Site icon WinCert

Creating application memory dump

<p><a href&equals;"http&colon;&sol;&sol;wincert&period;net&sol;wp-content&sol;uploads&sol;2015&sol;01&sol;windows-7&period;jpg"><img class&equals;"alignnone size-full wp-image-546" src&equals;"http&colon;&sol;&sol;wincert&period;net&sol;wp-content&sol;uploads&sol;2015&sol;01&sol;windows-7&period;jpg" alt&equals;"Windows 7 Box&comma;install&comma;printers&comma;set network location&comma;graphic card memory&comma; aero peek&comma;screensaver&comma;synch&comma;windows live&comma;movie maker&comma;remote desktop&comma;destination path&comma;driver signing&comma;thinkvantage&comma;printers&comma;sensor&comma;print drivers&comma;grace period&comma;8024402C&comma;language pack&comma;theme" width&equals;"720" height&equals;"340" &sol;><&sol;a><&sol;p>&NewLine;<p>If you have an application that is hanging or crashing&comma; or a system that is misbehaving due to hangs&comma; high CPU&comma; severe slowness&comma; etc&comma; you may be asked to create a memory dump &&num;8211&semi; perhaps of the application that is believed to be having issues&comma; or of the entire system if the computer is misbehaving &lpar;or of both an application and the whole system&excl;&rpar;&period;<&sol;p>&NewLine;<p>This post is meant as an instruction manual on how to gather data if you are going to post for help on resolving one of these types of problems&period;<&sol;p>&NewLine;<p>The first thing to do&comma; before doing ANYTHING else&comma; is to download and install the &&num;8220&semi;Debugging Tools for Windows&&num;8221&semi; for your Windows platform&colon;<br &sol;>&NewLine;&&num;8211&semi; <a style&equals;"background-color&colon; transparent&semi; color&colon; &num;222222&semi; text-decoration&colon; underline&semi; background-origin&colon; initial&semi; background-clip&colon; initial&semi;" href&equals;"http&colon;&sol;&sol;www&period;microsoft&period;com&sol;whdc&sol;devtools&sol;debugging&sol;installx86&period;mspx" target&equals;"&lowbar;blank">x86<&sol;a> version&period;<br &sol;>&NewLine;&&num;8211&semi; <a style&equals;"background-color&colon; transparent&semi; color&colon; &num;222222&semi; text-decoration&colon; underline&semi; background-origin&colon; initial&semi; background-clip&colon; initial&semi;" href&equals;"http&colon;&sol;&sol;www&period;microsoft&period;com&sol;whdc&sol;devtools&sol;debugging&sol;install64bit&period;mspx" target&equals;"&lowbar;blank">x64 or Itanium<&sol;a> &lpar;64bit&rpar;<&excl;--more--><&sol;p>&NewLine;<p>Once you&&num;8217&semi;ve installed the tools&comma; here are instructions on how to create the appropriate dump if you are so asked&colon;<&sol;p>&NewLine;<p><strong>Memory dump from an application&sol;process that is HANGING &lpar;not crashing&rpar;&colon;<&sol;strong><&sol;p>&NewLine;<p>1&period; Create a directory called c&colon;&bsol;adplus<&sol;p>&NewLine;<p>2&period; Open a command prompt and change to the directory where you installed the debugging tools&period; By default&comma; this is &&num;8220&semi;C&colon;&bsol;Program Files&bsol;Debugging Tools for Windows&&num;8221&semi;<&sol;p>&NewLine;<p>3&period; Type the following command in the command prompt&colon;<br &sol;>&NewLine;cscript adplus&period;vbs -hang -pn appname -quiet -o c&colon;&bsol;adplus &lpar;where &&num;8220&semi;appname&&num;8221&semi; is the &period;exe name of the application that is hanging&rpar;<&sol;p>&NewLine;<p>4&period; Once the debugger has finished &lpar;this can take some time&rpar;&comma; the command prompt window&lpar;s&rpar; will close&comma; and you will have data in your C&colon;&bsol;adplus folder that can be analyzed&period;<&sol;p>&NewLine;<p><strong>Memory dump from an application&sol;process that is CRASHING &lpar;not hanging&rpar;&colon;<&sol;strong><&sol;p>&NewLine;<p>1&period; Create a directory called c&colon;&bsol;adplus<&sol;p>&NewLine;<p>2&period; Open a command prompt and change to the directory where you installed the debugging tools&period; By default&comma; this is &&num;8220&semi;C&colon;&bsol;Program Files&bsol;Debugging Tools for Windows&&num;8221&semi;<&sol;p>&NewLine;<p>3&period; Type the following command in the command prompt&colon;<br &sol;>&NewLine;cscript adplus&period;vbs -crash -pn appname -quiet -o c&colon;&bsol;adplus &lpar;where &&num;8220&semi;appname&&num;8221&semi; is the &period;exe name of the application that is crashing&rpar;<&sol;p>&NewLine;<p>4&period; Once the debugger has finished &lpar;this can take some time&rpar;&comma; the command prompt window&lpar;s&rpar; will close&comma; and you will have data in your C&colon;&bsol;adplus folder that can be analyzed&period;<&sol;p>&NewLine;<p><strong>Memory dump of the entire system&colon;<&sol;strong><&sol;p>&NewLine;<p><span style&equals;"color&colon; &num;003366&semi;">1&period; Create or set the following registry value&colon;<br &sol;>&NewLine;Key&colon; HKEY&lowbar;LOCAL&lowbar;MACHINE&bsol;SYSTEM&bsol;CurrentControlSet&bsol;Services&bsol;i8042prt&bsol;Parameters<br &sol;>&NewLine;Value&colon; CrashOnCtrlScroll<br &sol;>&NewLine;Type&colon; REG&lowbar;DWORD<br &sol;>&NewLine;Data&colon; 1<&sol;span><&sol;p>&NewLine;<p>2&period; Right-Click on the &&num;8220&semi;My Computer&&num;8221&semi; icon on the desktop and select &&num;8220&semi;Properties&&num;8221&semi;&comma; then click the &&num;8220&semi;Advanced tab&period; On the &&num;8220&semi;Advanced&&num;8221&semi; tab&comma; click &&num;8220&semi;Settings&&num;8221&semi; under the &&num;8220&semi;Performance&&num;8221&semi; header&period; Click the &&num;8220&semi;Advanced&&num;8221&semi; tab&comma; then click &&num;8220&semi;Change&&num;8221&semi; under &&num;8220&semi;Virtual Memory&&num;8221&semi;&period; Set the pagefile to be located on the partition where the OS is installed&comma; and set it to be equal to Physical RAM &plus; 50 MB&period;<&sol;p>&NewLine;<p>3&period; Also in the &&num;8220&semi;System Properties&&num;8221&semi; window on the &&num;8220&semi;Advanced&&num;8221&semi; tab&comma; click the &&num;8220&semi;Settings&&num;8221&semi; buttun under the &&num;8220&semi;Startup and Recovery&&num;8221&semi; header&period; Make sure &&num;8220&semi;Complete Memory Dump&&num;8221&semi; is selected &lpar;see 3a if this is not in the list&rpar;&period; You can change the location of the memory dump file to a different local partition if you do not have enough room on the partition where the OS is installed&period;<&sol;p>&NewLine;<p>3a&period; If the &&num;8220&semi;Complete Memory Dump&&num;8221&semi; option in step 3 is not available&comma; you will need to manually set this registry value&colon;<&sol;p>&NewLine;<p><span style&equals;"color&colon; &num;003366&semi;">Key&colon; HKEY&lowbar;LOCAL&lowbar;MACHINE&bsol;SYSTEM&bsol;CurrentControlSet&bsol;Control&bsol;CrashControl<br &sol;>&NewLine;Value&colon; CrashDumpEnabled<br &sol;>&NewLine;Type&colon; REG&lowbar;DWORD<br &sol;>&NewLine;Value&colon; 1<&sol;span><&sol;p>&NewLine;<p>4&period; You will need to reboot for these changes to take effect&period;<&sol;p>&NewLine;<p>5&period; The next time that the system is exhibiting the problem you were asked to dump the machine for&comma; hold down the RIGHT CTRL key and press the SCROLL LOCK key twice to cause the machine to bugcheck and create a memory dump&period; After the box comes back up&comma; you&&num;8217&semi;ll find the resulting memory dump file in &percnt;systemroot&percnt;&bsol;memory&period;dmp that can be analyzed&period;<&sol;p>&NewLine;<p>Courtesy&colon; CLUBERTI<&sol;p>&NewLine;

Exit mobile version