locked
Complete Memory Dump RRS feed

Answers


  • Looking to see what we would get to do next !!

    Mani


    Ok, Mani, create a dump with thios toolkit:

    http://moonsols.com/blog/9-moonsols-windows-memory-toolkit

    Download it and open a command prompt with admin rights [1] and run this:

    win32dd /d /f physmem.dmp or win64dd /d /f physmem.dmp if you're using a 64Bit Windows.

    This tool aways create a complete dump and without "crashing" the PC.

    André

    [1] http://windows.microsoft.com/en-US/windows7/How-do-I-run-an-application-once-with-a-full-administrator-access-token


    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    • Marked as answer by Mani B Thursday, August 19, 2010 2:51 PM
    Thursday, August 19, 2010 2:25 PM

All replies

  • Hi Mani,

    how much RAM do you have? If you use 4GB, Windows 7 only allows you to create a kernel dump, not a ful memory dump to "save" HDD space.

    Run regedit.exe , go to HKEY_LOCAL_MACHINE\ System\ CurrentControlSet\ Control\ CrashControl and change the value CrashDumpEnabled to 1

    André


    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    Wednesday, August 18, 2010 10:55 PM
  • Hi Andre,

    Thanks, That is what we have already enabled and also to the following reg entry key..

     HKEY_LOCAL_MACHINE\ System\ CurrentControlSet\ Services \ i8042prt \ Parameters

    Added a key CrashOnCtrlScroll to enable it by key strokes when my machines goes black, just to have it enabled.

    But no go, it just simply does not brings memory.dmp file to get the complete info. Assuming this - my main doubts were -
    - Would 32 bit OS Windows 7 be able to do this ?
    - 2 GB of RAM module - again a contrary statement to 1 GB on standard requirement ?

    Looking to see what we would get to do next !!

    Mani


    "Do it yourself, before you think someone else will" - Mani Babbar - 18.08.10
    Thursday, August 19, 2010 9:18 AM

  • Looking to see what we would get to do next !!

    Mani


    Ok, Mani, create a dump with thios toolkit:

    http://moonsols.com/blog/9-moonsols-windows-memory-toolkit

    Download it and open a command prompt with admin rights [1] and run this:

    win32dd /d /f physmem.dmp or win64dd /d /f physmem.dmp if you're using a 64Bit Windows.

    This tool aways create a complete dump and without "crashing" the PC.

    André

    [1] http://windows.microsoft.com/en-US/windows7/How-do-I-run-an-application-once-with-a-full-administrator-access-token


    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    • Marked as answer by Mani B Thursday, August 19, 2010 2:51 PM
    Thursday, August 19, 2010 2:25 PM
  • Amazing André

    Brilliant, works and creates perfect 2.92GB Dump.

    I just love it here mate, better than the MS Tech Support now.. you are a STAR  :)

    Cheers
    Mani


    "Do it yourself, before you think someone else will" - Mani Babbar - 18.08.10
    Thursday, August 19, 2010 2:51 PM
  • You're welcome :)

    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    Thursday, August 19, 2010 3:22 PM
  • Hi Andre,

    The dump coming out of the tool, is supposedly not a healthy dump for the reasons - "machine has not rebooted" stated by MS.
    Now is that a valid too.. with this tool - healthy or unhealthy?

    cheers


    "Do it yourself, before you think someone else will" - Mani Babbar - 18.08.10
    Friday, August 20, 2010 2:54 PM
  • The dump is valid. the difference is that it is not created by the manual crash.

    It looks like the only check that the BugCheck is 0xDEADDEAD: MANUALLY_INITIATED_CRASH1

    Which issue do you have when you are told to create a complete dmp file?

    André


    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    Friday, August 20, 2010 3:15 PM
  • A conclusion from MS techie while being on the phone that the dump is not valid because it does not contain the header information which is what they need to identify the problem.

    Problem in this case, is the random black screening of the Windows 7 Laptops as we test them in the enterprise environment before deploying them in the mass scale(1000+ machines). We have endless black screens on the different machines running Win7 platform randomly. Never at one period of time.

    We have been running with MS for over 3 weeks on the enterprise support without any help, and each time we get to a conclusion - we will get back to you with more information and each time they hang on the point, the memory dump is not healthy.

    Veelen danke Andre fur deine zeit :)


    "Do it yourself, before you think someone else will" - Mani Babbar - 18.08.10
    Friday, August 20, 2010 3:33 PM
  • A conclusion from MS techie while being on the phone that the dump is not valid because it does not contain the header information which is what they need to identify the problem.

    This is not very usefull.

    When do you get this black screen?


    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    Friday, August 20, 2010 3:47 PM
  • It black screens randomly. It has no significance to what we are doing, it is totally unpredictable.

    You can expect it at anytime of the hour, and we have about 10 machines in the working evironment. They all do the same, regardless of what we say - it is totally random - one day no black screen and next day it will have one machine doing black screens even at the startup. So do not know what to consider from it.

    I am awaiting my requested RAM modules from Kingston for 667Mhz and 800Mhz DDR3 Spec Speeds.

    But it is not being very helpful trying to find a fix for this unless MS gives us the solution or a hotfix.


    "Do it yourself, before you think someone else will" - Mani Babbar - 18.08.10
    Monday, August 23, 2010 7:20 AM
  • and why does MS want a full dump with the triggered restart?
    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    Monday, August 23, 2010 12:35 PM
  • Because they say, it will not contain the information for what triggered the black screen. It is totally debatable topic but they wont the complete kernel dump when the screen is sitting black. Possibly running the dump from the network even.

    Although, in this case - its been a battle to make them agree at first point, besides being an ex-MS employee myself it feels so over challenging knowing how they are dealing this case.

    But we shall see how it goes on - because I am still awaiting to hear from them on how we shall proceed.

     


    "Do it yourself, before you think someone else will" - Mani Babbar - 18.08.10
    Monday, August 23, 2010 1:34 PM
  • Because they say, it will not contain the information for what triggered the black screen.

    ok. I think the system is not responding when you get the black screen so it doesn't create the dump.

    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    Monday, August 23, 2010 4:10 PM