The next useful step is to collect and review the crash data consistently, because only one crash produced a dump and freezes that require a hard reboot often need full memory dump collection enabled.
- Check whether Windows is creating minidumps.
- Open File Explorer.
- Go to
C:\Windows\Minidump. - Copy any dump files to another folder and zip them for review.
- Configure Windows to create a full crash dump for freezes.
- Press
Win + R, typeSysdm.cpl, and press Enter. - In System Properties > Advanced tab:
- Select Startup and Recovery > Settings.
- Under Write Debugging Information, select Complete Memory Dump.
- Select Overwrite any existing file.
- Make sure a paging file exists on the system drive and that it is at least 100 MB larger than installed RAM.
- Make sure the system drive has more free space than the amount of physical RAM.
- By default, the dump file is written to
%SystemRoot%\MEMORY.DMP.
- Press
- If the system freezes and does not create a dump automatically, enable manual crash dump generation from the keyboard.
- Warning: this requires registry changes. Incorrect registry edits can cause serious problems.
- In Registry Editor, create
CrashOnCtrlScrollas aREG_DWORDwith value1in both:-
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\i8042prt\Parameters -
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kbdhid\Parameters
-
- Restart the PC.
- When the PC freezes, hold the right Ctrl key and press Scroll Lock twice to force a memory dump.
- After a crash, if
MEMORY.DMPis not immediately available, wait before assuming it failed.- Windows can continue writing
C:\Windows\MEMORY.DMPasynchronously after reboot. - The file may still be in use by
werfault.exewhile it is being written. - If no dump appears, check Event Viewer > System for events with source BugCheck.
- A common reason for a missing dump is insufficient free disk space.
- Windows can continue writing
- If a dump is created, validate and inspect it.
-
Dumpchk.execan verify that the dump file was created correctly and is not corrupted. - For deeper analysis, copy
memory.dmpto another PC, install Debugging Tools for Windows from the Windows 10 SDK, open the dump in WinDbg, and set symbols to the Microsoft public symbol server:https://msdl.microsoft.com/download/symbols.
-
Because the freezes returned after disappearing for months, the most reliable path is to capture a complete dump during the next freeze rather than relying only on the single minidump already produced.