Go Back   Tech Support Forum > Microsoft Support > Windows XP Support

User Tag List

Who can read a dump file?

This is a discussion on Who can read a dump file? within the Windows XP Support forums, part of the Tech Support Forum category. C:\Program Files\Support Tools>dumpchk c:\mini052110-03.dmp Loading dump file c:\mini052110-03.dmp ----- 32 bit Kernel Mini Dump Analysis DUMP_HEADER32: MajorVersion 0000000f MinorVersion 00000a28


Closed Thread
 
Thread Tools Search this Thread
Old 05-21-2010, 07:04 AM   #1
Manager, The Conversation Pit/Analyst, Security Team
 
bry623's Avatar
 
Join Date: Apr 2002
Location: NW Territory circa 1787
Posts: 14,513
OS: window7pro sp1 64bit


Send a message via MSN to bry623

C:\Program Files\Support Tools>dumpchk c:\mini052110-03.dmp
Loading dump file c:\mini052110-03.dmp
----- 32 bit Kernel Mini Dump Analysis

DUMP_HEADER32:
MajorVersion 0000000f
MinorVersion 00000a28
DirectoryTableBase 00707000
PfnDataBase 81c46000
PsLoadedModuleList 8055d720
PsActiveProcessHead 805638b8
MachineImageType 0000014c
NumberProcessors 00000002
BugCheckCode 100000d1
BugCheckParameter1 00000006
BugCheckParameter2 00000002
BugCheckParameter3 00000000
BugCheckParameter4 b9e367d4
PaeEnabled 00000001
KdDebuggerDataBlock 8054d2e0
MiniDumpFields 00000dff

TRIAGE_DUMP32:
ServicePackBuild 00000300
SizeOfDump 00010000
ValidOffset 0000fffc
ContextOffset 00000320
ExceptionOffset 000007d0
MmOffset 00001068
UnloadedDriversOffset 000010a0
PrcbOffset 00001878
ProcessOffset 000024c8
ThreadOffset 00002728
CallStackOffset 00002980
SizeOfCallStack 00000534
DriverListOffset 00003148
DriverCount 0000007b
StringPoolOffset 000055d0
StringPoolSize 00001110
BrokenDriverOffset 00000000
TriageOptions 00000041
TopOfStack 805511cc
DebuggerDataOffset 00002eb8
DebuggerDataSize 00000290
DataBlocksOffset 000066e0
DataBlocksCount 00000004


Windows XP Kernel Version 2600 (Service Pack 3) MP (2 procs) Free x86 compatible

Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055d720
Debug session time: Fri May 21 09:22:34 2010
System Uptime: 0 days 0:10:52
start end module name
804d7000 806e4000 nt Checksum: 001FB4F1 Timestamp: Tue Feb 16 08:
25:00 2010 (4B7A9CAC)

Unloaded modules:
99b6d000 99b98000 kmixer.sys Timestamp: unavailable (00000000)
9eba0000 9eba1000 drmkaud.sys Timestamp: unavailable (00000000)
99c38000 99c5b000 aec.sys Timestamp: unavailable (00000000)
99cb8000 99cc5000 DMusic.sys Timestamp: unavailable (00000000)
99d18000 99d26000 swmidi.sys Timestamp: unavailable (00000000)
ba618000 ba61a000 splitter.sys Timestamp: unavailable (00000000)
a14ba000 a14c5000 p3.sys Timestamp: unavailable (00000000)
a1cec000 a1cf0000 kbdhid.sys Timestamp: unavailable (00000000)
a0d16000 a0d1b000 Cdaudio.SYS Timestamp: unavailable (00000000)

Finished dump check
__________________
Finally back!
bry623 is offline  
Sponsored Links
Advertisement
 
Old 05-21-2010, 07:57 AM   #2
Moderator, Editor, Articles Team
 
Deejay100six's Avatar
 
Join Date: Nov 2007
Location: Doncaster, Great Britain
Posts: 11,713
OS: Windows 7 Professional SP1

My System


Hello Bry, not really up on this kind of thing but I have access to a beginners guide so would like to have a go but I think you need to zip the dump in its original ( .dmp ) format and then post it.
__________________
Regards, Dave.


Submit New Articles Here

Help us to help you by posting your System Specs
Deejay100six is offline  
Old 05-21-2010, 11:21 AM   #3
TSF Team, Emeritus
 
justpassingby's Avatar
 
Join Date: Mar 2007
Location: Belgium
Posts: 6,641
OS: XP Home SP3 / Ubuntu / Win 7

My System


@ bry623 : To read a .dmp file install the latest debugging tools for windows (32bit or 64bit depending what version of XP you have) then browse to the folder where you installed those tools and run :

Code:
cdb.exe -logo path\name_of_the_resulting_.txt file -c "!analyze -v;r;kv;lmtn;.logclose;q" -y SRV*c:\symbols*https://msdl.microsoft.com/download/symbols -i C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers -z "path\name_of_the_.dmp_file"
Replace path\name_of_the_resulting_.txt file with c:\log.txt and path\name_of_the_.dmp_file with c:\windows\minidump\Mini011808-01.dmp for instance (yes, it's been more than 2 years since my last BSOD )

The interesting part in the resulting text file will be under bugcheck analysis and debugging details. If a specific driver comes out google it, if not then more research needs to be done.
justpassingby is offline  
Sponsored Links
Advertisement
 
Old 05-21-2010, 03:22 PM   #4
Moderator, Editor, Articles Team
 
Deejay100six's Avatar
 
Join Date: Nov 2007
Location: Doncaster, Great Britain
Posts: 11,713
OS: Windows 7 Professional SP1

My System


Thanks mate, thats even better than the beginners guide.

I could have given him self - help instructions........I thought he was asking for our help.
__________________
Regards, Dave.


Submit New Articles Here

Help us to help you by posting your System Specs
Deejay100six is offline  
Old 05-24-2010, 11:47 AM   #5
Manager, The Conversation Pit/Analyst, Security Team
 
bry623's Avatar
 
Join Date: Apr 2002
Location: NW Territory circa 1787
Posts: 14,513
OS: window7pro sp1 64bit


Send a message via MSN to bry623

Indeed I was.
__________________
Finally back!
bry623 is offline  
Old 05-24-2010, 01:43 PM   #6
Moderator, Editor, Articles Team
 
Deejay100six's Avatar
 
Join Date: Nov 2007
Location: Doncaster, Great Britain
Posts: 11,713
OS: Windows 7 Professional SP1

My System


So, if you could follow the instructions in my first post, I will be using the debugging tool which will automatically tell me which program/application is causing the problem.
__________________
Regards, Dave.


Submit New Articles Here

Help us to help you by posting your System Specs
Deejay100six is offline  
Old 05-24-2010, 01:49 PM   #7
Registered Member
 
Join Date: Jan 2010
Location: Philadelphia, PA
Posts: 36
OS: Windows XP SP3, Windows 7 Ultimate, Ubuntu 9.10



You can also use "BlueScreenView" which analyzes .dmp files

https://www.nirsoft.net/utils/blue_screen_view.html

download is towards bottom of screen
Joines is offline  
Old 05-24-2010, 02:15 PM   #8
TSF Team, Emeritus
 
justpassingby's Avatar
 
Join Date: Mar 2007
Location: Belgium
Posts: 6,641
OS: XP Home SP3 / Ubuntu / Win 7

My System


Then as deejay100six said in his first post we need the actual .dmp file. The dumpcheck doesn't say much, except that it's a 0xD1 error.
justpassingby is offline  
Old 05-26-2010, 08:13 AM   #9
Manager, The Conversation Pit/Analyst, Security Team
 
bry623's Avatar
 
Join Date: Apr 2002
Location: NW Territory circa 1787
Posts: 14,513
OS: window7pro sp1 64bit


Send a message via MSN to bry623

OK here it is.
Attached Files
File Type: zip Mini052110-03.zip (20.1 KB, 17 views)
__________________
Finally back!
bry623 is offline  
Old 05-26-2010, 08:31 AM   #10
Registered Member
 
Join Date: Jan 2010
Location: weston super mud, UK
Posts: 301
OS: Win10

My System


Quote:
Originally Posted by bry623 View Post
OK here it is.
iastor.sys is named in the .dmp file as the probable cause and this is going to be an intel driver used to control sata hard drive(s) ?

your driver is
Quote:
iaStor.sys iaStor.sys+57d4 0xb9e31000 0xb9f0b000 0x000da000 0x48cad1b8 12/09/2008 21:31:52
please check for a newer version ?
ickymay is offline  
Closed Thread

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is on
Smilies are on
[IMG] code is on
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off


Post a Question


» Site Navigation
 > FAQ
  > 10.0.0.2
Powered by vBadvanced CMPS v3.2.3


All times are GMT -7. The time now is 07:36 PM.


Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2020, vBulletin Solutions, Inc.
vBulletin Security provided by vBSecurity v2.2.2 (Pro) - vBulletin Mods & Addons Copyright © 2020 DragonByte Technologies Ltd.
User Alert System provided by Advanced User Tagging v3.1.0 (Pro) - vBulletin Mods & Addons Copyright © 2020 DragonByte Technologies Ltd.
Copyright 2001 - 2018, Tech Support Forum

Windows 10 - Windows 7 - Windows XP - Windows Vista - Trojan Removal - Spyware Removal - Virus Removal - Networking - Security - Top Web Hosts