How can I Attach to a Process... such as Explorer.exe pid 1820 using windbg 6.1.0017.2

[George Hester]

and still be able to double-click a XML file in Windows Explorer and have the XML open in IE? The Attaching to the Process explorer.exe seems to just kill the operating system. There is nothing that can be done. The desktop is dead. Hard as a rock. Thanks.

--
George Hester
__________________________________

[Pat [MSFT]]

You need to tell the debugger to let the process continue (g <enter>). I'm
not sure what you are debugging, specifically, but an easier way to do what
you are doing is to launch IE first. Then attach to it w/a debugger. Then
do the g<enter> thing. Then use the File-->Open dialog to open the XML
page.

pat

"George Hester" <heste...@hotmail.com> wrote in message
news:u0XEvM8A...@TK2MSFTNGP10.phx.gbl...

[George Hester]

Hmm that is interesting. Didn't even think of that. I am debugging explorer.exe. Actually I'm not someone else is but they needed the debugger attached to the process...explorer.exe to get useful information when the shell croaks.

I have found out how to do it. I had clicked the non-invasive option in the attach to process dialog box. Boy that was pretty invasive. I shouldn't have done that. I did the attach to process of explorer.exe and closed the disassembly window. Then did "G" w/o the quotes and the debugger was running. Caused the crash and got a new disassembly window. Then .dump -f C:\explorercrash.dmp. Do you think I have done a good job?

--
George Hester
__________________________________
"Pat [MSFT]" <patf...@online.microsoft.com> wrote in message news:e89ScS8A...@TK2MSFTNGP10.phx.gbl...

[Pat [MSFT]]

Perfect.

Pat

"George Hester" <heste...@hotmail.com> wrote in message

news:uP0lGUHB...@TK2MSFTNGP10.phx.gbl...

[Jolyon Wright]

this doesnt answer your question, but may prevent you from having the
problem!

you may do better shutting down explorer all together & opening the
executable in windbg.

To do this you need to open a command prompt, shut down the shell & run
windbg from the command line

see

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/shellcc/pla
tform/shell/programmersguide/shell_basics/shell_basics_programming/debugging
.asp

jolyon

"George Hester" <heste...@hotmail.com> wrote in message
news:u0XEvM8A...@TK2MSFTNGP10.phx.gbl...

[George Hester]

When I open my explorercrashBest.dmp file in windbg 6.1.0017.2 Windows 2000 Professional SP3 Internet Explorer 6 mshtml.dll version 6.0.2800.1126 the Disassembly window opens right up and places me here:

570b ff08 dec dword ptr [eax] ds:0023:00000008 = ????????

I hate ? marks.

Do you think this is a good thing to help locate the trouble or do you think this is say a problem with some Symbol files not loading?

--
George Hester
__________________________________
"Pat [MSFT]" <patf...@online.microsoft.com> wrote in message news:#TXTtXKBD...@TK2MSFTNGP10.phx.gbl...

[Daniel Pravat [MSFT]]

EAX value is 0x00000008 and nothing is mapped by default on this area. It is
as good as "Non mapped memory".

--
This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

"George Hester" <heste...@hotmail.com> wrote in message

news:uPrGfRgB...@TK2MSFTNGP11.phx.gbl...

[George Hester]

Is that what the ? marks are saying and should there have been something there if this crash did not happen?

I suppose I should leave this to the professionals. I was hoping I was providing what was necessary to make an educated guess what caused the shell to fail with this dump. But I suppose I'll soon find out if it was helpful or not.

--
George Hester
__________________________________
"Daniel Pravat [MSFT]" <dpr...@online.microsoft.com> wrote in message news:#l4jM9gB...@TK2MSFTNGP10.phx.gbl...