All Collections
Troubleshooting and How-To
Troubleshooting
How to collect the Windows crash dumps
How to collect the Windows crash dumps
A
Written by Arick Disilva
Updated over a week ago

If the Teramind Agent crashes and you encounter a 'Blue Screen' (BSOD), then you can collect Windows a crash dump to capture what is causing the error. You can then send us the file(s) for further diagnosis of the issue.

To capture the crash dump:

1. Create a new folder named dumps in your main (c:) drive.

2. Create a new file in Windows Notepad and enter the following lines:

Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps]
"DumpFolder"="c:\\dumps"
"DumpType"=dword:00000002
"DumpCount"=dword:00000100

3. Save the file with a .reg extension. Please note that, when saving the file in Notepad, you need to change the file type to All Files (*.*). Otherwise, it will save it as a .txt file instead of a .reg file:

cdump-1.png

4. Import the file in Windows Registry. To do so:

cdump-2.png

4.1 Open Windows Explorer

4.2 Browse to the .reg file you just saved.

4.3 Double-click on the file. A warning message, "Do you want to allow this app to make changes to your device?" will appear asking you to confirm the action:

cdump-3.png

4.4 Click Yes to confirm the import.

5. Next time there's a crash, you will see the crash dump file(s) in the c:\dumps folder. You can send the file(s) to us for further diagnosis, along with further details on what actions were taken and what applications were in use at the time of the crash.

We usually ask you to send us the dwm.exe and svc.exe crash dumps. However, if a Revealed Agent is involved, we might be interested in the tmagent.exe dumps too.

Did this answer your question?