Raymond.CC Blog
  • Home
  • Forum
  • Giveaway
  • X-Ray 2.0
  • Contact
  • About
  • I’m Feeling Lucky
Search the site...
You are here: Home » Computer » Analyzing Windows Crash Dump or Minidump with WhoCrashed

Analyzing Windows Crash Dump or Minidump with WhoCrashed

Updated by Raymond - 4 years ago - Computer
22
  • Like
  • +1
  • Tweet
  • Printer Friendly and PDF

Did you notice that Windows will automatically generate crash dumps whenever you get blue screen of death (BSOD)? I’ve gotten lots of them when using Windows 98 but when come to XP, it is nearly flawless and I can’t remember when was the last time I ever got a blue screen. However on my new laptop that comes with Vista, it’s a whole different story because it happened so often and I can’t really remember how many times I got the blue screen. If you’ve never seen a Windows blue screen before, it looks something like what it says below.

A problem has been detected and Windows has been shut down to prevent damage to your computer.

If this is the first time you’ve seen this stop error screen, restart your computer. If this screen appears again, follow these steps:

Check to be sure you have adequate disk space. If a driver is identified in the Stop message, disable the driver or check with the manufacturer for driver updates. Try changing video adapters.

Check with your hardware vendor for any BIOS updates. Disable BIOS memory options such as caching or shadowing. If you need to use Safe Mode to remove or disable components, restart your computer, press F8 to select Advanced Startup Options, and then select Safe Mode.

Technical information:
*** STOP: 0x0000007E (0C0000005, 0x81C908A2)
Collecting data for crash dump …
Initializing disk for crash dump …
Beginning dump of physical memory.
Dumping physical memory to disk: 50

The memory crash dump are usually saved in C:\WINDOWS\Minidump and C:\WINDOWS\MEMORY.DMP. I remembered many years ago when I took computing course, one of my lecturer told us Windows crash dump are very hard to analyze and we actually have to pay Microsoft to do that. I don’t know how true is that but researching on how to analyze crash dumps with Microsoft Debugging tools did show that it is not easy. Fortunately here is a tool called WhoCrashed that is able to read Windows crash dumps and roughly tells us what is causing the blue screen crash.

WhoCrashed shows the drivers which have been crashing your computer with a single click. In most cases it can pinpoint the offending drivers which have been causing misery on your computer system in the past. It does post-mortem crashdump analysis and presents all gathered information in a comprehensible way. Normally, debugging skills and a set of debugging tools are required to do post-mortem crash dump analysis. By using this utility you do not need any debugging skills to be able to find out what drivers are causing trouble to your computer.

WhoCrashed analyze memory crash dump

Before start using WhoCrashed, you’ll have to make sure that Microsoft Debugging Tools for Windows has been installed. The first time you click the Analyze button, it’ll ask you to select the path to the Microsoft Debugging Tools for Windows (usually in C:\Program Files\Debugging Tools for Windows) or you can download the installer by clicking “Download the required file from Microsoft site now”.

download Debugging Tools for Windows

On my Acer laptop that has Vista installed, WhoCrashed is able to determine that the crash was likely caused by usbvideo.sys. It also did advice that the crash took place in a standard Microsoft module. Likely the culprit is another driver on your system which cannot be identified. Looks like I am back to square one. So is analyzing Windows crash dump useless? Not really, on some cases it might be able to help you pinpoint the cause of the problem but definitely not all the time. One example is many years ago I was testing an exploit called IGMP nuke which is able to crash Windows XP machines by causing blue screens, lockups and automatic reboots on XP computers that don’t have SP2 installed. When that happens, Windows will create a crash dump file and I am very sure you’re not going to find any clues on what caused the crash after analyzing it.

WhoCrashed Home Edition is free and works on Windows 2000/2003/XP/Vista/2008. Resplendence Software also have a PROFESSIONAL version that cost $34.95 which can analyze crash dump on remote computers on the network and on a local dump directory of your choice. It also gives more detailed analysis of crash dumps and license not limited to use at home only.

[ Download WhoCrashed ]

You may also like:

BlueScreenView Determines Which Driver Caused Blue Screen on WindowsBlueScreenView Determines Which Driver Caused Blue Screen on WindowsHow to Analyze Memory Dump (.dmp) FileHow to Analyze Memory Dump (.dmp) FileFree 1 Year Trend Micro Titanium Internet Security 2011 English License for EVERYONEFree 1 Year Trend Micro Titanium Internet Security 2011 English License for EVERYONESMBv2 Nuke Crashes Windows Vista, 7 and Server 2008 with BlueScreen of DeathSMBv2 Nuke Crashes Windows Vista, 7 and Server 2008 with BlueScreen of Death

22 comments on “Analyzing Windows Crash Dump or Minidump with WhoCrashed”

  1. Nicole says:
    2 years ago

    Would it make a difference to get another make n model or will all laptops do the same? This is my first laptop anyway thanks.

    Reply
  2. Nicole says:
    2 years ago

    Hi I am from Barbados ,I brought a laptop about a month ago and just one night I took it up to use it I got that same blue screen stuff .I took it back to company I brought it from and the technician reset the memory nodules,when I get it back it start to play good,with in three days the same crap start up again .so I’m carrying it back.

    Reply
  3. Buhr says:
    4 years ago

    What is captcha code?, pls provide me captcha code codes or plugin, Thanks in advance.

    Reply
  4. troy says:
    4 years ago

    try it, seems very helpful

    Reply
  5. Utkarsh says:
    4 years ago

    The tool Helped a lot. Thanks Raymond.

    Reply
  6. saikiap says:
    4 years ago

    Raymond,

    McAfee SiteAdvisor flags the site as Dangerous.
    Here -
    siteadvisor.com/sites/resplendence.com?version=2&core_ver=1.0&pip=true&premium=false&client_ver=2.9.242&client_type=IEPlugin&suite=false&aff_id=0&locale=en-us&os_ver=5.1.3.0

    Guess they goofed up?
    (There’re 7 user feedbacks, all claiming it to be clean.)

    Reply
  7. Hogge says:
    4 years ago

    Nice tool Raymond,Thanks again!!!

    Reply
  8. jeff parker says:
    4 years ago

    thanks for this info..i can use this someday when i use vista :D

    Reply
  9. lee says:
    4 years ago

    thanks ray
    it ‘s very useful…

    Reply
  10. sunkumarspace says:
    4 years ago

    thnks

    Reply
  11. Merlin_Magii says:
    4 years ago

    Many thanks Raymond – ANOTHER useful tool !

    For those who DON’T have the Windbg here’s the link.

    microsoft.com/whdc/devtools/debugging/installx86.Mspx

    Reply
  12. sordomita says:
    4 years ago

    Exists a nuke software compatible for Windows Vista SP1 computer for test this software?

    Reply
  13. karlochacon says:
    4 years ago

    great tool

    thanks a lot for sharing this

    Reply
  14. Raymond says:
    4 years ago

    @sandipr: If a video is watermarked, that means the owner of the video wants to be credited. Why would you want to remove it anyway?

    Reply
  15. sandipr says:
    4 years ago

    Is there any software thro’ which i can remove watermark from any video.

    Reply
  16. aln says:
    4 years ago

    always up for anything tha helps with my (many) pc probs….thank you for this.

    Reply
  17. ha14 says:
    4 years ago

    Thanks for your tip which will proove to be of a great help and actually yesterday I had to interrupt two process for crashing reasons, although I used PEBrowse Crash-Dump Analyzer but it appeared little complicated for me and here I will go with whocrashed!!!

    Reply
  18. Roy Raay says:
    4 years ago

    Thanks mate

    Reply
  19. zdogg says:
    4 years ago

    I just went to try to fix a pc today that had this exact error. I guess the power flashed 4 times on and off at there house and when the pc came back on it was on that blue screen. I couldnt get safe mode to even work. I ended up trying to format the pc and reinstall windows but after it gets to restarting your computer please remove any disk and the pc reboots and its suppose to load into the windows installer part but instead it just gos to a black screen that says error load operating system anyone have any ideas on what to do? is the hard drive maybe toast?

    Reply
  20. jc onte says:
    4 years ago

    i like it raymond, thanks

    Reply
  21. =SAF=Quake4 says:
    4 years ago

    Thanx ray

    Reply
  22. yaman says:
    4 years ago

    thanks raymond i have used this software and it is very helpful to solve problems,but now my computer crash evry time after resuming hibernate and when i look at report i found three different process cause crashes looking at web msdn saymaybe antivirus software ,removing kaspersky prevent system crash,i have been using KIS for three years now i want to switch other one cuz i need to use hibernate.

    Reply

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Recently Updated

  • search local area network

    2 Tools to Search Any Files on Local Area Network Shared Folders

  • windows defender icon

    How To Disable, Uninstall or Remove Windows Defender

  • no fake av icon

    6 Ways to Kill and Remove Fake Antivirus Rogue Software

New Articles

  • task manager replacement icon

    Memory Usage Test to See Which is the Lightest Antivirus Software

  • kaspersky antivirus 2013 icon

    Activate Free Kaspersky Anti-Virus 2013 ROG with 1 Year License

  • remote access software

    Top 8 Remote Access Software for Providing Online Support

Popular Posts

  • Top 10 FREE Data Recovery Software

    Top 10 FREE Data Recovery Software

  • How to Hack Into a Windows XP Computer Without Changing Password

    How to Hack Into a Windows XP Computer Without Changing Password

  • 10 Free Software to Mount CD or DVD ISO Image File as Virtual Drives

    10 Free Software to Mount CD or DVD ISO Image File as Virtual Drives

Recommend on Google
Follow @raymond_cc
Subscribe Youtube »
(c) 2013 Raymond.CC Blog
  • Disclaimer
  • Disclosure
  • Privacy Policy
  • Terms of Use
  • Sitemap