 | [WIN7] Memory dump I'm running win7 and lately I get my puter shuts down. Screen flashes, then I get a blue screen with a long long message but it's not up long enough to read the whole thing. It says it's shutting down and doing a memory dump to protect the computer....etc.....etc.... If this is the first time seeing this message.....etc etc.
Then the screen will come up with the "Start normal" Start in safe mode etc screen.
I have Windows Security Esstianals, scan wit Maylwarebytes, Spybot S&D.
Is this something to worry about? Annoying as hell as it sometimes happens 3 or 4 times in a row. |
|
 davePremium,MVM join:2000-05-04 not in ohio kudos:8 | said by ez2cy:Is this something to worry about? Yes. Your system is broken. Either the hardware is failing or some piece of software is buggy. Either way, you can't trust that system an inch. It's certainly not safe to rely on it storing anything you can't afford to lose.
The memory dump is not to 'protect the computer'. The system crashes ('blue screens') to protect against further possibility of data corruption. The memory dump part of the deal is for post-mortem analysis of what went wrong.
If you zip up the dump and post it here, someone may volunteer to take a look at it. You should be aware that the dump may contain traces of whatever you were doing at the time, so you'll have to figure out whether you trust people here  |
|
 | Thank you for your reply.
How do I get the "dump" to post it.
Please talk to me like a 4 year old if you can tell me how..ie, step by step. Not the greatest on computer |
|
 | I think I may have found a fix?
From Microsoft a 'debug" . I found it doing a search for my problem about the blue screen and dumping.
»msdn.microsoft.com/en-us/windows···009.aspx
Would this be what I need to do?
Thanks in advance. |
|
 | reply to ez2cy I think I may have found a fix?
From Microsoft a 'debug" . I found it doing a search for my problem about the blue screen and dumping.
»msdn.microsoft.com/en-us/windows···009.aspx
Would this be what I need to do?
Thanks in advance. |
|
 ZupePremium,MVM join:2001-11-29 New York, NY | reply to ez2cy That would be a set of tools to view the memory dumps, but won't be of that much use to you if you don't know what you're looking at.
To upload the minidump files, go to the C:\Windows\minidump folder, zip up the files there (if there are a lot, the most recent three or so would be a good start) and then attach them to a reply post in this thread.
Someone will hopefully then be able to look them over and possibly give you some input on what may be causing the problem. -- Brain: Pinky, are you pondering what I'm pondering? Pinky: I think so, Brain, but "Snowball for Windows"? |
|
 | Ok found, zipped (I think, never zipped before) and attached. Only saw 2 files. ????
Hope this is right
Thank you for your help, appreciate it. |
|
 aguenPremium join:2003-07-16 Grants Pass, OR | reply to ez2cy Either the date/time is set incorrectly on your machine or you didn't get the latest dump file(s). The 2 files you zipped up are from Sept. 2010 and both deal with a video driver issue. |
|
 | Ok...date is right on puter.
When I was looking at the above (where I found the Microsoft site) I followed what it was saying and I saw a "kernel memory dump' was checked off. Is that anything or what we are looking for?
I am attaching a screenshot of what I'm talking about. I'm looking for the file in Windows. |
|
 aguenPremium join:2003-07-16 Grants Pass, OR | reply to ez2cy Look to see if you have the folder C:\Windows\minidump\
If so are there any files in there with today's or yesterdays date/time stamp?
If so, please zip up the most recent 2 files and then upload them. |
|
 | Just the two files I uploaded that are from 2010. Only 2 there.
Why I was asking about the uploaded printscreen, if that is where it's going instead to the Kernel memory dump, and if I should change that. ???? |
|
|
|
 davePremium,MVM join:2000-05-04 not in ohio kudos:8 | There are two types of dump that you can configure:
1) "All of kernel memory" - ends up in C:\Windows\memory.dmp
2) "Small memory dump" - ends up in C:\Windows\minidump
You're configured for #1, aguen gave instructions for #2.
Take a look and see if you have a recently-written C:\Windows\memory.dmp. Though it might be too large to upload.
It might be worth switching your config to "small memory dump" so you can collect more than one, since we may need to look for commonalities. |
|
 1 edit | Ok...I have...C:\Windows\LiveKernelReports
Within that is a file "WATCHDOG" but nothing with today's date.
the list of files that have today's date on them are; (in Windows)
assembly inf Installer system32 bootstat.exe setupact.log WindowsUpdate.log
Should I be looking in one of those for something?
I will change the config to small memory dump as suggested. |
|
 | No one? |
|
 davePremium,MVM join:2000-05-04 not in ohio kudos:8 | No, that's not it.
It's either C:\Windows\memory.dmp (one file from kernel memory dump) or C:\Windows\minidump (folder containing multiple files) |
|
 | WEll then something is really screwed up.
There is not Memory.dmp.....there is minidump...but the two files in it are the ones I posted and they are from 2010.
It's just done the blue screen dump thing to me 3 times in the past hour.
Also, computer is really slow booting up, to password sign in,...and then after I enter it. NOt sure if that helps or not.
When it does boot up, get a message from the bottom right screen that says, a windows service did not start....but it says something about other users not being able to use it or something. ????
Also, where someone told me to change the "kernel dump" to "small memory dump" in Systems, start up and recovery, it has "Small dump directory" as %SystemRoot%\Minidump ????? no idea what that means |
|
 davePremium,MVM join:2000-05-04 not in ohio kudos:8 | %systemroot% is a symbol that means "where the OS is installed", and it is usually C:\Windows, though need not be. Using the symbol makes the setting independent of the name chosen by whoever installed the OS.
So, leave it as it is, and your minidump files will be in C:\Windows\Minidump |
|
 | Ok...but that's the point....no files are going to Minidump period. I found how to stop the auto reboot so I can read the whole blue screen.
But...as I said, it's happened this evening a few times and no files after in minidump.
I'll wait for it to happen again I guess |
|
 takeahikePremium join:2005-01-07 Woodland Hills, CA | reply to ez2cy You should and can check your memory by typing 'memory' in the search box which will give you the option to run Windows Memory Diagnostic on the next re-boot. If you get an error you'll have to check each stick by trial and error with this tool. Bad memory is a very common cause of your problem and it sounds like you have a hardware problem from the random nature of your errors. -- "The best laid schemes of mice and men often go awry . . . " --Robert Burns |
|
 davePremium,MVM join:2000-05-04 not in ohio kudos:8 | reply to ez2cy said by ez2cy:But...as I said, it's happened this evening a few times and no files after in minidump. AH, I missed that it had crashed after you'd switched to the minidump setting.
Weird.
The only reasons I can think that might happen involve disk problems: failure to read the crash handler code, or failure to write the dump to disk.
Ah, do you have a page file on C: ? Certainly with full dumps, the dump is written to the page file, and then copied out to the final file after reboot (all this because you don't want a messed-up system doing complicated stunts like creating files). Minidumps are likely handled the same way though I am uncertain of that. |
|