Kaspersky Anti-Virus 6.0 for Windows Servers Enterprise Edition MP2 (builds 6.0.2. [551-555])

	Useful links
	Download the file WSEE_dump.reg to create the dump [ZIP, 351B] How to create crash dump files automatically during the application crash

If the working process kavfswp.exe of Kaspersky Anti-Virus 6.0 for Windows Servers Enterprise Edition running under Microsoft Windows Server 2008 aborts its work ("crashes"), the developers will need memory dump at the process of crash to find out the reasons of such behavior.

To create the memory dump, do the following:

1. On the server where the server part of Kaspersky Anti-Virus is installed, create a folder. For example, C:\Temp.

2. On the server grant the Users group the right FullControl for the created folder.

3. In the system registry of the protected server add the following keys:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error

Reporting\LocalDumps\kavfswp.exe]

"DumpFolder"="c:\temp"

"DumpType"=dword:00000002

"DumpCount"=dword:00000005

In order to add these keys to the system registry you can use the reg-file WSEE_dump.reg. If the folder name created in point 1 differs from C:\Temp, in this case change the name of the reg-file.

4. Reproduce the situation which leads to abnormal termination of the process kavfswp.exe.

5. In the folder C:\Temp (or in the folder with a different name you have created in point1) find the file with the extension dmp, add this file to an archive and attach the archive to the request to Technical support. In the request give detailed description of the situation which leads to abortion.

6. Delete the added keys from the system registry.