Saturday, June 2, 2007

WHAT CAUSED MY BLUE SCREEN OF DEATH(BSoD)!!!!!!!!!!!

The Blue Screen of Death is commonly displayed when the system is haulted to save the system from a major error or when it can not recover from a serious error. Here's a common picture of a BSoD
  • Firstly, when your system crashes, by default it saves a file to your hard drive with quite a bit of information. Those files are called Dump Files and they are located in the C:\windows\minidump folder. The files are created using either of these two naming conventions:
  1. Minixxxxxx-0x.dmp where xxxxxx is the date the system cashed and -0x corresponds to the number of times the system crashed that day. The higher the -0x number the more recent the crash.
  2. Dumpxxxxxx-0x.dmp where xxxxxx is the date the system cashed and -0x corresponds to the number of times the system crashed that day. The higher the -0x number the more recent the crash.

Let's start decrypting the info found in the dump file.

  • First, we need to download and install the Microsoft Debugging Tools from here: U WANT TO BE MICROSOFT DEBUGGING TOOLS : Post Your Mail ID to following this Link http://www.blogger.com/email-post.g?blogID=838102387059097317&postID=5696605637935079135
  • After installing we open the Debugging Tools by going to the Start menu > Programs > Debugging Tools for Windows > windbg . When the Debugging Tools for Windows program opens click on File then Symbol file path. Put this in the text box: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
  • Now click the OK button. Now we open the dump file by clicking File then Open Crash Dump. We browse to the C:\windows\minidump folder and choose the dump file we would like to look at. When it's done loading you'll see the words "BUG CHECK ANALYSIS" in an * box.
  • In the text box below (to the right of kd>) type in !analyze -v to get a word-for-word output of the error. Once it is completed look for the section the text right after "BUG CHECK ANALYSIS". There you will have some words with underscores in between each word. Sort of like IRQL_NOT_LESS_OR EQUAL. That will help you find a solution to your problem. Also, scroll to the section IMAGE NAME: . The words after that will tell you what file caused the error.