Support: Generate a kernel memory dump in Windows
|Generating a kernel memory dump in Windows
In some cases, other programs or services running on your computer can conflict with Avast software and cause system or programs to freeze, or slow down significantly. When contacting Avast Support with this kind of issue, you may be asked for a kernel memory dump from your computer, i.e. all the memory in use by the kernel written to a log file. Please note that this procedure works only on systems which are not frozen permanently.
|How to generate a kernel memory dump in Windows
Follow these troubleshooting steps (Quick steps):
- Log on to Windows as Administrator, or as a user with administrator permissions.
- Download avkb59.zip.
- Unzip and run the contained file KernelCrashOnCtrlScroll.reg to apply necessary changes in your Windows registry.
- Restart your computer and wait until the system or program freezes or slows down. At that moment, force a Windows crash by holding down the right Ctrl key and pressing the Scroll Lock key twice.
- A blue screen (BSOD) appears. Windows generates a memory dump and restarts your computer automatically.
- Locate the file MEMORY.DMP in the Windows folder, i.e. C:\Windows\MEMORY.DMP by default, and provide it to Avast Support via the Avast FTP server.
If you have any issue with the procedure as described above, please read these detailed steps:
- Log on to Windows as Administrator, or as a user with administrator permissions. If you forgot your password, refer to the instructions on Microsoft's website:
Windows 8 / 8.1 | Windows 7 | Windows Vista | Windows XP
- Download the file avkb59.zip to a location where you can easily find it, such as your Windows Desktop.
- Right-click the downloaded file avkb59.zip, select Extract All... from the context menu, and specify a location where you can easily find the unzipped file, such as your Windows Desktop.
- Double-click the unzipped KernelCrashOnCtrlScroll.reg file. Click Run in the displayed Security Warning dialog,
...and then click Yes to apply necessary changes into your Windows registry.
- Restart your computer, log on to your Windows with administrator permissions once again, and wait until the system or program freezes again.
- Then manually force a Windows crash by holding down the right Ctrl key and pressing the Scroll Lock key twice (i.e. right Ctrl + 2x Scroll Lock - The Ctrl key is found under the Shift key. The Scroll Lock key is found in the top right corner of the keyboard.).
- A blue screen (BSOD) appears. Wait while your system generates a memory dump (progess is indicated in percentage). Afterwards your computer should restart automatically -- if not, restart you computer manually by pressing the Reset or Power button.
- Once your computer has restarted, log on to your Windows with administrator permissions and locate the file MEMORY.DMP in the Windows folder, by default:
...and provide it to Avast Support by following the instructions in this article:
For more details about this troubleshooting procedure and registry entries contained within the KernelCrashOnCtrlScroll.reg file, please read the following article on Microsoft's website:
All available Avast products for Windows
Microsoft Windows 8.1 / Pro / Enterprise
Microsoft Windows 8 / Pro / Enterprise
Microsoft Windows 7 Home Basic / Home Premium / Professional / Enterprise / Ultimate
Microsoft Windows Vista Home Basic / Home Premium / Business / Enterprise / Ultimate
Microsoft Windows XP Home / Professional / Media Center Edition