Cannot find minidump folder to check for a bluescreen log
Hello, I recently had a BSOD at Windows 7 Ultimate but I didn't have the time to see the error code. I would like to know the reason why this has happened. I cannot find any minidump folder at c:/windows/ dir. I am checking this: computer>(right click)Properties>Advanced System Settings>Advanced(tab)>Startup and Recovery>Settings". "Write an event to the system log" option is checked. At "write debugging information" section the "Kernel memory dump" is selected and as a path I have this "%SystemRoot%\MEMORY.DMP". What is wrong? Thank you for your time!
September 1st, 2011 10:45pm

Hello, for dumps generation wait until the next BSOD and check again. check if there is a folder named minidumps under c:\windows. If you find it you will find minidumps under it. You can use Microsoft Skydrive to upload them so that I debug them for you. To read dump files: http://support.microsoft.com/kb/315263 Another option is to contact Microsoft CSS. This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner 2010 / 2011 Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows 7, Configuring Microsoft Certified IT Professional: Enterprise Administrator Microsoft Certified IT Professional: Server Administrator
Free Windows Admin Tool Kit Click here and download it now
September 1st, 2011 11:57pm

As I have written above, I cannot find any minidumps folder at C:/windows directory. Also a BSOD has happened yesterday.
September 2nd, 2011 2:03pm

Uncheck "Automatically Restart" in the Startup and Recovery settings dialog box, so the next time your computer crashes, it won't automatically restart, and you'll have enough time to write down some information about the blue screen. If there isn't a MEMORY.DMP file in your C:\Windows folder, that could mean that the paging file on your boot volume (the volume where Windows is installed) is too small to hold the kernel dump. Did you move your paging file to another volume, by chance? The typical size of a kernel dump ranges between 200 MB and 800 MB, depending on the amount of RAM your system has, and the amount of kernel memory used by the OS and drivers at the time of the crash. Other possible causes are: Kernel structures used by Windows to write the memory dump are corrupted. Disk subsystem failures at the time of the crash (cable problems, hardware defects...). Microsoft MVP Windows Expert Consumer | http://blogs.msmvps.com/dmartin/ | http://www.wintecnico.com
Free Windows Admin Tool Kit Click here and download it now
September 2nd, 2011 5:41pm

According to what you wrote, your system is configured to write a record in the "System" Windows log in the Event viewer in the case of a BSOD: check that log and look for any entry related to the BSODs you've experimented. You can also download and run the program that you find at the following web address http://www.nirsoft.net/utils/blue_screen_view.html This utility will scan your hard drives looking for any crash dump file and collecting as much informations as possibile about the crash and the involved modules; then, post more details about the crash here. Bye.Luigi Bruno - Microsoft Community Contributor 2011 Award
September 3rd, 2011 12:01am

@Daniel Martin: This option is not checked. Also, there isn't any memory.DMP file at windows root. The page file is on the boot volume and its size is 5,99GB (you mean the file named: "pagefile.sys", right?) @Luigi Bruno: At event viewer>Summary of Administrative Events>Event Type>Critical(2 events during the last 7 days)>double click on it>at the xml details: - <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> - <System> <Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" /> <EventID>41</EventID> <Version>2</Version> <Level>1</Level> <Task>63</Task> <Opcode>0</Opcode> <Keywords>0x8000000000000002</Keywords> <TimeCreated SystemTime="2011-09-01T19:04:05.506010500Z" /> <EventRecordID>22470</EventRecordID> <Correlation /> <Execution ProcessID="4" ThreadID="8" /> <Channel>System</Channel> <Computer>Chris-PC</Computer> <Security UserID="S-1-5-18" /> </System> - <EventData> <Data Name="BugcheckCode">0</Data> <Data Name="BugcheckParameter1">0x0</Data> <Data Name="BugcheckParameter2">0x0</Data> <Data Name="BugcheckParameter3">0x0</Data> <Data Name="BugcheckParameter4">0x0</Data> <Data Name="SleepInProgress">false</Data> <Data Name="PowerButtonTimestamp">0</Data> </EventData> </Event> There aren't any crashes appearing at "BlueScreenView".. Thank you both for your replies!
Free Windows Admin Tool Kit Click here and download it now
September 3rd, 2011 5:38pm

Have a look to that: http://support.microsoft.com/kb/2028504 This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner 2010 / 2011 Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows 7, Configuring Microsoft Certified IT Professional: Enterprise Administrator Microsoft Certified IT Professional: Server Administrato
September 3rd, 2011 6:27pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics