Questions tagged [windbg]
WinDbg is a user and kernel mode debugger for Windows. It analyzes memory dumps.
59
questions
14
votes
4
answers
79k
views
Windows 10 ShellExperienceHost crashes
I recently cloned my Windows 10 partition from HDD to SSD.
I cannot open the Start Menu, Notifications, or anything that uses ShellExperienceHost. This includes things like the Calculator app, Edge ...
10
votes
1
answer
20k
views
How to inspect a Process Explorer full dump
I've been having some trouble with Visual Studio 2010. It stops working, and I see it increases in memory usage. So I suspect a memory leak (in one of the plugins maybe). I took a Full Dump with ...
8
votes
1
answer
1k
views
An item with the same key has already been added
Running a performance analysis on DebugDiag Analysis is failed with following message:
PerfAnalysis - v (2.3.0.37) Failed Dump File: C:\w3wp.DMP;
Type: System.ArgumentException
Message: An item ...
6
votes
6
answers
893
views
Windows 10 Pro 64-bit hard hang
After I installed Windows 10 on my Sony Vaio SVS13A190X laptop it started freezing periodically. Usually it happens during installation of something i.e. when there is some heavy disk usage. I have ...
5
votes
1
answer
5k
views
Analyzing a WinDbg dump after a BSOD - "An expected clock interrupt was not received"
About six months ago I upgraded my computer hardware - new mobo, CPU, RAM, etc. It's run like a champ until just recently. This morning when I went to my computer it had a BSOD. I used WinDbg to ...
5
votes
1
answer
6k
views
WinDbg Problem with ntoskrnl
I've got a similar problem to "BSOD - Unable to verify timestamp for ntoskrnl.exe", in that I can't seem to get the correct symbols to read ntoskrnl.
I've followed the advice given by BK1E, but still ...
4
votes
2
answers
21k
views
where can I get windbg for windows 7 64bit without the whole sdk?
I am looking for windbg. Without the whole Windows SDK
I saw this link
https://stackoverflow.com/questions/2736250/getting-windbg-without-the-whole-wdk
But the accepted answer, from dave black, (...
4
votes
2
answers
16k
views
How to install WinDbg on a PC without internet connection
I have to install only the WinDbg (not the complete SDK) on a production system. I can only find a web installer, which needs an internet connection to download the SDK/winDbg.
Is it possible that I ...
3
votes
2
answers
3k
views
What does the C in Cid stand for in winDbg, kdbg and livekd?
If execute the !process command in the windwos debugger you get output in this format:
PROCESS fffffa8006bff940
SessionId: 0 Cid: 03ec Peb: 7f79ae1f000 ParentCid: 02e4
DirBase: 084ed000 ...
3
votes
0
answers
824
views
BSoD DRIVER_VERIFIER_DETECTED_VIOLATION
I'm having a lot of BSoD's lately, so I ran Driver Verifier (verifier in command line). It generated DRIVER_VERIFIER_DETECTED_VIOLATIONBSoD. Analyzing the dump with WinDbg:
!analyze -v
**************...
3
votes
4
answers
346
views
Computer hangs on Sleep. Need help reading dmp file
My computer is hanging when it tries to enter sleep mode. The screen will turn off but the computer continues to run indefinitely. I have tried debugging it myself but it has exceeded my abilities. I ...
2
votes
4
answers
4k
views
How to Export/Parse files from memory.dmp?
My computer got bluescreen, and saved all info to a memory file before restart. I have memory.dmp, and i have some very important files that i didnt save.
All the files I need to recover were txt ...
2
votes
1
answer
1k
views
Using Windbg to find the CPU core number which a faulting thread ran on?
I've been given a 20 core CPU with an intermittent fault on some core. Allegedly it's confirmed by Intel but no further details and not replaceable under warranty, or so Im told (I can't check now). ...
2
votes
1
answer
2k
views
How to open dump file with windbg by double clicking in file explorer?
I am sure I was able to double click a crash dump file (*.dmp) file in explorer in my old PC and it will open up in WinDbg. In my new PC it doesn't open and gives an error.
Could not create process ...
2
votes
1
answer
881
views
BSOD BCCode 124, request for analysis of my WinDGB log
I've been experiencing system restarts for some time decribed with BSOD log by BCCode 124. I checked my RAM with MemTest for 3.5 hours with no error, then scaned system with Avast and Malwarebytes. ...
2
votes
1
answer
174
views
Win7 Getting blue screen Crash, how to check if its software or hardware . (WinDbg log included)
suddenly my old win 7 64 bit started to crash with blue screen .
i want to know what is the problem .
i did !analize on the mini dmp file. and here is the result , unfortunately i have problem to ...
2
votes
1
answer
366
views
Minidump - viewing content of memory address
I have a Windows 10 minidump with this opening text (viewed in WinDbg):
KMODE_EXCEPTION_NOT_HANDLED (1e)
This is a very common BugCheck. Usually the exception address pinpoints
the driver/function ...
2
votes
1
answer
468
views
ADB-like thing for Windows 10?
My actual aim is to find out what causes freezes occurring on a HP ProBook 450 G3 about once in a week (no reaction to any keystrokes except power button; however there is obvious activity, and the ...
2
votes
1
answer
3k
views
How to find IP address in WinDbg Windows Kernel Debugging
I found this article, from OSR forums, however, it didn't work in Windows 10.
2: kd> x srvnet!SrvAdminIpAddressList
81fb06b8 srvnet!SrvAdminIpAddressList = <no type information>
2: kd> du ...
2
votes
2
answers
968
views
Setting up a "!stoponexception" condition for windbg via command line / startup script?
I have a problem with an application we've made that sometimes crash with a StackOverflowException in some .NET code.
Unfortunately, the app is partly unmanaged and partly managed, and for some ...
2
votes
0
answers
455
views
Repeated crashing ableton.exe because of memory being accessed by .dll that doesn't exist. How can I fix this?
Ableton Live 10 is crashing often. I am opening the crash reports and opening the .dmp files in WinDBG. There are recurring themes:
So I was seeing a memory access violation due to a VST drum plug-in. ...
2
votes
1
answer
4k
views
Analyzing a dump file using WinDbg
I've been asked to explore a dump file (no source files given) using windbg and to extract some information from it:
determine what is the issue (hang/crash)
what module causes the hang.
What is the ...
2
votes
1
answer
512
views
troubleshoot freezing process WINWORD using windbg
Background info:
A few users in our network reported hanging of the WINWORD process as soon as they try to save a Word (2010) file after editting the document. Since they are working on a Citrix ...
2
votes
2
answers
378
views
Sony VAIO VGN-Z21WN BSOD Vista Business
I am trying to trouble shoot an issue one of our users is experiencing with their laptop. Essentially they get a MULTIPLE_IRP_COMPLETE_REQUESTS STOP error when resuming the system from sleep mode. ...
1
vote
1
answer
1k
views
Analyzing yet another Windows 7 minidump
I am trying to fix a WIn7 64B pc with BOSD-issues using remote access. So I cannot use dirver verifier.
So far I used windbg on the minidump getting this:
2: kd> !analyze -v
**********************...
1
vote
1
answer
1k
views
Windows explorer crashes randomly
I have a user on windows 10 that is having windows explorer crash at seemingly random times. It does not look like it always shows up in the EventLog but here are two times I have seen it:
Faulting ...
1
vote
2
answers
6k
views
Local Kernel Debugging on Windows 7 - WinDBG and LiveKD both give errors
This error is on Windows 7 Home Premium on my laptop (x64). I am trying to learn more about Windows Internals by using local kernel debugging in WinDBG, followed by LiveKD. I have Windows Debugging ...
1
vote
1
answer
409
views
Windbg and Dump File to trace application errors
Recently i installed an application that was built using Delphi , when i try to load some files in the application i get Access violation at address 00000000 . i couldn't find any info about the ...
1
vote
1
answer
118
views
Is there any way to find which app was being when a windows 10 system crashed via blue screen of death?
Since I would like to access which data was lost, I would like to see which app was open when the BSoD happened. The system in concern is a Windows 10.
I have a WinDbg preview. After running the ...
1
vote
1
answer
271
views
How do I set a breakpoint within WlanSvc?
My WiFi keeps getting disconnected, and I control my computer with Synergy. I've dug through the event logs and found that it all starts with a WlanSvcDisconnectRequest (part of the WlanSvc run under ...
1
vote
1
answer
486
views
Understanding Bluescreen minidump from Windows 7
My Windows 7 computer has been suffering from bluescreens that happen soon after booting.
I used Windbg to analyse dumb file of event but I am not sure if I understand what it is telling me.
These ...
1
vote
1
answer
916
views
Debugging DRIVER_POWER_STATE_FAILURE driver BSOD on Sony Vaio Z12 and Win 8.1
I need a bit of help tracking down which driver is causing issues with suspend/hibernate on my laptop.
I have a 3.5 year old Vaio VPCZ12 that doesn't have official support for Win 8, although I have ...
1
vote
1
answer
2k
views
Extract user name from memory dump with windbg
I would like to retrieve the name of the user that was signed in when the dump was created. Is that possible to do with windbg? I did some searching and couldn't find anything.
1
vote
2
answers
7k
views
Debugging hang where Ctrl Alt Delete won't work
My computer recently froze out of the blue wwhile I was browsing the web. Ctrl-Alt-Delete didn't work so I had to resort to killing the power and rebooting.
Now I'm wondering what I could have done ...
1
vote
0
answers
171
views
Troubleshooting Windows Event Viewer USB error 0x26 status 0xc000038e [closed]
I need some guidance in how to troubleshoot a low level issue I am facing with some USB devices.
Background: I have a .NET Windows Service that, scans connected USB devices via WMI queries + reads low ...
1
vote
0
answers
1k
views
How do I prevent Windows Error Reporting from deleting my live kernel dump file?
I have a system (Windows 10, version 20H2, OS Build 19042.1052) that locks up regularly for a few minutes. It doesn't crash/blue screen, but a live kernel dump is logged in the Application event log:
...
1
vote
1
answer
905
views
Unable to connect to VirtualBox through WinDbg via COM port
I am doing windows driver debugging and am trying to connect to Windows 10 on a virtual box guest. I have set up a serial port on virtual box on COM1 as a Host Pipe with a name \\.\pipe\windebugpipe ...
1
vote
0
answers
449
views
Multiple BSOD issues (Windbg included)
I have been experiencing multiple BSOD issues, the latest one was;
PAGE_FAULT_IN_NONPAGED_AREA What failed: portcls.sys
The issues were occurring when rendering high intensive games but now the ...
1
vote
0
answers
422
views
Applications hanging on random files
I experience application freezes everyday, several times a day, for a few days now, on my Windows 7 system.
This system has been stable for 4 years, so something new is happening.
The main symptom ...
1
vote
1
answer
273
views
How to change DML link color in WinDbg
I am using WinDbg 6.3.9600.16384 from the Windows 8.1 SDK. I prefer a dark background, but it makes the dark blue DML links difficult to read. I've been through the list of color changing options in ...
1
vote
0
answers
305
views
HL1, TF1, CS 1.6 crashes down
I have in their steam folders *.mdmp files. I opened them in WinDbg and got this output:
Microsoft (R) Windows Debugger Version 6.2.8400.0 AMD64
Copyright (c) Microsoft Corporation. All rights ...
0
votes
2
answers
2k
views
FAULTY_HARDWARE_CORRUPTED_PAGE, probably caused by: ntkrnlmp.exe
My laptop suddenly crashed with the following screen.
After reboot I've opened memory.dmp under WinDbg with the following details:
Loading Dump File [D:\Debug\MEMORY.DMP]
Kernel Bitmap Dump File: ...
0
votes
4
answers
23k
views
Windows 8.1 DRIVER_POWER_STATE_FAILURE + Dump
my Windows 8.1 machine started suddenly to crash with a blue screen and showing the error code DRIVER_POWER_STATE_FAILURE. It usually fails after it wakes up from sleep or after it starts, it hangs ...
0
votes
1
answer
29
views
BSOD new Lenovo 14ARP8 laptop. > WinDbg Symbols downloading issue / Windows download errors (can't debug BSOD dump)
I am hoping someone here with knowledge in this area would be able to give me a helping hand. The laptop started BSODing with stock setup. I wiped it and got it set back up manually.
In short:
new ...
0
votes
1
answer
773
views
Unable to install windows debugging tools on windows 7, it says it needs .NET Framework 4, but won't let me install it
Unable to install windows debugging tools on windows 7, it says it needs .NET Framework 4, but won't let me install it
I wanted to analyze a BSOD, so I looked https://www.instructables.com/id/How-to-...
0
votes
2
answers
2k
views
WinDbg repeatedly downloads but doesn't install
I'm trying to install WinDbg from Microsoft's Hardware Dev Centre but at the end of the download process it tells me to run the installer again which merely downloads the same files again:
How do you ...
0
votes
2
answers
10k
views
WinDbg - can it be downloaded
I have a machine that gives me a BSOD at least once a day. I see a number of references here to WinDbg, where can I find that so I can look at the minidumps from the BSODs.
Thanks
John
0
votes
3
answers
1k
views
Analyze a Blue Screen of Death in Windows 7
Bought a new computer 6 month ago. From day one it's been acting funny.
It hangs (without a BSOD) and the only way to un-hang it is by restarting it. On these occasions I have no idea what went ...
0
votes
1
answer
355
views
What does the WinDbg command prompt indicate?
I'm using WinDbg and am wondering what the WinDbg command prompt indicates. In my case, the command prompt reads
2: kd>
I assume the kd means I'm debugging in kernel-mode (as opposed to user-mode,...
0
votes
1
answer
1k
views
How do I attach windbg kernel debugger to the local machine?
I have used bcdedit.exe -debug on and rebooted. However I still get the error:
---------------------------
WinDbg:10.0.19041.685 X86
---------------------------
The system does not support local ...