Error Reporting Logs
Contents |
The How-To Geek Forums Have Migrated to Discourse How-To Geek Forums / Windows Vista (Solved) - Windows error reporting log (6 posts) Started 6 years ago by NawlinsJeaux Latest reply from vistamike Topic Viewed 2217 times NawlinsJeaux Posts: 13 windows error reporting logs location This post has been reported. If I'm not mistaken, there is a way to clear the log
Microsoft Error Reporting Log
of error reports or problems that are not sent out on the net. I'm not sure if I'm describing it correctly, but I know if
Microsoft Error Reporting Log Version 2.0 Outlook Mac
you don't allow the error reports to be sent (presumably to MS), it stores it in a specific log. Anyone can help? Thanx, Nawlins Jeaux Reports: · Posted 6 years ago Top vistamike Posts: 10945 This post has been
Microsoft Error Reporting Log Version 2.0 Error Signature Exception Exc_bad_access
reported. This little app will clean your error reporting and more. http://www.piriform.com/ccleaner Mike Reports: · Posted 6 years ago Top marks100 Posts: 4507 This post has been reported. hi,Nawlinsjeaux click START type in search box ''event viewer''at top of start menu click on event viewer icon ,when popup screen appears... in left hand pain click on the little white arrows next to( windows logs or any you wish to remove) look down the list click on the one you want microsoft error reporting log version 2.0 word mac .. security r/click look down list ''clear log'' ANY LOGS YOU CHOOSE ,YOU WILL BE ASKED TO SAVE ...GOOD IDEA in your documents first.@ mike why didnt i think of that i do it this way .lol,lol :) Accept This Answer · Accepted Answer · Reports: · Posted 6 years ago Top NawlinsJeaux Posts: 13 This post has been reported. Thanx, vistamike... but, ccleaner doesn't get it. I use it a lot, and it misses the error report messages. Thanx, Marks100... that's what I was looking for. I've done it before, but couldn't remember how to get to it. Thanx, to both of you, for your input! NawlinsJeaux Reports: · Posted 6 years ago Top NawlinsJeaux Posts: 13 This post has been reported. Correction, VistaMike.... it is part of ccleaner, yes. But, I have found that it doesn't get all of it. Sorry, for the incorrect statement, last post. NawlinsJeaux Reports: · Posted 6 years ago Top vistamike Posts: 10945 This post has been reported. No problem, you solved it that's the main thing! Mike Reports: · Posted 6 years ago Top Topic Closed This topic has been closed to new replies. ABOUT About Us Contact Us Discussion Forum Advertising Privacy Policy GET ARTICLES BY EMAIL Enter your email address to get our daily newsletter. FOLLOW US Twitter Facebook Google+ RSS Feed Disclaimer: Most of the pages on the internet include affiliate links, including some on this site. Copyrigh
here for a quick overview of the site Help Center Detailed answers to any questions you might have Meta Discuss the workings and policies of this windows error reporting files site About Us Learn more about Stack Overflow the company Business Learn windows error reporting files delete more about hiring developers or posting ads with us Stack Overflow Questions Jobs Documentation Tags Users Badges Ask Question per user archived windows error reporting files x Dismiss Join the Stack Overflow Community Stack Overflow is a community of 4.7 million programmers, just like you, helping each other. Join them; it only takes a minute: Sign up Where http://www.howtogeek.com/forum/topic/windows-error-reporting-log does windows error reporting create the dump file up vote 3 down vote favorite I just want to find out which location does the WER write its dump file? Also is this location specific to OS? windows windbg windows-error-reporting share|improve this question edited Jun 29 '12 at 7:58 ThinkingStiff 48.1k16109206 asked Jan 6 '12 at 21:36 imak 1,94952665 What is the purpose http://stackoverflow.com/questions/8764842/where-does-windows-error-reporting-create-the-dump-file for? If it is for getting back information MSFT provides a mechanism located here: msdn.microsoft.com/en-us/windows/hardware/gg487440 –Brad Semrad Jan 6 '12 at 21:54 my app keep crashing, i couldn't find much info from dump file i generated from adplus. Just curious if WER dump file has any other info –imak Jan 6 '12 at 22:26 Are you able to debug and see what exceptions are being thrown? –Brad Semrad Jan 6 '12 at 22:34 Like I said i couldn't find much info from that dump file. –imak Jan 6 '12 at 22:39 Not through the dump file but like visual studio and run your code. Are you able to do that? –Brad Semrad Jan 6 '12 at 22:43 add a comment| 1 Answer 1 active oldest votes up vote 7 down vote accepted The documentation for WER says you can set registry setting to control the dump location and the type of dump HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\DumpFolder HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\DumpType share|improve this answer answered Jan 6 '12 at 22:45 jcopenha 3,5671912 add a comment| Your Answer draft saved draft discarded Sign u
Monday, February 24, 2014 Posted by Corey Harrell The Application Experience and Compatibility feature ensures compatibility of existing software between different versions of the Windows operating system. The implementation of this feature http://journeyintoir.blogspot.com/2014/02/exploring-windows-error-reporting.html results in some interesting program execution artifacts that are relevant to Digital Forensic http://serverfault.com/questions/21777/archived-and-queued-windows-error-reporting and Incident Response (DFIR). I already highlighted a few of these in my posts Revealing the RecentFileCache.bcf File and Revealing Program Compatibility Assistant HKCU AppCompatFlags Registry Keys. There are more artifacts associated with this feature and the Windows Error Reporting (WER) are one of them. Over the past few months WER has error reporting been discussed frequently due to the potential data it exposes when data is sent to Microsoft. However, WER can be a useful program execution artifact for incident response since malicious code - such as malware and exploited applications - cancrash on systems. This short post provides discusses WER and illustrates how it is helpful to track malware on a system. What is Windows Error Reporting Windows error reporting log Error Reporting is basically a feature to help solve problems associated with programs crashing on the Windows operating system. The Windows Internals, Part 1: Covering Windows Server 2008 R2 and Windows 7 goes into more detail by stating: "WER is a sophisticated mechanism that automates the submission of both user-mode process crashes as well as kernel-mode system crashes." The service analyzes the crashed application's state and builds context information surrounding the crashed program. The book continues by saying: On default configured systems, an error report (a minidump and XML file with various details, such as the DLL version numbers loaded in the process) is sent to Microsoft's online crash analysis server. Eventually, as the service is notified of a solution for a problem, it will display a tooltip to the user informing her of steps that should be taken to solve the problem. How Does Windows Error Reporting Work? There are two registry keys responsible for WER's configuration. These keys are listed below; the first key affects system-wide behavior while the second is user specific. HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Windows Error ReportingHKEY_CURRENT_USER\Software\Microsoft\Windows\Windows Error Reporting The best resource I found explaining how WER works is a paper written by 0xdabbad00.
Start here for a quick overview of the site Help Center Detailed answers to any questions you might have Meta Discuss the workings and policies of this site About Us Learn more about Stack Overflow the company Business Learn more about hiring developers or posting ads with us Server Fault Questions Tags Users Badges Unanswered Ask Question _ Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute: Sign up Here's how it works: Anybody can ask a question Anybody can answer The best answers are voted up and rise to the top Archived and queued Windows Error Reporting up vote 8 down vote favorite 2 Just ran Disk Cleanup on a computer here (Windows Vista), and saw 3 items in the list I haven't seen before: Per user archived Windows Error Repo... | 402 MB System archived WIndows Error Repor... | 18,0 KB System queued Windows Error Reporti... | 533 MB What are those? I assume it is safe to delete, but should I do something with it first? Should I for example be kind to Mircosoft and send all that queued stuff? How would I do that? Note: Wish I knew what was after those dots. Assume it is "Reporting", but no idea if there is more after it. Hate dialogs that can not be resized... (or at least lets me know what is behind truncated text in a tooltip) windows windows-vista cleanup share|improve this question asked Jun 8 '09 at 9:08 Svish 1,66092539 add a comment| 2 Answers 2 active oldest votes up vote 7 down vote accepted Yes it is safe to delete these files, they are files generated by Windows Error Reporting when an application error occurs. The per-user data is saved to: %USERPROFILE%\AppData\Local\Microsoft\Windows\wer the system data is saved to: %ALLUSERSPROFILE%\Microsoft\Windows\WER\ THose two folders are split into ReportArchive which is historical reports, and ReportQueue which are reports that have not been sent yet. This applies to both Windows Vista and Windows 7. share|improve this answer answered Jun 8 '09 at 9:28 Richard Slater 2,81322242 Are they used for anything? Can I use them for anything? Can I somehow tell Windows to send the reports that have not been sent yet? –Svish Jun 8 '09 at 11:27 2 windows retains information about how, what, why and when an application or driver has crashed. Depending on the configuration, fou