win7. I have both WinDBG 32 bit and 64 bit installed. Both launch but cannot execute any SOS or .NET framework commands. I keep getting a generic message Failed to load data access DLL, 0x80004005 I've tried the recommended...
BSOD Help and Support


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 09:15.
Twitter Facebook Google+ Seven Forums iOS App Seven Forums Android App