Instructables
Picture of How to Analyze a BSOD Crash Dump
Blue screens of death can be caused by a multitude of factors. There are many tools on the internet that can analyze these; however, Microsoft has its own tool. When a computer is exhibiting problems, most users are reluctant to download a 3rd party tool that "might make things worse." This is where the Windows Debugging Tools come into play.

This How to Will Instruct a User on How to Install the Tool and How to Analyze a Crash Dump to Determine the Cause.
 
Remove these adsRemove these ads by Signing Up

Step 1: Download the Debugging Tools for Windows

The tools are included as part of the Windows Software Development Kit (SDK) for Windows. We only want the tools.

Step 2: Run the Setup for the SDK

Picture of Run the Setup for the SDK
The installer is a downloader for the complete SDK. We don't want all the extras, we just want the tools.
  1. Click Next through the installer until you reach the screen that downloads the packages, labeled: "Select the features you want to install."
  2. Deselect all the checkboxes next to all the packages except Debugging tools for Windows
  3. Click Install.

Step 3: Wait for the Installer

Picture of Wait for the Installer
Wait for the installer to download the packages and install them. Once the installation is complete, click on Close.

Step 4: Run WinDbg

Picture of Run WinDbg
  1. Run Windbg as administrator. The screenshot is from Windows 8.1, but this step is the same for all Operating systems Vista and higher, run as Administrator.
    1. On Windows 8.1, this is achieved by searching for the program, then Right Clicking it in the list to the right.
    2. It is important that Windbg be ran as Administrator.
      1. On Windows 8 and higher machines, there are permission issues reading crash dumps when the user isn't elevated.

Step 5: Set the Symbol Path

Picture of Set the Symbol Path
Windbg requires a symbol file path.
  1. Click on File
  2. Click on Symbol File Path ...

Step 6: Input the Symbols File Path

Picture of Input the Symbols File Path
  1. Paste the following text into the Symbol Search Path Dialog
    1. SRV*C:\Windows\symbol_cache*http://msdl.microsoft.com/download/symbols
  2. Click OK

Step 7: Save the Workspace

Picture of Save the Workspace
  1. Click on File
  2. Click on Save Workspace

Step 8: Open the Crash Dump

Picture of Open the Crash Dump
windbg_dump_open_modal.png
  1. Click on File
  2. Click on Open Crash Dump...
  3. Navigate to: C:\Windows\
  4. Select the file named MEMORY.DMP
  5. Click Open
thebear110 months ago
nice job on this
will this work on windows xp pro sp3
Azerial (author)  thebear110 months ago
Hi thebear1, I have modified the first step to include information (a different download link) about Vista and Windows XP.

All the sequential steps will be the same. The only difference is the GUI will be slightly different, but the package to download will be named the same. (Also you won't need to run as Administrator on Windows XP unless you're a limited user) 

Thanks for pointing that out! :)
NogintheNog made it!7 months ago

Hi,

I followed your very clear instructions, but when I run Windbg I have the problem that the Symbols file path (entered in Step 6) cannot be found which generates a lengthy list of error messages. Any advice appreciated.

Regards,

Nogin

Hey,

Sorry about your computer issue. If the issue has persisted, maybe you could check here [ http://errortools.com/windows/fix-a-windows-pc-crash-dump/] for some info. All the best.

Azerial (author)  NogintheNog2 months ago

Hi NogintheNog,
Looks like your symbol path is correct...(according to this article http://support.microsoft.com/kb/311503) Are you connected to the internet? It needs to download the symbols from the net in order to work. If you are connected to the internet, make sure your firewall isn't blocking the debugger. Good Luck!

so how did it go with the problem?

Azerial (author)  robin.m.thuresson2 months ago

This one? It was actually a bug in Windows 8 that microsoft couldnt reproduce. It eventually went away, so something must have fixed it.

PhenomHTPC7 months ago

HI Azerial, Thanks for the helpful post. I have a question, that I hope you may help with. I have a Intel NUC D34010WYK with windows 8.1. And since the first initial install my OS will randomly freeze and just hang. i.e. spinning wheel, can not enter the task manager in any way, and eventually a window pops up "Windows Not responding". I have done multiple installs of W8.1 with different dongles from my friends, but still the same result. Additionally if I leave the computer on for the day, my OS will crash and on will try to reboot automatically however when it reboots on it's own it cannot find a boot image. I've ran every test under the sun, Ram Mem test, SSD tests, and everything checks out. I have googled for a few weeks now, resorting to diagnosing the issue myself with these SDK tools. For some reason I don't get a Memory.dmp file, even though I have had a BSOD in the last couple of days. Would you have any recommendations on where to start to diagnose this issue/possibly create and capture a log of some sort when my OS hangs?

Any help is much appreciated. Thanks.

Azerial (author)  PhenomHTPC2 months ago

Hi PhenomHTPC,
While I can't give you any insight on why your computer is acting up, i can give you some advice on the dump file.

1. From the desktop, open Windows Explorer (tan folder at the right of the taskbar)
2. In the Windows Explorer address bar, type "Control Panel" and hit enter
3. In the search box on the upper right of the window, type in "System"
4. Click on the link that reads "View advanced system settings"
5. On the Advanced tab, click on the "Startup and Recovery" button
6. At the bottom of the window, there will be a "System failure" section
7. Validate the settings. I have attached a sceenshot of what mine looks like. You might also change the dump from Automatic to Complete. (Complete will give you a very large file, but eh its sometimes worth it if you need more info. Just don't forget to change it back)

Hope you figure out what it is!

bsod_dump_file.pngbsod_dump_file_settings.png
thebear110 months ago
thank you for posting this and the reply back
i thought there was something for windows xp but mav been to busy working to check on it
again thanls