In this episode of Defrag Tools, Andrew Richards, Chad Beeder and Larry Larsen show you the analysis of a crash. The crash happens when Favorites is clicked in Internet Explorer. We show Andrew's debugging and troubleshooting steps to solve the issue.
Sysinternals Process Monitor
Debugging Tools for Windows
Windows Performance Toolkit
SkyDrive - procdumpext.dll
[00:00] - Windows 8.1 RTM!
[01:18] - Internet Explorer Favorites Crash
[01:50] - AeDebug - (procdump.exe -ma -i c:\dumps)
[02:00] - Open the dump in the Debugger
[02:15] - Review crash at the exception context - .ecxr
[03:32] - View the exception record - .exr -1
[03:58] - View the stack - k
[04:17] - Explorer - C:\Users\<user>\Favorites
[05:00] - Deleted suspicious file but still crashes
[05:07] - Back to the dump file to get more evidence
[06:05] - !procdumpext.dpx
[07:50] - Trace Registry activity with Process Monitor
[10:45] - Use Jump To to navigate to the key in RegEdit
[11:28] - Rename the key as the data seems to come from it (as seen in the dump)
[12:22] - Success!
[13:25] - Email us your issues at firstname.lastname@example.org