How do I generate a memory dump manually?

KB Solution ID: SOLN380|Last Revised: July 03, 2014


  • ESET Customer Care has asked you to generate a memory dump file for analysis to help them resolve an issue with your computer.


Before you begin

I. Configure memory dump settings

  1. Press the Windows key  + R, type Control system into the Open field and click OK.

Figure 1-1

  1. Click Advanced system settings.

Figure 1-2
Click the image to view larger in new window

  1. Select the Advanced tab and click Settings in the Startup and Recovery section.

Figure 1-3

  1. The Dump file: section of the Startup and Recovery window allows you to set the location where new memory dump files are saved. The %SystemRoot% string is a Microsoft Windows variable that stands for the root directory of your Microsoft Windows installation (typically the default value is C:\Windows).

    In the Write debugging information section, you can select the type of memory dump (we recommend that you use the Complete setting, see Figure 1-4).
  2. Click to bookmark this article before you continue and then click OK to restart your computer. After your computer restarts, continue to part II to generate a memory dump manually.

Figure 1-4


II. Generate a memory dump manually

Use caution when editing the registry

Make only the edits specified below to the system registry. Unnecessary changes to the registry can negatively affect system performance.

  1. Press the Windows key + R to open a Run dialog, type regedit and click OK. If you are prompted by Windows, click Yes.
  2. In the Registry Editor window, expand  HKEY_LOCAL_MACHINE SYSTEM CurrentControlSet Services kbdhid Parameters.
  1. Right-click in the right pane and select New DWORD or DWORD (32-bit value) depending on your operating system.

Figure 2-1
Click the image to view larger in new window

  1. Name the key CrashOnCtrlScroll. Type 1 into the Value data field and click OK

Figure 2-2
Click the image to view larger in new window

  1. Close Registry Editor and restart your computer.
  2. Once your computer has started, press and hold the right CTRL key on your keyboard (you must use the right and not the left) and then press the Scroll Lock key (located in the upper right on most keyboards) twice. The Windows forced crash dialog will run and a memory dump will be generated. Your computer may restart as a result.
  3. Once your computer has started, navigate to your system's root directory (C:\Windows by default) and locate the file named MEMORY.DMP. Respond to the last email from your case with ESET Customer Care and notify them that you are ready to submit your memory dump file. An ESET Customer Care agent will contact you with instructions to submit the file for analysis.

Figure 2-3
Click the image to view larger in new window


Rate this article:
1 2 3 4 5
Please comment on your rating...
We cannot respond to feedback from this form. Requests for assistance should be submitted through your normal support channel.
5 - Definitely
4 - Mostly
3 - Somewhat
2 - Not Really
1 - Not At All