BSoD logs

  • Thread starter Thread starter SJMP
  • Start date Start date
S

SJMP

Where can I find a log of information on a BSod that just occured on an XP
Sp2 machine?

Thanks,
 
Dear Customer,

Thank you for posting here.

According to the description, I'd like to share some knowledge with you.

Analysis and Suggestion:
==========================

BSOD issue is related to a kernel crash, and the most important log created
by the system is the crash dump. The crash dump is created by the systems
for taking a snapshot of the memory status when the kernel crash occurs.
"Stop error code" and other error messages that are displayed on a blue
screen are also recorded in the crash dump file.

To solidly troubleshoot this kind of kernel crash issue, we need to debug
the crash system dump file. Unfortunately, debugging is beyond what we can
do in the newsgroups. A suggestion would be to contact Microsoft Customer
Service and Support (CSS) via telephone so that a dedicated Support
Professional can assist with your request. Please be advised that
contacting phone support will be a charged call.

To obtain the phone numbers for specific technology request please take a
look at the web site listed below:

http://support.microsoft.com/default.aspx?scid=fh;EN-US;OfferProPhone#faq607

More references:
======================

How to read the small memory dump files that Windows creates for debugging
http://support.microsoft.com/kb/315263

How to start your computer by using the Last Known Good Configuration
feature in Windows XP
http://support.microsoft.com/kb/307852/

I hope the problem will be resolved soon.

Thank you for your time and cooperation!

David Shen
Microsoft Online Partner Support
 
Please just answer the question. Where is the file located. What is the
extension?

I will troubleshoot it for now.

Thanks
 
Hello customer,

I'm sorry for my misunderstanding.

Here is the information about crash dump file generated by BSOD.

File Location: %systemroot%
File extension: .DMP

Also we need to ensure the related settings have been enabled first:

1. Right click My Computer.
2. Choose Properties.
3. Select the Advanced tab, in the Startup and Recovery section, click the
settings button.
4. Uncheck the box before "Automatically Restart".
5. Press OK. In the "System Failure" choose "Small memory dump" in the
"Writing debug information" drop list and write down the path of the folder
where the dump file will be resident.
6. Wait for the system to crash. Please check if there is any blue screen
when it crash . And please provide me the detail description of the error
on the blue screen.
7. Go to the folder that we had marked down and send me all the crash dump
files in the folder.
8. Generally the crash dump file is located in %systemroot%

Hope all the information will be helpful.

Thanks for your time.

David Shen
Microsoft Online Partner Support
 
Thank you David,

I went over the settings you included in your last email. That is exactly
how the machine was configured. Only thing - there was no minidump file
created. I do think the user hard booted the pc after the BSoD occured. Not
sure why the file was not created. I have not been able to recreate the BSoD
since then

Thanks,
 
Dear Customer,

Thanks for your response.

For your concern about the reason why the crash dump file was not created,
here is information for your reference.

A small memory dump file records the smallest set of useful information
that may help identify why the crashed computer has stopped unexpectedly.
When "Small memory dump" in the "Writing debug information" drop list is
selected, this option requires a paging file of at least 2 megabytes (MB)
on the boot volume. On computers that are running Microsoft Windows 2000 or
later, Windows creates a new crash dump file every time your computer stops
unexpectedly. A history of these files is stored in the folder(%systemroot%)

Note: Please ensure that the related option has been enabled before the
system crash.

Reference:
===============

How to read the small memory dump files that Windows creates for debugging
http://support.microsoft.com/kb/315263

Hope it helps.

Thanks for your time.

David Shen
Microsoft Online Partner Support
 
Back
Top