Microsoft KB Archive/282421

= HOW TO: Use Hot Keys to Capture a Crash Dump of a Process =

Article ID: 282421

Article Last Modified on 11/1/2006

-

APPLIES TO


 * Microsoft Windows 2000 Server
 * Microsoft Windows NT Server 4.0 Standard Edition

-



This article was previously published under Q282421





IN THIS TASK
SUMMARY
 * Capture a Crash Dump Using the Userdump.exe Tool



SUMMARY
This article describes how to use hot keys to capture a crash dump of a process. The Userdump.exe tool can be installed on your system as part of the Platform Software Development Kit (SDK), a Windows Debugger tool, or as a stand-alone program. It can be downloaded as part of the Windows Debugger tool package from the Microsoft Download Center. Click the following Microsoft Web site to download the file:

http://www.microsoft.com/downloads/release.asp?ReleaseID=18937

The preceding download site contains the entire Windows Debugger tool package. It can be easily installed on any computer that runs Microsoft Windows NT or Microsoft Windows 2000. An icon is displayed for User Dump Setup in the Debugging Tools group.

If you install the Windows Debugger tool package, it may alter the default User mode exception handler and the Drwtsn32 program may need to be re-registered as the default program by using the following command line:

c:\>drwtsn32 -i

back to the top

Capture a Crash Dump Using the Userdump.exe Tool
To use the Userdump tool, perform the following steps:

 Run the Setup.exe program that is included with the Userdump tool. This procedure installs a kernel-mode driver, the Userdump.sys file, and it also creates a Process Dump icon in Control Panel. In Control Panel, click the Process Dump icon. Click the Hot Keys tab. Click New. Select the letter &quot;A&quot; (or another letter of your choice) in the drop-down box. This letter is going to be your hot key to inform the Userdump.exe tool when a crash dump must be created for a specific process. Enter your process name, for example, &quot;notepad.exe&quot;, in the box labeled &quot;Enter the name of the application here&quot;.</li> Click OK.</li> Click OK again to quit Process Dump.</li> Start the Microsoft Windows Notepad.exe program.</li> When the Notepad.exe program is running on your computer, hold down CTRL+ALT+SHIFT and while holding down all three keys at once, type:

dump

Then release the CTRL, ALT, and SHIFT keys.</li> When you are ready to create a crash dump, press the key that has letter &quot;A&quot; on it (or whatever key you may have chosen in the preceding step #5).

A gray box is displayed in the upper left-hand corner of your screen informing you that the Userdump.exe tool is creating a crash dump in the C:\Winnt folder. However, the file is now named &quot;Notepad.dmp&quot;. You must verify that the crash dump has been created.</li></ol>

back to the top

Additional query words: userdump user dump user.dmp crash process

Keywords: kbenv kbhowto kbhowtomaster KB282421

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.