Re: Dumping RAM Contents



Thanks for replying so quickly. I'm trying to get the contents of RAM
without rebooting the machine. Is there a way to get Windows to dump the RAM
into a file without changing the system state?

"Bob I" wrote:

> Hiberfile.sys contains the contents of RAM from the last hibernation.
> Otherwise you set up a complete memory dump in Startup and recovery, and
> then make Windows toss it's cookies, BSOD.
>
> Chris Coryell wrote:
>
> > I'm trying to find a utility that will allow me to dump the contents of RAM
> > to a file. It's actually for a computer forensic class in grad school. Any
> > body know a utility that can accomplish this for WIN XP?
>
>
.



Relevant Pages

  • Re: Random Restarts - Please Help
    ... but it'll keep your machine from rebooting. ... Choosing recovery actions if Windows stops unexpectedly. ... I am now experiencing a double count of the RAM at ... first boot-up, and "Windows cannot start normally" black screens twice at ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Windows XP constantly reboots
    ... She lost connection to the game. ... > rebooting. ... I had her put her windows XP home ... > The only thing I can think of is that her RAM has gone bad. ...
    (microsoft.public.windowsxp.general)
  • Re: Dumping RAM Contents
    ... Is there a way to get Windows to dump the RAM into a file without changing the system state? ... Otherwise you set up a complete memory dump in Startup and recovery, and then make Windows toss it's cookies, BSOD. ...
    (microsoft.public.windowsxp.general)
  • Re: RAM size
    ... I kept getting these errors in Windows xp, rebooting and blue screen etc. ... I found out my 512k memory card was bad, so i was only left with the 256 k ... Once you have enough RAM so that the system is no longer ...
    (microsoft.public.windowsxp.general)
  • Windows XP constantly reboots
    ... My girlfriend and I were playing a game of the recently ... rebooting. ... I had her put her windows XP home ... The only thing I can think of is that her RAM has gone bad. ...
    (microsoft.public.windowsxp.general)