Please help with a Windows dump

My PC just restarted and created a dump file. I changed the extension (dmp) to txt, so that I could upload it here. Please someone take a look into it and tell me what is it. Thank you! :slight_smile:

Pretty please. :wink:

It seems that the problem doesn’t occure anymore, so please tell me if should I remove this from my startup:
O4 - HKLM..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

Thanx.

Will someone help me please? :frowning:

Personally if it were me I would first go to that registry key and export it as a .reg file in case I had to use it again and then I would delete the entry.

Hi…

I don’t know know how much help I’ll be but I did look at your file and it appears to be a driver issue. What I did find peculiar was this line:

“Mdl àÈu† Àu† à \g eOsÜéMÞˆWin32:Sasser [Wrm] E  '¾VKÜcô†Ý`¬›—ƒb´“c¶ÿHVŠÃ(™bíZWin32:Blaster-D [Wrm]  ”

Did you install anything just prior to this event?

EDIT: Nevermind, I just now saw that the problem no longer occurs. I would concur with David’s advice. :slight_smile:

Regards…

Which registry key? I found that line in CCleaner, I didn’t go to Windows registry. And yeah, I hope that the problem won’t occur anymore.

I’m a bit worried about that line, it seems like a virus, doesn’t it? Was that writen in the dump file?

Thank you both for help!

Sorry I though you had created this so it would generate a dump file to troubleshoot a problem.

If you fully expand the registry key path found by ccleaner the ..\ bit is a concatenation with the full path you should be able to follow that like you would in explorer.

However, if you leave that entry there and clean all the other stuff shown by ccleaner. You can run ccleaner again and only that entry should be there, now you can clean it ensuring that ccleaner makes a backup of it.

I’m sorry, I don’t fully understand… That entry was created when my PC rebooted, when the minidump was made. So, should I delete it or leave it there?

AS I said in my above post (paragraph beginning However), yes but only after making a backup via ccleaner

I don’t know how to make a backup in CCleaner. :stuck_out_tongue: And for what purpose anyway? Won’t the system itself create that line again if something like that occurs again?

Presumably you found it using the Registry function, well backups are incorporated by default confirmation. If after running this check it will report any issues and the box to the left will be ticked/selected, you you click the Fix selected issues you get the confirmation ‘Do you want to backup changes to the registry?’ window, see image.

So it isn’t a problem to backup any issues that you elected to fix.

Why backup, simple it is good practice as one day it will bite you in the ar*e when you don’t if you ever need to reverse the change. I don’t second guess the registry and when working in it I always backup.

That entry is found in CCleaner’s Tools → Startup section, not in the registry section. Thank you anyway, I now realised that I can just disable that line in CCleaner and later - if everything’s working fine - I can delete it. Thanks! :slight_smile:

How about posting an image so we can see exactly what it is, it is essential that we are able to see the full data on that line and not a concatenated /…/ one.

http://www.shrani.si/f/40/tD/2AZD2VB2/slslsslsl.jpg

OK, I was hoping it would be a little more helpful with some reference to what might have set it.

It may be that there has been some OS setting changed to initiate this check, see this link about it and how it is set or conversely removed, http://www.raymond.cc/blog/archives/2008/03/04/what-is-dumprepexe-why-is-kernelfaultcheck-dumprep-0-k-in-msconfig-startup/. Your System Startup and Recovery setting may have been set to do a Kernel Memory Dump.

The main thing it doesn’t look to be maliciously set as I can’t see a purpose for this if it were set maliciously.

Thank you for a great help as always, David. :slight_smile:

You’re welcome.