Ako se vaše računalo nedavno srušilo, sigurno ste se suočili s Plavim ekranom ^{(Blue Screen)}smrti^(Death) ( BSOD )^(BSOD) , koji navodi uzrok pada, a zatim naglo gašenje računala. Sada se BSOD zaslon prikazuje samo nekoliko sekundi i u tom trenutku nije moguće analizirati razlog pada. Srećom, kada se Windows ruši, kreira se datoteka ispisnog zapisa ( .dmp ) ili memorije kako bi se pohranile informacije o rušenju neposredno prije gašenja Windowsa .^(Windows)

Čim se prikaže BSOD zaslon, Windows izbacuje informacije o padu iz memorije u malu datoteku pod nazivom "MiniDump" koja se općenito sprema u Windows mapu. A ove .dmp datoteke mogu vam pomoći u otklanjanju uzroka pogreške, ali morate analizirati datoteku ispisa. Ovdje postaje zeznuto, a Windows ne koristi nijedan unaprijed instaliran alat za analizu ove datoteke s ispisom memorije.

Sada postoji razni alat koji vam može pomoći u otklanjanju pogrešaka u .dmp datoteci, ali ćemo govoriti o dva alata koji su BlueScreenView i Windows Debugger alati. BlueScreenView može brzo analizirati što je pošlo po zlu na računalu, a alat za ispravljanje pogrešaka sustava Windows^{(Windows Debugger)} može se koristiti za dobivanje naprednijih informacija. Dakle, bez gubljenja vremena, pogledajmo Kako čitati datoteke s ispisom memorije^{(Memory Dump Files)} u sustavu Windows 10^{(Windows 10)} uz pomoć dolje navedenog vodiča.

Kako čitati datoteke s ispisom memorije^{(Memory Dump Files)} u sustavu Windows 10^{(Windows 10)}

Obavezno  stvorite točku vraćanja^{(create a restore point)} u slučaju da nešto pođe po zlu.

Metoda 1: analizirajte datoteke s ispisom memorije pomoću BlueScreenViewa^{(Method 1: Analyze Memory Dump Files using BlueScreenView)}

1. S web-mjesta NirSoft preuzima najnoviju verziju BlueScreenViewa^{( NirSoft Website downloads the latest version of BlueScreenView)} prema vašoj verziji sustava Windows .

2. Izvucite zip datoteku koju preuzmete, a zatim dvaput kliknite na BlueScreenView.exe da biste pokrenuli aplikaciju.

3. Program će automatski tražiti MiniDump datoteke na zadanoj lokaciji, a to je C:\Windows\Minidump.

4. Sada ako želite analizirati određenu .dmp datoteku,^{( .dmp file,)} povucite i ispustite tu datoteku u aplikaciju BlueScreenView i program će lako pročitati minidump datoteku.

5. Vidjet ćete sljedeće informacije na vrhu BlueScreenViewa^{(BlueScreenView)} :

• Naziv datoteke Minidump : 082516-12750-01.dmp. Ovdje 08 je mjesec, 25 je datum, a 16 je godina dump datoteke.
• Vrijeme pada je vrijeme^(Time) kada se pad dogodi: 26-08-2016 02:40:03
• Niz za provjeru^{(Bug Check String)} grešaka je kod pogreške: DRIVER_VERIFIER_IOMANAGER_VIOLATION
• Kôd za provjeru^{(Bug Check Code)} grešaka je STOP pogreška: 0x000000c9
• Zatim će se pojaviti parametri koda za provjeru grešaka^{(Bug Check Code)}
• Najvažniji odjeljak je uzrokovan upravljačkim^(Driver) programom: VerifierExt.sys

6. U donjem dijelu zaslona bit će istaknut vozač koji je uzrokovao pogrešku.^{(the driver who caused the error will be highlighted.)}

7. Sada imate sve informacije o pogrešci i lako možete pretražiti web za sljedeće:

Bug Check String + uzrokovan upravljačkim^(Driver) programom , npr. DRIVER_VERIFIER_IOMANAGER_VIOLATION VerifierExt.sys
Bug Check String + Bug Check Code za provjeru grešaka, npr.: DRIVER_VERIFIER_IOMANAGER_VIOLATION 0x000000c9

8. Ili možete desnom tipkom miša kliknuti na minidump datoteku unutar BlueScreenViewa^{(BlueScreenView)} i kliknuti “ Google Search – Bug Check + Driver “.

9. Koristite ove informacije za otklanjanje uzroka i otklanjanje pogreške. I ovo je kraj vodiča Kako čitati datoteke s ispisom memorije u sustavu Windows 10 pomoću BlueScreenViewa.^{(How to Read Memory Dump Files in Windows 10 using BlueScreenView.)}

Metoda 2: analizirajte datoteke s ispisom memorije pomoću programa Windows Debugger^{(Method 2: Analyze Memory Dump Files Using Windows Debugger)}

1. Preuzmite Windows 10 SDK ovdje^{(Download Windows 10 SDK from here)} .

Napomena:^(Note:) Ovaj program sadrži program WinDBG^{(WinDBG program)} koji ćemo koristiti za analizu .dmp datoteka.

2. Pokrenite datoteku sdksetup.exe i navedite mjesto instalacije ili upotrijebite zadano.

3. Prihvatite Licencni^{(Accept License)} ugovor, a zatim na zaslonu " Odaberite značajke koje želite instalirati^{(Select the features you want to install)} " odaberite samo opciju Alati za otklanjanje pogrešaka za Windows,^{(select only the Debugging Tools for Windows option)} a zatim kliknite Instaliraj.

4. Aplikacija će početi preuzimati WinDBG program, stoga pričekajte da se instalira na vaš sustav.

5. Otvorite naredbeni redak^{(Command Prompt)} . Korisnik može izvršiti ovaj korak traženjem ‘cmd’^(‘cmd’) , a zatim pritiskom na Enter.

6. Upišite sljedeću naredbu u cmd i pritisnite Enter :

cd\Program Files (x86)\Windows Kits\10\Debuggers\x64\

Napomena:^(Note:) Navedite ispravnu instalaciju programa WinDBG .

7. Sada kada ste u ispravnom direktoriju, upišite sljedeću naredbu za povezivanje WinDBG s .dmp datotekama:

windbg.exe -IA

8. Čim unesete gornju naredbu, otvorit će se nova prazna instanca WinDBG s obavijesti o potvrdi koju možete zatvoriti.

9. Upišite windbg u Windows Search, a zatim kliknite na WinDbg (X64).

10. U WinDBG ploči kliknite na Datoteka, a zatim odaberite Symbol File Path.^{(click on File, then select Symbol File Path.)}

11. Kopirajte i zalijepite sljedeću adresu u okvir Symbol Search Path :

SRV*C:\SymCache*http://msdl.microsoft.com/download/symbols

12. Kliknite OK , a zatim spremite put simbola klikom na File > Save Workspace.

13. Sada pronađite dump datoteku koju želite analizirati, možete upotrijebiti datoteku MiniDump koja se nalazi u ^(MiniDump)C:\Windows\Minidump ili upotrijebiti datoteku za ispis memorije^(Memory) koja se nalazi u C:\Windows\MEMORY.DMP.

14. Dvaput kliknite na .dmp datoteku i WinDBG bi se trebao pokrenuti i početi obraditi datoteku.

Napomena:^(Note:) Budući da je ovo prva .dmp datoteka koja se čita na vašem sustavu, čini se da je WinDBG spor, ali nemojte prekidati proces jer se ovi procesi izvode u pozadini:

A folder called Symcache is being created in C:
Symbols are being downloaded and saved to C:\Symcache

Nakon što se simboli preuzmu i ispis je spreman za analizu, vidjet ćete poruku Praćenje: Vlasnik stroja na dnu teksta dump-a.^{(MachineOwner at the dump text’s bottom.)}

15. Također, sljedeća .dmp datoteka je obrađena, to će biti brže jer će već preuzeti potrebne simbole. S vremenom će C:\Symcache folder rasti kako se dodaje više simbola.

16. Pritisnite Ctrl + F da otvorite Find, a zatim upišite “ Vjerojatno uzrokovano^{(Probably caused by)} †(bez navodnika) i pritisnite Enter . Ovo je najbrži način da pronađete uzrok pada.

17. Iznad retka Vjerojatno^(Probably) uzrokovano, vidjet ćete BugCheck kod, npr. 0x9F^{( BugCheck code, e.g., 0x9F)} . Upotrijebite ovaj kod i posjetite Referentni kod za provjeru grešaka Microsofta za provjeru reference za provjeru grešaka.^{(Microsoft Bug Check Code Reference)(Microsoft Bug Check Code Reference)}

Preporučeno:^{(Recommended:)}

• Popravite Windows ne može postaviti HomeGroup na ovom računalu^{(Fix Windows can’t set up a HomeGroup on this computer)}
• Popravi zaslon računala se nasumično isključuje^{(Fix Computer Screen Turns Off Randomly)}
• Kako popraviti desni klik koji ne radi u sustavu Windows 10^{(How To Fix Right Click Not Working in Windows 10)}
• Popravi Uređivač registra je prestao raditi^{(Fix The Registry editor has stopped working)}

To je to što ste uspješno naučili kako čitati datoteke s ispisom memorije u sustavu Windows 10^{(How to Read Memory Dump Files in Windows 10)} , ali ako još uvijek imate pitanja u vezi s ovim postom, slobodno ih pitajte u odjeljku za komentare.

How to Read Memory Dump Files in Windows 10

If your PC has recently crashed, you must have facеd the Blue Screen of Dеath (BЅOD), which lists the crash’s cause and then the PC shutdown abruptly. Now the BSОD screen is only shown for a few seconds, and it’s not possible to analyze thе rеason fоr the сrash at that moment. Thankfully, when Windows crashes, a crash dump file (.dmp) or memory dump is created tо save information about the crash jυst before the Windows shυtdown.

As soon as the BSOD screen is displayed, Windows dumps the information about the crash from the memory to a small file called “MiniDump” which is generally saved in the Windows folder. And this .dmp files can help you troubleshoot the cause of the error, but you need to analyze the dump file. This is where it gets tricky, and Windows doesn’t use any pre-installed tool to analyze this memory dump file.

Now there is a various tool which can help you debug the .dmp file, but we are going to talk about two tools which are BlueScreenView and Windows Debugger tools. The BlueScreenView can analyze what went wrong with the PC quickly, and the Windows Debugger tool can be used to get more advanced information. So without wasting any time let’s see How to Read Memory Dump Files in Windows 10 with the help of the below-listed guide.

How to Read Memory Dump Files in Windows 10

Make sure to create a restore point just in case something goes wrong.

Method 1: Analyze Memory Dump Files using BlueScreenView

1. From NirSoft Website downloads the latest version of BlueScreenView according to your version of Windows.

2. Extract the zip file you download and then double-click on BlueScreenView.exe to run the application.

3. The program will automatically search for the MiniDump files at the default location, which is C:\Windows\Minidump.

4. Now if you want to analyze a particular .dmp file, drag and drop that file to BlueScreenView application and the program will easily read the minidump file.

5. You will see the following information at the top of the BlueScreenView:

• The name of the Minidump file: 082516-12750-01.dmp. Here 08 is the month, 25 is the date, and 16 is the year of the dump file.
• Crash Time is when the crash happens: 26-08-2016 02:40:03
• Bug Check String is the error code: DRIVER_VERIFIER_IOMANAGER_VIOLATION
• Bug Check Code is the STOP error: 0x000000c9
• Then there will be Bug Check Code Parameters
• The most important section is Caused By Driver: VerifierExt.sys

6. In the lower part of the screen, the driver who caused the error will be highlighted.

7. Now you have all the information about the error you could easily search the web for the following:

Bug Check String + Caused by Driver, e.g., DRIVER_VERIFIER_IOMANAGER_VIOLATION VerifierExt.sys
Bug Check String + Bug Check Code eg: DRIVER_VERIFIER_IOMANAGER_VIOLATION 0x000000c9

8. Or you can right-click on the minidump file inside the BlueScreenView and click “Google Search – Bug Check + Driver“.

9. Use this information to troubleshoot the cause and fix the error. And this is the end of the guide How to Read Memory Dump Files in Windows 10 using BlueScreenView.

Method 2: Analyze Memory Dump Files Using Windows Debugger

1. Download Windows 10 SDK from here.

Note: This program contains WinDBG program that we will be using to analyze the .dmp files.

2. Run the sdksetup.exe file and specify the installation location or use default.

3. Accept License agreement then at “Select the features you want to install” screen select only the Debugging Tools for Windows option and then click Install.

4. The application will begin downloading the WinDBG program, so wait for it to be installed on your system.

5. Open Command Prompt. The user can perform this step by searching for ‘cmd’ and then press Enter.

6. Type the following command into cmd and hit Enter:

cd\Program Files (x86)\Windows Kits\10\Debuggers\x64\

Note: Specify the correct installation of the WinDBG program.

7. Now once you’re inside the correct directory type the following command to associate WinDBG with .dmp files:

windbg.exe -IA

8. As soon as you enter the above command, a new blank instance of WinDBG will open with a confirmation notice which you can close.

9. Type windbg in Windows Search then click on WinDbg (X64).

10. In the WinDBG panel, click on File, then select Symbol File Path.

11. Copy and paste the following address into the Symbol Search Path box:

SRV*C:\SymCache*http://msdl.microsoft.com/download/symbols

12. Click OK and then save the symbol path by clicking File > Save Workspace.

13. Now find the dump file you want to analyze, you could either use the MiniDump file found in C:\Windows\Minidump or use the Memory dump file found in C:\Windows\MEMORY.DMP.

14. Double click the .dmp file and the WinDBG should launch and begin processing the file.

Note: Since this is the first .dmp file being read on your system, WinDBG appears to be slow but do not interrupt the process as these processes are being carried out in the background:

A folder called Symcache is being created in C:
Symbols are being downloaded and saved to C:\Symcache

Once the symbols have been downloaded, and the dump is ready to analyze, you will see the message Followup: MachineOwner at the dump text’s bottom.

15. Also, the next .dmp file is processed, it will be quicker as it will have already downloaded the required symbols. Over time the C:\Symcache folder will grow in size as more symbols are added.

16. Press Ctrl + F to open Find then type “Probably caused by” (without quotes) and hit Enter. This is the quickest way to find what caused the crash.

17. Above the Probably caused by line, you will see a BugCheck code, e.g., 0x9F. Use this code and visit Microsoft Bug Check Code Reference for verifying the bug check refer.

Recommended:

• Fix Windows can’t set up a HomeGroup on this computer
• Fix Computer Screen Turns Off Randomly
• How To Fix Right Click Not Working in Windows 10
• Fix The Registry editor has stopped working

That’s it you have successfully learned How to Read Memory Dump Files in Windows 10 but if you still have any queries regarding this post then feel free to ask them in the comment’s section.

Related posts

• Kako analizirati datoteke s ispisom memorije (.dmp) u sustavu Windows 10

• Kako pokrenuti JAR datoteke na Windows 10

• Popravite Nemogućnost brisanja privremenih datoteka u sustavu Windows 10

• Kako postaviti dijeljenje mrežnih datoteka u sustavu Windows 10

• Kako izbrisati datoteke za postavljanje Win u sustavu Windows 10 [VODIČ]

• 3 načina za dodavanje slike albuma u MP3 u sustavu Windows 10

• Odgodi ažuriranja značajki i kvalitete u sustavu Windows 10

• Omogućite ili onemogućite Cortanu na zaključanom zaslonu sustava Windows 10

• Kako omogućiti Active Directory u sustavu Windows 10

• Kako potpuno deinstalirati McAfee iz Windows 10

• Kako koristiti zaključavanje tipke Fn u sustavu Windows 10

• Ograničenja fizičke memorije u datotekama Crash Dump za Windows 10

• Pronađite sigurnosni identifikator (SID) korisnika u sustavu Windows 10

• Kako omogućiti ili onemogućiti Emoji ploču u sustavu Windows 10

• Kako onemogućiti ljepljive kutove u sustavu Windows 10

• Kako onemogućiti vatrozid za Windows 10

• Pokazivač miša zaostaje u sustavu Windows 10 [RIJEŠENO]

• 3 načina da ubijete proces u sustavu Windows 10

• Onemogućite značajku zumiranja prstiju u sustavu Windows 10

• Popravite kako računalo neće ići u stanje mirovanja u sustavu Windows 10