Where are BSOD crash files stored?

Page 2 of 2 FirstFirst 12

  1. Posts : 13,354
    Windows 7 Professional x64
       #11

    My best guess is that a cleaning program got the file, after it was created. Are you using any optimization or cleaning programs, such as CCleaner, the Windows Disk Cleanup Tool, etc?
      My Computer


  2. Posts : 169
    Windows 7 Ultimate x64 SP1
    Thread Starter
       #12

    Normally yes, but after the reboot the only thing I did was a System Restore.
      My Computer


  3. Posts : 169
    Windows 7 Ultimate x64 SP1
    Thread Starter
       #13

    Jonathan_King said:

    Attached files:
    C:\Windows\Minidump\091310-25343-01.dmp
    C:\Users\tony\AppData\Local\Temp\WER-32562-0.sysdata.xml
    C:\Users\tony\AppData\Local\Temp\WER79BF.tmp.WERInternalMetadata.xml

    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_0_0_cab_09ed8a0b
    Well, none of the three indicated files were there! But there is a Report.wer in the ReportArchive. Here's what it says:

    Version=1
    EventType=BlueScreen
    EventTime=129288927299658203
    ReportType=4
    Consent=1
    UploadTime=129288927911699218
    ReportIdentifier=64fb8c8f-bf8b-11df-9a13-005056c00008
    IntegratorReportIdentifier=091310-25343-01
    Response.type=4
    Response.AnalysisBucket=X64_0xA_nt!MiResolveProtoPteFault+6a
    DynamicSig[1].Name=OS Version
    DynamicSig[1].Value=6.1.7600.2.0.0.256.1
    DynamicSig[2].Name=Locale ID
    DynamicSig[2].Value=1033
    UI[2]=C:\Windows\system32\wer.dll
    UI[3]=Windows has recovered from an unexpected shutdown
    UI[4]=Windows can check online for a solution to the problem.
    UI[5]=&Check for solution
    UI[6]=&Check later
    UI[7]=Cancel
    UI[8]=Windows has recovered from an unexpected shutdown
    UI[9]=A problem caused Windows to stop working correctly. Windows will notify you if a solution is available.
    UI[10]=Close
    Sec[0].Key=BCCode
    Sec[0].Value=a
    Sec[1].Key=BCP1
    Sec[1].Value=0000007C5004A408
    Sec[2].Key=BCP2
    Sec[2].Value=0000000000000002
    Sec[3].Key=BCP3
    Sec[3].Value=0000000000000000
    Sec[4].Key=BCP4
    Sec[4].Value=FFFFF80002AB31EA
    Sec[5].Key=OS Version
    Sec[5].Value=6_1_7600
    Sec[6].Key=Service Pack
    Sec[6].Value=0_0
    Sec[7].Key=Product
    Sec[7].Value=256_1
    State[0].Key=Transport.DoneStage1
    State[0].Value=1
    State[1].Key=CA
    State[1].Value=1
    State[2].Key=BLOB
    State[2].Value=CHKSUM=317A479F7FF867ED888B997E122EB4FA;BID=OCATAG;ID=7a1480bd-36f4-44f0-ac0c-cbbcc4f39dd8;SUB=9//13//2010 4:06:35 PM
    File[0].CabName=091310-25343-01.dmp
    File[0].Path=091310-25343-01.dmp
    File[0].Flags=851970
    File[0].Type=2
    File[0].Original.Path=C:\Windows\Minidump\091310-25343-01.dmp
    File[1].CabName=sysdata.xml
    File[1].Path=WER-32562-0.sysdata.xml
    File[1].Flags=851970
    File[1].Type=5
    File[1].Original.Path=C:\Users\tony\AppData\Local\Temp\WER-32562-0.sysdata.xml
    File[2].CabName=WERInternalMetadata.xml
    File[2].Path=WER79BF.tmp.WERInternalMetadata.xml
    File[2].Flags=589827
    File[2].Type=5
    File[2].Original.Path=C:\Users\tony\AppData\Local\Temp\WER79BF.tmp.WERInternalMetadata.xml
    File[3].CabName=Report.cab
    File[3].Path=Report.cab
    File[3].Flags=196608
    File[3].Type=7
    File[3].Original.Path=Report.cab
    FriendlyEventName=Shut down unexpectedly
    ConsentKey=BlueScreen
    AppName=Windows
    AppPath=C:\Windows\System32\WerFault.exe
      My Computer


  4. Posts : 13,354
    Windows 7 Professional x64
       #14

    Try disabling any such programs for now.

    If the BSODs persist, you may check for new dumps, or enable driver verifier, and hope the bucket IDs help.
      My Computer


 
Page 2 of 2 FirstFirst 12

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 16:51.
Find Us