Questions tagged [windbg]

WinDbg is a user and kernel mode debugger for Windows. It analyzes memory dumps.

Filter by
Sorted by
Tagged with
14 votes
4 answers
79k views

Windows 10 ShellExperienceHost crashes

I recently cloned my Windows 10 partition from HDD to SSD. I cannot open the Start Menu, Notifications, or anything that uses ShellExperienceHost. This includes things like the Calculator app, Edge ...
Eddie Fletcher's user avatar
10 votes
1 answer
20k views

How to inspect a Process Explorer full dump

I've been having some trouble with Visual Studio 2010. It stops working, and I see it increases in memory usage. So I suspect a memory leak (in one of the plugins maybe). I took a Full Dump with ...
Peter's user avatar
  • 1,288
8 votes
1 answer
1k views

An item with the same key has already been added

Running a performance analysis on DebugDiag Analysis is failed with following message: PerfAnalysis - v (2.3.0.37) Failed Dump File: C:\w3wp.DMP; Type: System.ArgumentException Message: An item ...
xdrnc's user avatar
  • 201
6 votes
6 answers
893 views

Windows 10 Pro 64-bit hard hang

After I installed Windows 10 on my Sony Vaio SVS13A190X laptop it started freezing periodically. Usually it happens during installation of something i.e. when there is some heavy disk usage. I have ...
Alexey Andrushkevich's user avatar
5 votes
1 answer
5k views

Analyzing a WinDbg dump after a BSOD - "An expected clock interrupt was not received"

About six months ago I upgraded my computer hardware - new mobo, CPU, RAM, etc. It's run like a champ until just recently. This morning when I went to my computer it had a BSOD. I used WinDbg to ...
Scott Mitchell's user avatar
5 votes
1 answer
6k views

WinDbg Problem with ntoskrnl

I've got a similar problem to "BSOD - Unable to verify timestamp for ntoskrnl.exe", in that I can't seem to get the correct symbols to read ntoskrnl. I've followed the advice given by BK1E, but still ...
Wilf's user avatar
  • 202
4 votes
2 answers
21k views

where can I get windbg for windows 7 64bit without the whole sdk?

I am looking for windbg. Without the whole Windows SDK I saw this link https://stackoverflow.com/questions/2736250/getting-windbg-without-the-whole-wdk But the accepted answer, from dave black, (...
barlop's user avatar
  • 23.8k
4 votes
2 answers
16k views

How to install WinDbg on a PC without internet connection

I have to install only the WinDbg (not the complete SDK) on a production system. I can only find a web installer, which needs an internet connection to download the SDK/winDbg. Is it possible that I ...
skm's user avatar
  • 941
3 votes
2 answers
3k views

What does the C in Cid stand for in winDbg, kdbg and livekd?

If execute the !process command in the windwos debugger you get output in this format: PROCESS fffffa8006bff940 SessionId: 0 Cid: 03ec Peb: 7f79ae1f000 ParentCid: 02e4 DirBase: 084ed000 ...
Justin Dearing's user avatar
3 votes
0 answers
824 views

BSoD DRIVER_VERIFIER_DETECTED_VIOLATION

I'm having a lot of BSoD's lately, so I ran Driver Verifier (verifier in command line). It generated DRIVER_VERIFIER_DETECTED_VIOLATIONBSoD. Analyzing the dump with WinDbg: !analyze -v **************...
alex's user avatar
  • 731
3 votes
4 answers
346 views

Computer hangs on Sleep. Need help reading dmp file

My computer is hanging when it tries to enter sleep mode. The screen will turn off but the computer continues to run indefinitely. I have tried debugging it myself but it has exceeded my abilities. I ...
aantoin's user avatar
  • 31
2 votes
4 answers
4k views

How to Export/Parse files from memory.dmp?

My computer got bluescreen, and saved all info to a memory file before restart. I have memory.dmp, and i have some very important files that i didnt save. All the files I need to recover were txt ...
met.in's user avatar
  • 21
2 votes
1 answer
1k views

Using Windbg to find the CPU core number which a faulting thread ran on?

I've been given a 20 core CPU with an intermittent fault on some core. Allegedly it's confirmed by Intel but no further details and not replaceable under warranty, or so Im told (I can't check now). ...
Stilez's user avatar
  • 1,685
2 votes
1 answer
2k views

How to open dump file with windbg by double clicking in file explorer?

I am sure I was able to double click a crash dump file (*.dmp) file in explorer in my old PC and it will open up in WinDbg. In my new PC it doesn't open and gives an error. Could not create process ...
zar's user avatar
  • 1,733
2 votes
1 answer
881 views

BSOD BCCode 124, request for analysis of my WinDGB log

I've been experiencing system restarts for some time decribed with BSOD log by BCCode 124. I checked my RAM with MemTest for 3.5 hours with no error, then scaned system with Avast and Malwarebytes. ...
user avatar
2 votes
1 answer
174 views

Win7 Getting blue screen Crash, how to check if its software or hardware . (WinDbg log included)

suddenly my old win 7 64 bit started to crash with blue screen . i want to know what is the problem . i did !analize on the mini dmp file. and here is the result , unfortunately i have problem to ...
user71020's user avatar
  • 607
2 votes
1 answer
366 views

Minidump - viewing content of memory address

I have a Windows 10 minidump with this opening text (viewed in WinDbg): KMODE_EXCEPTION_NOT_HANDLED (1e) This is a very common BugCheck. Usually the exception address pinpoints the driver/function ...
Vegard's user avatar
  • 316
2 votes
1 answer
468 views

ADB-like thing for Windows 10?

My actual aim is to find out what causes freezes occurring on a HP ProBook 450 G3 about once in a week (no reaction to any keystrokes except power button; however there is obvious activity, and the ...
მამუკა ჯიბლაძე's user avatar
2 votes
1 answer
3k views

How to find IP address in WinDbg Windows Kernel Debugging

I found this article, from OSR forums, however, it didn't work in Windows 10. 2: kd> x srvnet!SrvAdminIpAddressList 81fb06b8 srvnet!SrvAdminIpAddressList = <no type information> 2: kd> du ...
Kevin's user avatar
  • 1,343
2 votes
2 answers
968 views

Setting up a "!stoponexception" condition for windbg via command line / startup script?

I have a problem with an application we've made that sometimes crash with a StackOverflowException in some .NET code. Unfortunately, the app is partly unmanaged and partly managed, and for some ...
Lasse V. Karlsen's user avatar
2 votes
0 answers
455 views

Repeated crashing ableton.exe because of memory being accessed by .dll that doesn't exist. How can I fix this?

Ableton Live 10 is crashing often. I am opening the crash reports and opening the .dmp files in WinDBG. There are recurring themes: So I was seeing a memory access violation due to a VST drum plug-in. ...
Joshua Jones's user avatar
2 votes
1 answer
4k views

Analyzing a dump file using WinDbg

I've been asked to explore a dump file (no source files given) using windbg and to extract some information from it: determine what is the issue (hang/crash) what module causes the hang. What is the ...
dushkin's user avatar
  • 291
2 votes
1 answer
512 views

troubleshoot freezing process WINWORD using windbg

Background info: A few users in our network reported hanging of the WINWORD process as soon as they try to save a Word (2010) file after editting the document. Since they are working on a Citrix ...
RockYoClock's user avatar
2 votes
2 answers
378 views

Sony VAIO VGN-Z21WN BSOD Vista Business

I am trying to trouble shoot an issue one of our users is experiencing with their laptop. Essentially they get a MULTIPLE_IRP_COMPLETE_REQUESTS STOP error when resuming the system from sleep mode. ...
user avatar
1 vote
1 answer
1k views

Analyzing yet another Windows 7 minidump

I am trying to fix a WIn7 64B pc with BOSD-issues using remote access. So I cannot use dirver verifier. So far I used windbg on the minidump getting this: 2: kd> !analyze -v **********************...
Akil's user avatar
  • 23
1 vote
1 answer
1k views

Windows explorer crashes randomly

I have a user on windows 10 that is having windows explorer crash at seemingly random times. It does not look like it always shows up in the EventLog but here are two times I have seen it: Faulting ...
tbrew1's user avatar
  • 13
1 vote
2 answers
6k views

Local Kernel Debugging on Windows 7 - WinDBG and LiveKD both give errors

This error is on Windows 7 Home Premium on my laptop (x64). I am trying to learn more about Windows Internals by using local kernel debugging in WinDBG, followed by LiveKD. I have Windows Debugging ...
ARV's user avatar
  • 935
1 vote
1 answer
409 views

Windbg and Dump File to trace application errors

Recently i installed an application that was built using Delphi , when i try to load some files in the application i get Access violation at address 00000000 . i couldn't find any info about the ...
user727701's user avatar
1 vote
1 answer
118 views

Is there any way to find which app was being when a windows 10 system crashed via blue screen of death?

Since I would like to access which data was lost, I would like to see which app was open when the BSoD happened. The system in concern is a Windows 10. I have a WinDbg preview. After running the ...
Aqqqq's user avatar
  • 171
1 vote
1 answer
271 views

How do I set a breakpoint within WlanSvc?

My WiFi keeps getting disconnected, and I control my computer with Synergy. I've dug through the event logs and found that it all starts with a WlanSvcDisconnectRequest (part of the WlanSvc run under ...
Austin Burk's user avatar
1 vote
1 answer
486 views

Understanding Bluescreen minidump from Windows 7

My Windows 7 computer has been suffering from bluescreens that happen soon after booting. I used Windbg to analyse dumb file of event but I am not sure if I understand what it is telling me. These ...
Madoc Comadrin's user avatar
1 vote
1 answer
916 views

Debugging DRIVER_POWER_STATE_FAILURE driver BSOD on Sony Vaio Z12 and Win 8.1

I need a bit of help tracking down which driver is causing issues with suspend/hibernate on my laptop. I have a 3.5 year old Vaio VPCZ12 that doesn't have official support for Win 8, although I have ...
AndyCNX's user avatar
  • 133
1 vote
1 answer
2k views

Extract user name from memory dump with windbg

I would like to retrieve the name of the user that was signed in when the dump was created. Is that possible to do with windbg? I did some searching and couldn't find anything.
minhaz1's user avatar
  • 290
1 vote
2 answers
7k views

Debugging hang where Ctrl Alt Delete won't work

My computer recently froze out of the blue wwhile I was browsing the web. Ctrl-Alt-Delete didn't work so I had to resort to killing the power and rebooting. Now I'm wondering what I could have done ...
Josh's user avatar
  • 728
1 vote
0 answers
171 views

Troubleshooting Windows Event Viewer USB error 0x26 status 0xc000038e [closed]

I need some guidance in how to troubleshoot a low level issue I am facing with some USB devices. Background: I have a .NET Windows Service that, scans connected USB devices via WMI queries + reads low ...
Veverke's user avatar
  • 177
1 vote
0 answers
1k views

How do I prevent Windows Error Reporting from deleting my live kernel dump file?

I have a system (Windows 10, version 20H2, OS Build 19042.1052) that locks up regularly for a few minutes. It doesn't crash/blue screen, but a live kernel dump is logged in the Application event log: ...
Beat Nideröst's user avatar
1 vote
1 answer
905 views

Unable to connect to VirtualBox through WinDbg via COM port

I am doing windows driver debugging and am trying to connect to Windows 10 on a virtual box guest. I have set up a serial port on virtual box on COM1 as a Host Pipe with a name \\.\pipe\windebugpipe ...
Toby Hughes's user avatar
1 vote
0 answers
449 views

Multiple BSOD issues (Windbg included)

I have been experiencing multiple BSOD issues, the latest one was; PAGE_FAULT_IN_NONPAGED_AREA What failed: portcls.sys The issues were occurring when rendering high intensive games but now the ...
Jamie Doig's user avatar
1 vote
0 answers
422 views

Applications hanging on random files

I experience application freezes everyday, several times a day, for a few days now, on my Windows 7 system. This system has been stable for 4 years, so something new is happening. The main symptom ...
SR_'s user avatar
  • 111
1 vote
1 answer
273 views

How to change DML link color in WinDbg

I am using WinDbg 6.3.9600.16384 from the Windows 8.1 SDK. I prefer a dark background, but it makes the dark blue DML links difficult to read. I've been through the list of color changing options in ...
PaulH's user avatar
  • 419
1 vote
0 answers
305 views

HL1, TF1, CS 1.6 crashes down

I have in their steam folders *.mdmp files. I opened them in WinDbg and got this output: Microsoft (R) Windows Debugger Version 6.2.8400.0 AMD64 Copyright (c) Microsoft Corporation. All rights ...
Guy Fawkes's user avatar
0 votes
2 answers
2k views

FAULTY_HARDWARE_CORRUPTED_PAGE, probably caused by: ntkrnlmp.exe

My laptop suddenly crashed with the following screen. After reboot I've opened memory.dmp under WinDbg with the following details: Loading Dump File [D:\Debug\MEMORY.DMP] Kernel Bitmap Dump File: ...
kenorb's user avatar
  • 25.4k
0 votes
4 answers
23k views

Windows 8.1 DRIVER_POWER_STATE_FAILURE + Dump

my Windows 8.1 machine started suddenly to crash with a blue screen and showing the error code DRIVER_POWER_STATE_FAILURE. It usually fails after it wakes up from sleep or after it starts, it hangs ...
Diego Jancic's user avatar
0 votes
1 answer
29 views

BSOD new Lenovo 14ARP8 laptop. > WinDbg Symbols downloading issue / Windows download errors (can't debug BSOD dump)

I am hoping someone here with knowledge in this area would be able to give me a helping hand. The laptop started BSODing with stock setup. I wiped it and got it set back up manually. In short: new ...
CodeMonkey's user avatar
0 votes
1 answer
773 views

Unable to install windows debugging tools on windows 7, it says it needs .NET Framework 4, but won't let me install it

Unable to install windows debugging tools on windows 7, it says it needs .NET Framework 4, but won't let me install it I wanted to analyze a BSOD, so I looked https://www.instructables.com/id/How-to-...
barlop's user avatar
  • 23.8k
0 votes
2 answers
2k views

WinDbg repeatedly downloads but doesn't install

I'm trying to install WinDbg from Microsoft's Hardware Dev Centre but at the end of the download process it tells me to run the installer again which merely downloads the same files again: How do you ...
CJ Dennis's user avatar
  • 1,001
0 votes
2 answers
10k views

WinDbg - can it be downloaded

I have a machine that gives me a BSOD at least once a day. I see a number of references here to WinDbg, where can I find that so I can look at the minidumps from the BSODs. Thanks John
jsyerxa's user avatar
  • 11
0 votes
3 answers
1k views

Analyze a Blue Screen of Death in Windows 7

Bought a new computer 6 month ago. From day one it's been acting funny. It hangs (without a BSOD) and the only way to un-hang it is by restarting it. On these occasions I have no idea what went ...
Elish's user avatar
  • 11
0 votes
1 answer
355 views

What does the WinDbg command prompt indicate?

I'm using WinDbg and am wondering what the WinDbg command prompt indicates. In my case, the command prompt reads 2: kd> I assume the kd means I'm debugging in kernel-mode (as opposed to user-mode,...
Beat Nideröst's user avatar
0 votes
1 answer
1k views

How do I attach windbg kernel debugger to the local machine?

I have used bcdedit.exe -debug on and rebooted. However I still get the error: --------------------------- WinDbg:10.0.19041.685 X86 --------------------------- The system does not support local ...
EatingTechnobladesRemainsAt3am's user avatar