Frequent blue screen of death, or BSoD, crashes can be infuriating since they take control away from you. This post will illuminate some of the Windows crash dump analysis tips you can use to help make this madness stop.
How to do the Windows Crash Dump Analysis
1. Boot into Windows Recovery Console
2. Select Command Prompt from the list of options
3. Type diskpart into the command console
4. Type list volume
5. Find the Volume with System in the Info column (Usually Drive C )
6. Find the Volume of the flash drive you are copying to (Fs = FAT32)
7. Type exit
8. Type cd C:\Windows to navigate to the memory.dmp file
9. Type copy *.dmp F: (this assumes F: is your flash drive)
10. Type exit
11. Load windbg.exe from the Debugging Tools folder on the Desk Drive
12. Press ‘Crtl+S’ to select the Symbols location
13. Type in srv*Z:\Debugging Tools for Windows (x86)\Symbols (where Z:\.. is the location of the Symbols Directory)
14. Press OK
15. Press Crtl+D to open a Crash dump file
16. Open .DMP file and wait
Blue Screen Error Reference Guide
| Code | Error verifier | Causes | Solutions |
|---|---|---|---|
| 0xC0000218 | UNKNOWN HARD ERROR (HIVES) | A necessary registry hive file could not load. The file may be corrupt or missing. | Emergency Repair Disk; Windows re-installation. |
| 0x000000D1 | DRIVER IRQL NOT LESS OR EQUAL | Bad device driver; faulty or mismatched RAM; a damaged pagefile. | Update drivers; update to latest Service Pack; run automatic updates; run memory diagnostics scans. |
| 0x000000ED | UNMOUNTABLE BOOT VOLUME | Failed to mount boot drive. | Run automatic updates; run chkdsk scan. |
| 0x00000024 | NTFS FILE SYSTEM | Problem with driver that allows system to read and write NTFS files; physical disk corrupted; Interrupt Request Packet (IRP) corrupted. | Run chkdsk scan. |
| 0x0000000A | IRQL NOT LESS OR EQUAL | Bad driver; defective or incompatible hardware or software. | Update drivers; update antivirus software; run hardware diagnostics scans; update to latest Service Pack; run automatic updates. |
| 0x00000050 | PAGE FAULT IN NONPAGED AREA | Requested data not in memory; defective memory; incompatible software. | Run memory diagnostics scans; run antivirus scans for possible rootkit; update antivirus; update drivers. |
| 0x00000051 | REGISTRY ERROR | Can’t backup registry hive; Log on to PC error | Install updates – SP, hotfix – KB810558 (Update: the Microsoft link to this KB is no longer up – http://support.microsoft.com/kb/810558); contact MS to help cure the corruption. |
| 0x0000006F | SESSION3 INITIALIZATION FAILED | Corrupt device driver; missing or corrupt system file. | Run system start up scans. |
| 0x00000077 | KERNEL STACK INPAGE ERROR | Disk hardware failure; disk data corruption; virus infection. | Run antivirus scans; run chkdsk scan; run hardware diagnostics scans. |
| 0x0000007B | INACCESSIBLE BOOT DEVICE | Device driver incorrectly installed; virus infection. | Reinstall device drivers; run antivirus scans. |
| 0x0000007E | SYSTEM THREAD EXCEPTION NOT HANDLED | Incompatible hardware; faulty device driver; faulty system service; software problems. | Run hardware diagnostics scans; update drivers; run automatic updates. |
| 0x0000008E | KERNEL MODE EXCEPTION NOT HANDLED | Incompatible hardware; sometimes driver issue; sometimes outdated BIOS. | Run hardware diagnostics scans. |
| 0x0000009F | DRIVER POWER STATE FAILURE | Driver power state inconsistent or invalid. | Find the offending driver – KB315249 |
| 0x0000007F | UNEXPECTED KERNEL MODE TRAP | Hardware failure; software issues; bound trap. | Run hardware diagnostics scans. |
| 0x000000A5 | ACPI BIOS ERROR | Errors in ACPI BIOS. | Check for BIOS that is fully ACPI compiant; Press F7 on windows setup to install standard PC HAL (workaround) |
| 0x000000B4 | VIDEO DRIVER INIT FAILURE | No video drivers able to start. | Disable, remove, or roll back video driver. |
| 0x000000F4 | CRITICAL OBJECT TERMINATED | Disk hardware failure. | Run hardware diagnostics scans. |
