Windows XP中用户启动的内核转储

Question

我记得从Mark Russinovich观看了一个网络直播，其中显示了用户启动的内核转储的键盘按键顺序。有人可以按键的确切顺序刷新我的记忆。

请注意这是为XP。

Answer 1

http://psacake.com/web/jr.asp包含完整的说明，这里是一个摘录：

 
While it may seem odd to think about purposefully causing a Blue Screen Of Death (BSOD), Microsoft includes such a provision in Windows XP. This might come in handy for testing and troubleshooting your Startup And Recovery settings, Event logging, and for demonstration purposes. 

Here's how to create a BSOD: 

Launch the Registry Editor (Regedit.exe). 
Go to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\i8042prt\Parameters. 
Go to Edit, select New | DWORD Value and name the new value CrashOnCtrlScroll. 
Double-click the CrashOnCtrlScroll DWORD Value, type 1 in the Value Data textbox, and click OK. 
Close the Registry Editor and restart Windows XP. 
When you want to cause a BSOD, press and hold down the [Ctrl] key on the right side of your keyboard, and then tap the [ScrollLock] key twice. Now you should see the BSOD. 

If your system reboots instead of displaying the BSOD, you'll have to disable the Automatically 
Restart setting in the System Properties dialog box. To do so, follow these steps: 

Press [Windows]-Break. 
Select the Advanced tab. 
Click the Settings button in the Startup And Recovery panel. 
Clear the Automatically Restart check box in the System Failure panel. 
Click OK twice. 

Here's how you remove the BSOD configuration: 

Launch the Registry Editor (Regedit.exe). 
Go to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\i8042prt\Parameters. 
Select the CrashOnCtrlScroll value, pull down the Edit menu, and select the Delete command. 
Close the Registry Editor and restart Windows XP. 
Note: Editing the registry is risky, so make sure you have a verified backup before making any changes. 

而且我可能是错在假设你要蓝屏，所以这是一个微软页面显示转储如何捕捉内核： https://web.archive.org/web/20151014034039/https://support.microsoft.com/fr-ma/kb/316450

Answer 2

我不知道有任何键盘快捷方式，但是您是否在任务管理器中寻找，如果您右键单击某个进程并选择“创建转储”？

Answer 3

据我所知，“创建转储”命令只添加到Vista中的任务管理器。我知道这样做的唯一过程是使用Debugging Tools附带的adplus VBScript。缺少挂钩到dbghelp并编程自己做。

Answer 4

您可以使用热键来设置来自Microsoft的user dump tool以转储进程。但是，这是用户进程转储，而不是内核转储...