HomeTech info

How to Read Dump Files

This wikiHow teaches you how to analyze your Windows computer's dump files after a crash. Dump files, which are automatically created by Windows after your computer crashes, display a list of programs that were running before the crash;...
Part 1 of 2:

Reading with BlueScreenView

  1. How to Read Dump Files Picture 1How to Read Dump Files Picture 1
    Open Start
    How to Read Dump Files Picture 2How to Read Dump Files Picture 2
    . Click the Windows logo in the bottom-left corner of the screen.
  2. How to Read Dump Files Picture 3How to Read Dump Files Picture 3
    Type in view advanced system settings. This will search your computer for the Advanced System Settings section of Control Panel.
  3. How to Read Dump Files Picture 4How to Read Dump Files Picture 4
    Click View advanced system settings. It's a computer monitor with a checkmark icon at the top of the Start menu. Doing so opens the Advanced System Settings window.
  4. How to Read Dump Files Picture 5How to Read Dump Files Picture 5
    Click the Advanced tab. You'll see this at the top of the window.
    1. You may first have to click the computer monitor-shaped icon that appears at the bottom of the screen to open the Advanced System Settings window.
  5. How to Read Dump Files Picture 6How to Read Dump Files Picture 6
    Click Settings. It's below the "Startup and Recovery" heading near the bottom of the page. Doing this will open a separate window.
  6. How to Read Dump Files Picture 7How to Read Dump Files Picture 7
    Click the "Write debugging information" drop-down box. You'll find this box in the middle of the separate window. Clicking it prompts a drop-down menu.
  7. How to Read Dump Files Picture 8How to Read Dump Files Picture 8
    Click Small memory dump. It's in the drop-down menu. This option makes future memory dumps readable with a simple file explorer such as BlueScreenView.
    EXPERT TIP
    How to Read Dump Files Picture 9How to Read Dump Files Picture 9

    Luigi Oppido

    Computer Repair Technician & Owner, Pleasure Point Computers
    Luigi Oppido is the Owner and Operator of Pleasure Point Computers in Santa Cruz, California. Luigi has over 25 years of experience in general computer repair, data recovery, virus removal, and upgrades.
    How to Read Dump Files Picture 10How to Read Dump Files Picture 10
    Luigi Oppido
    Computer Repair Technician & Owner, Pleasure Point Computers

    A memory dump file is a file that's taken from RAM. RAM has a number of allocation tables—or buckets—inside. A memory dump file is an entire download of whatever was inside that file when a catastrophic failure happened, and it goes into a log so an engineer or a software professional can look at it and see where the conflict happened.

  8. How to Read Dump Files Picture 11How to Read Dump Files Picture 11
    Click OK. It's at the bottom of the window. This will close the window and return you to the Advanced System Settings window.
  9. How to Read Dump Files Picture 12How to Read Dump Files Picture 12
    Click OK. Doing so saves your changes and closes the Advanced System Settings window.
  10. How to Read Dump Files Picture 13How to Read Dump Files Picture 13
    Open the BlueScreenView page. Go to https://www.nirsoft.net/utils/blue_screen_view.html in your browser. BlueScreenView is a program that finds and analyzes dump files for you, making it easy to see which programs were running directly before a crash.
  11. How to Read Dump Files Picture 14How to Read Dump Files Picture 14
    Download BlueScreenView. Scroll down and click the Download BlueScreenView with full install/uninstall support link that's near the middle of the page.
  12. How to Read Dump Files Picture 15How to Read Dump Files Picture 15
    Open the BlueScreenView setup file. Double-click the bluescreenview_setup file in your computer's "Downloads" location.
  13. How to Read Dump Files Picture 16How to Read Dump Files Picture 16
    Install BlueScreenView. To do so:
    1. Click Yes when prompted.
    2. Click Next
    3. Click Next
    4. Click Install
    5. Wait for BlueScreenView to install.
  14. How to Read Dump Files Picture 17How to Read Dump Files Picture 17
    Open BlueScreenView. Make sure that the "Run NirSoft BlueScreenView" box is checked, then click Finish at the bottom of the window. BlueScreenView will open.
  15. How to Read Dump Files Picture 18How to Read Dump Files Picture 18
    Review your dump files. BlueScreenView has a top pane and a bottom pane; you'll see the dump file(s) listed in the top pane, while the programs that were recorded by the currently selected dump file will appear in the bottom pane.
    1. You can select a dump file by clicking it in the top pane.
    2. At least one of the programs that were recorded by the dump file is most likely responsible for the crash.
Part 2 of 2:

Reading with the Windows Drivers Kit

  1. How to Read Dump Files Picture 19How to Read Dump Files Picture 19
    Open the Windows 10 Drivers Kit page. Go to https://docs.microsoft.com/en-us/windows-hardware/drivers/download-the-wdk in your browser. The Windows Drivers Kit allows you to open dump files of all kinds, making it useful for checking a dump file from a past crash.
  2. How to Read Dump Files Picture 20How to Read Dump Files Picture 20
    Download the Windows Drivers Kit setup file. Scroll down and click the Download WDK for Windows 10, version 1803 link, which is below the "Install WDK for Windows 10" heading near the top of the page. The setup file will download onto your computer.
  3. How to Read Dump Files Picture 21How to Read Dump Files Picture 21
    Open the WDK setup file. Double-click the wdksetup file in your computer's default "Downloads" folder.
  4. How to Read Dump Files Picture 22How to Read Dump Files Picture 22
    Install the Windows 10 Drivers Kit. To do so:
    1. Click Next on the first 4 pages.
    2. Click Accept
    3. Click Yes when prompted.
    4. Wait for the WDK program to finish installing.
  5. How to Read Dump Files Picture 23How to Read Dump Files Picture 23
    Open Start
    How to Read Dump Files Picture 24How to Read Dump Files Picture 24
    . Click the Windows logo in the bottom-left corner of the screen.
  6. How to Read Dump Files Picture 25How to Read Dump Files Picture 25
    Type in command prompt. This will search your computer for the Command Prompt app.
  7. How to Read Dump Files Picture 26How to Read Dump Files Picture 26
    Right-click
    How to Read Dump Files Picture 27How to Read Dump Files Picture 27
    Command Prompt. It's a black box at the top of the Start window. A drop-down menu will appear.
  8. How to Read Dump Files Picture 28How to Read Dump Files Picture 28
    Click Run as administrator. This option is in the drop-down menu.
    1. You won't be able to complete this step if you're not on an administrator account on your computer.
  9. How to Read Dump Files Picture 29How to Read Dump Files Picture 29
    Click Yes when prompted. Doing so opens the Command Prompt app in administrator mode.
  10. How to Read Dump Files Picture 30How to Read Dump Files Picture 30
    Switch to the WDK directory. Type in the following address and then press ↵ Enter:
    1. cd C:Program Files (x86)Windows Kits10Debuggersx86
  11. How to Read Dump Files Picture 31How to Read Dump Files Picture 31
    Enter the installation command. Type in windbg.exe -IA and then press ↵ Enter.
  12. How to Read Dump Files Picture 32How to Read Dump Files Picture 32
    Click OK when prompted. This signifies that the Windows Debugger will now open dump files automatically.
  13. How to Read Dump Files Picture 33How to Read Dump Files Picture 33
    Open WinDBG. Click Start
    How to Read Dump Files Picture 34How to Read Dump Files Picture 34
    , type in windbg, and click WinDbg (X86) in the results. The Windows Debugger program will open.
  14. How to Read Dump Files Picture 35How to Read Dump Files Picture 35
    Add a symbol path. The symbol path tells the Windows Debugger which information to display:[1]
    1. Click File in the upper-left corner.
    2. Click Symbol File Path...
    3. Type in SRV*C:SymCache*http://msdl.microsoft.com/download/symbols
    4. Click OK
  15. How to Read Dump Files Picture 36How to Read Dump Files Picture 36
    Find your dump file. To do this, you'll need to go to the system root folder:
    1. Open Start
    2. Type in run and press ↵ Enter
    3. Type in %SystemRoot%
    4. Click OK
    5. Click the View tab.
    6. Check the "Hidden items" box if it isn't already checked.
    7. Scroll down and double-click the MEMORY.DMP file.
  16. How to Read Dump Files Picture 37How to Read Dump Files Picture 37
    Review the dump file's results. You should see a list of programs that were open when your computer crashed, which will help you determine which program(s) is/are responsible for the computer crash.
3.5 ★ | 2 Vote
clickfileopendump

You should read it

May be interested

Tech info