Skip to main content

Questions tagged [windbg]

WinDbg is a user and kernel mode debugger for Windows. It analyzes memory dumps.

Filter by
Sorted by
Tagged with
0 votes
1 answer
62 views

BSOD new Lenovo 14ARP8 laptop. > WinDbg Symbols downloading issue / Windows download errors (can't debug BSOD dump)

I am hoping someone here with knowledge in this area would be able to give me a helping hand. The laptop started BSODing with stock setup. I wiped it and got it set back up manually. In short: new ...
CodeMonkey's user avatar
1 vote
0 answers
191 views

Troubleshooting Windows Event Viewer USB error 0x26 status 0xc000038e [closed]

I need some guidance in how to troubleshoot a low level issue I am facing with some USB devices. Background: I have a .NET Windows Service that, scans connected USB devices via WMI queries + reads low ...
Veverke's user avatar
  • 187
1 vote
1 answer
497 views

Windbg and Dump File to trace application errors

Recently i installed an application that was built using Delphi , when i try to load some files in the application i get Access violation at address 00000000 . i couldn't find any info about the ...
user727701's user avatar
2 votes
1 answer
455 views

Minidump - viewing content of memory address

I have a Windows 10 minidump with this opening text (viewed in WinDbg): KMODE_EXCEPTION_NOT_HANDLED (1e) This is a very common BugCheck. Usually the exception address pinpoints the driver/function ...
Vegard's user avatar
  • 316
0 votes
1 answer
445 views

What does the WinDbg command prompt indicate?

I'm using WinDbg and am wondering what the WinDbg command prompt indicates. In my case, the command prompt reads 2: kd> I assume the kd means I'm debugging in kernel-mode (as opposed to user-mode,...
Beat Nideröst's user avatar
0 votes
1 answer
1k views

How do I attach windbg kernel debugger to the local machine?

I have used bcdedit.exe -debug on and rebooted. However I still get the error: --------------------------- WinDbg:10.0.19041.685 X86 --------------------------- The system does not support local ...
EatingTechnobladesRemainsAt3am's user avatar
1 vote
0 answers
1k views

How do I prevent Windows Error Reporting from deleting my live kernel dump file?

I have a system (Windows 10, version 20H2, OS Build 19042.1052) that locks up regularly for a few minutes. It doesn't crash/blue screen, but a live kernel dump is logged in the Application event log: ...
Beat Nideröst's user avatar
2 votes
0 answers
479 views

Repeated crashing ableton.exe because of memory being accessed by .dll that doesn't exist. How can I fix this?

Ableton Live 10 is crashing often. I am opening the crash reports and opening the .dmp files in WinDBG. There are recurring themes: So I was seeing a memory access violation due to a VST drum plug-in. ...
Joshua Jones's user avatar
0 votes
1 answer
823 views

Unable to install windows debugging tools on windows 7, it says it needs .NET Framework 4, but won't let me install it

Unable to install windows debugging tools on windows 7, it says it needs .NET Framework 4, but won't let me install it I wanted to analyze a BSOD, so I looked https://www.instructables.com/id/How-to-...
barlop's user avatar
  • 24.3k
1 vote
1 answer
161 views

Is there any way to find which app was being when a windows 10 system crashed via blue screen of death?

Since I would like to access which data was lost, I would like to see which app was open when the BSoD happened. The system in concern is a Windows 10. I have a WinDbg preview. After running the ...
Aqqqq's user avatar
  • 181
2 votes
1 answer
543 views

ADB-like thing for Windows 10?

My actual aim is to find out what causes freezes occurring on a HP ProBook 450 G3 about once in a week (no reaction to any keystrokes except power button; however there is obvious activity, and the ...
მამუკა ჯიბლაძე's user avatar
2 votes
1 answer
2k views

Using Windbg to find the CPU core number which a faulting thread ran on?

I've been given a 20 core CPU with an intermittent fault on some core. Allegedly it's confirmed by Intel but no further details and not replaceable under warranty, or so Im told (I can't check now). ...
Stilez's user avatar
  • 1,745
0 votes
2 answers
3k views

WinDbg repeatedly downloads but doesn't install

I'm trying to install WinDbg from Microsoft's Hardware Dev Centre but at the end of the download process it tells me to run the installer again which merely downloads the same files again: How do you ...
CJ Dennis's user avatar
  • 1,011
0 votes
0 answers
219 views

Frequent BSOD on windows 10

Since about 3 weeks i'm getting frequent BSOD, when i try to analyze them with WINDBG it seems that the cause is always changing. I'm afraid i can't figure this out on my own. Link to dumps Any help ...
iJabuu's user avatar
  • 1
8 votes
1 answer
1k views

An item with the same key has already been added

Running a performance analysis on DebugDiag Analysis is failed with following message: PerfAnalysis - v (2.3.0.37) Failed Dump File: C:\w3wp.DMP; Type: System.ArgumentException Message: An item ...
xdrnc's user avatar
  • 201
6 votes
6 answers
912 views

Windows 10 Pro 64-bit hard hang

After I installed Windows 10 on my Sony Vaio SVS13A190X laptop it started freezing periodically. Usually it happens during installation of something i.e. when there is some heavy disk usage. I have ...
Alexey Andrushkevich's user avatar
0 votes
0 answers
535 views

Isolating Cause of Explorer Crash in PROPSYS.DLL

Explorer.exe crashes every time I do this: Click Start Click Run Type C:\ and hit Enter The problem just started today, and I need help tracking down the cause. Symptoms It only happens when I ...
rkagerer's user avatar
  • 221
0 votes
0 answers
1k views

Win10 freezes on boot. ERROR_CODE: (NTSTATUS) 0xc0000420 - An assertion failure has occurred

So I've been trying to track down an issue with a computer. Win7 boots fine, unless multi-threading is disabled in bios, then it freezes on the load screen. I'm not sure why that would be. Anyways, ...
Tyler Fontaine's user avatar
2 votes
1 answer
3k views

How to find IP address in WinDbg Windows Kernel Debugging

I found this article, from OSR forums, however, it didn't work in Windows 10. 2: kd> x srvnet!SrvAdminIpAddressList 81fb06b8 srvnet!SrvAdminIpAddressList = <no type information> 2: kd> du ...
Kevin's user avatar
  • 1,353
1 vote
1 answer
977 views

Unable to connect to VirtualBox through WinDbg via COM port

I am doing windows driver debugging and am trying to connect to Windows 10 on a virtual box guest. I have set up a serial port on virtual box on COM1 as a Host Pipe with a name \\.\pipe\windebugpipe ...
Toby Hughes's user avatar
0 votes
2 answers
2k views

FAULTY_HARDWARE_CORRUPTED_PAGE, probably caused by: ntkrnlmp.exe

My laptop suddenly crashed with the following screen. After reboot I've opened memory.dmp under WinDbg with the following details: Loading Dump File [D:\Debug\MEMORY.DMP] Kernel Bitmap Dump File: ...
kenorb's user avatar
  • 25.8k
1 vote
0 answers
451 views

Multiple BSOD issues (Windbg included)

I have been experiencing multiple BSOD issues, the latest one was; PAGE_FAULT_IN_NONPAGED_AREA What failed: portcls.sys The issues were occurring when rendering high intensive games but now the ...
Jamie Doig's user avatar
2 votes
1 answer
4k views

Analyzing a dump file using WinDbg

I've been asked to explore a dump file (no source files given) using windbg and to extract some information from it: determine what is the issue (hang/crash) what module causes the hang. What is the ...
dushkin's user avatar
  • 311
1 vote
1 answer
278 views

How do I set a breakpoint within WlanSvc?

My WiFi keeps getting disconnected, and I control my computer with Synergy. I've dug through the event logs and found that it all starts with a WlanSvcDisconnectRequest (part of the WlanSvc run under ...
Austin Burk's user avatar
4 votes
2 answers
18k views

How to install WinDbg on a PC without internet connection

I have to install only the WinDbg (not the complete SDK) on a production system. I can only find a web installer, which needs an internet connection to download the SDK/winDbg. Is it possible that I ...
skm's user avatar
  • 951
2 votes
1 answer
2k views

How to open dump file with windbg by double clicking in file explorer?

I am sure I was able to double click a crash dump file (*.dmp) file in explorer in my old PC and it will open up in WinDbg. In my new PC it doesn't open and gives an error. Could not create process ...
zar's user avatar
  • 1,753
1 vote
1 answer
1k views

Windows explorer crashes randomly

I have a user on windows 10 that is having windows explorer crash at seemingly random times. It does not look like it always shows up in the EventLog but here are two times I have seen it: Faulting ...
tbrew1's user avatar
  • 13
2 votes
1 answer
177 views

Win7 Getting blue screen Crash, how to check if its software or hardware . (WinDbg log included)

suddenly my old win 7 64 bit started to crash with blue screen . i want to know what is the problem . i did !analize on the mini dmp file. and here is the result , unfortunately i have problem to ...
user71020's user avatar
  • 607
14 votes
4 answers
80k views

Windows 10 ShellExperienceHost crashes

I recently cloned my Windows 10 partition from HDD to SSD. I cannot open the Start Menu, Notifications, or anything that uses ShellExperienceHost. This includes things like the Calculator app, Edge ...
Eddie Fletcher's user avatar
1 vote
0 answers
427 views

Applications hanging on random files

I experience application freezes everyday, several times a day, for a few days now, on my Windows 7 system. This system has been stable for 4 years, so something new is happening. The main symptom ...
SR_'s user avatar
  • 111
4 votes
2 answers
22k views

where can I get windbg for windows 7 64bit without the whole sdk?

I am looking for windbg. Without the whole Windows SDK I saw this link https://stackoverflow.com/questions/2736250/getting-windbg-without-the-whole-wdk But the accepted answer, from dave black, (...
barlop's user avatar
  • 24.3k
3 votes
4 answers
349 views

Computer hangs on Sleep. Need help reading dmp file

My computer is hanging when it tries to enter sleep mode. The screen will turn off but the computer continues to run indefinitely. I have tried debugging it myself but it has exceeded my abilities. I ...
aantoin's user avatar
  • 31
0 votes
1 answer
431 views

Windbg for memory analysis using mimikatz ERROR

I'm using windbg version 6.12 and using mimilib.dll for debugging memory. All works fine until I get following output on UI 0:000> !mimikatz DPAPI Backup keys ================= Current prefered ...
asad's user avatar
  • 1
1 vote
1 answer
1k views

Analyzing yet another Windows 7 minidump

I am trying to fix a WIn7 64B pc with BOSD-issues using remote access. So I cannot use dirver verifier. So far I used windbg on the minidump getting this: 2: kd> !analyze -v **********************...
Akil's user avatar
  • 23
0 votes
2 answers
3k views

Trying (and failing) to install Debugging Tools for Windows (WinDbg)

I'm attempting to get WinDbg installed from this page: http://msdn.microsoft.com/en-us/windows/hardware/hh852365 (under "Standalone Debugging Tools...", 3rd section down). After installing from ...
Mica's user avatar
  • 842
0 votes
0 answers
477 views

Understanding Memory.dmp file drive failure

I have a desktop Windows 7 PC that keeps randomly rebooting, so I looked in the event log an there was lot of Critical kernel-power events followed by a bugcheck events. The bugcheck event pointed ...
Richard's user avatar
  • 101
1 vote
1 answer
488 views

Understanding Bluescreen minidump from Windows 7

My Windows 7 computer has been suffering from bluescreens that happen soon after booting. I used Windbg to analyse dumb file of event but I am not sure if I understand what it is telling me. These ...
Madoc Comadrin's user avatar
2 votes
1 answer
527 views

troubleshoot freezing process WINWORD using windbg

Background info: A few users in our network reported hanging of the WINWORD process as soon as they try to save a Word (2010) file after editting the document. Since they are working on a Citrix ...
RockYoClock's user avatar
0 votes
4 answers
23k views

Windows 8.1 DRIVER_POWER_STATE_FAILURE + Dump

my Windows 8.1 machine started suddenly to crash with a blue screen and showing the error code DRIVER_POWER_STATE_FAILURE. It usually fails after it wakes up from sleep or after it starts, it hangs ...
Diego Jancic's user avatar
1 vote
1 answer
278 views

How to change DML link color in WinDbg

I am using WinDbg 6.3.9600.16384 from the Windows 8.1 SDK. I prefer a dark background, but it makes the dark blue DML links difficult to read. I've been through the list of color changing options in ...
PaulH's user avatar
  • 429
2 votes
1 answer
882 views

BSOD BCCode 124, request for analysis of my WinDGB log

I've been experiencing system restarts for some time decribed with BSOD log by BCCode 124. I checked my RAM with MemTest for 3.5 hours with no error, then scaned system with Avast and Malwarebytes. ...
user avatar
3 votes
0 answers
834 views

BSoD DRIVER_VERIFIER_DETECTED_VIOLATION

I'm having a lot of BSoD's lately, so I ran Driver Verifier (verifier in command line). It generated DRIVER_VERIFIER_DETECTED_VIOLATIONBSoD. Analyzing the dump with WinDbg: !analyze -v **************...
alex's user avatar
  • 741
0 votes
1 answer
2k views

Random freezing on ESXi environment across several servers

Over the past couple of weeks we've been experiencing some issues with our ESXi based VDI environment whereby Windows 7 Desktop images randomly freeze throughout the day. This can happen on any VDI ...
JM3's user avatar
  • 1
1 vote
1 answer
919 views

Debugging DRIVER_POWER_STATE_FAILURE driver BSOD on Sony Vaio Z12 and Win 8.1

I need a bit of help tracking down which driver is causing issues with suspend/hibernate on my laptop. I have a 3.5 year old Vaio VPCZ12 that doesn't have official support for Win 8, although I have ...
AndyCNX's user avatar
  • 133
0 votes
0 answers
1k views

Constant BCCode 109 BSOD, WinDbg Analysis Inconclusive

The last install I did was BlueStacks and the random BSODs rolled in. It's always BCCode 109 and says ntoskrnl.sys is the cause. I used WinDbg to analyze the minidump. Can someone help analyze these ...
Shadow's user avatar
  • 162
1 vote
2 answers
6k views

Local Kernel Debugging on Windows 7 - WinDBG and LiveKD both give errors

This error is on Windows 7 Home Premium on my laptop (x64). I am trying to learn more about Windows Internals by using local kernel debugging in WinDBG, followed by LiveKD. I have Windows Debugging ...
ARV's user avatar
  • 955
1 vote
2 answers
10k views

WinDbg - can it be downloaded

I have a machine that gives me a BSOD at least once a day. I see a number of references here to WinDbg, where can I find that so I can look at the minidumps from the BSODs. Thanks John
jsyerxa's user avatar
  • 21
1 vote
1 answer
2k views

Extract user name from memory dump with windbg

I would like to retrieve the name of the user that was signed in when the dump was created. Is that possible to do with windbg? I did some searching and couldn't find anything.
minhaz1's user avatar
  • 290
1 vote
2 answers
7k views

Debugging hang where Ctrl Alt Delete won't work

My computer recently froze out of the blue wwhile I was browsing the web. Ctrl-Alt-Delete didn't work so I had to resort to killing the power and rebooting. Now I'm wondering what I could have done ...
Josh's user avatar
  • 718
3 votes
2 answers
3k views

What does the C in Cid stand for in winDbg, kdbg and livekd?

If execute the !process command in the windwos debugger you get output in this format: PROCESS fffffa8006bff940 SessionId: 0 Cid: 03ec Peb: 7f79ae1f000 ParentCid: 02e4 DirBase: 084ed000 ...
Justin Dearing's user avatar