Partager via

[Tool] User Mode Process Dumper를 이용하여 user process dump 를 수집하는 방법

  • Article

Windows?? User mode process dump? ???? ??? ? ??? ????. Windows? ????? Dr. Watson ???? ???? ??? WinDBG? ???? ??? ?? ???? ???, ???? User Mode Process Dumper??  tool? ??? user process dump ? ???? ??? ?????. User Mode Process Dumper? GUI ??? tool?? rule? ?? ??? ??? ??? ?? ??? process crash ??? ??? ? ????. ?? ??, ??? ??? ???? explorer.exe? crash?? ??, explorer.exe? ????? crash ??? ??? ?? ?? ???? ??? ? ????.

?? ??? explorer.exe? crash? ?, explorer.exe? ???? crash ??? ???? ?? ?? ??? step by step?? ???? ????.

User Mode Process Dumper ?? ??
1. ?? ??? ??? user dump tool? ???? ?? ?????.
https://www.microsoft.com/downloads/details.aspx?FamilyID=e089ca41-6a87-40c8-bf69-28ac08570b7e&DisplayLang=en
2. ?? ???? ???? ?? ??? C:\kktools\userdump81\ folder? ?????.
3. C:\kktools\userdump81\x86\setup.exe? ???? setup process?????.
4. ?? ???? “Dump on process termination” ??? enable???.
5. ??? ???, ????? Process dumper ? ?????
6. New ? ?????, dump? ??? process? ?????.
    => ??? ??????? process ??, ?? ??, explorer.exe ? ?????.
7. ?? ???? Double click ?? process monitor rule ????? ?????.
8. Use custom rules ? ?????
9. Dump file folder text ??? ?? ??? ??? ??? ?????.
10. All Exceptions ? ?????.
11. Minidump type? Complete,  Save mode? Cyclic Saving(5 times) ? ?????.
12. Monitor process exit ? ???? Minidump type? Complete ? ?????.
13. ?? ??? ????, 9?? ??? ??? process??? ??? ????.

** ?? ?? ??, ?? ??? ???? ???? ???/Process dumper/Process Monitoring?? explorer.exe ? ?? ?, Remove ??? ????? ???.