Where is crash reports and bug reports stored?

Zorkel

Distinguished
Sep 26, 2009
59
0
18,640
I have had a few blue screens, with the general message KMODE_EXCEPTION_NOT_HANDLED.

A quick google didn't really tell me anything useful except it seems like a very general error message.
So I wonder where to find the log of the crash to try and narrow it down, rather then wait for next crash which might happen in a week or 4 weeks from now.

Cheers. :)
 

Zorkel

Distinguished
Sep 26, 2009
59
0
18,640
I viewed my event logger and it gave me some hints about drivers, so seems to be some service//driver issue.

Viewing the *.dmp file tells me nothing pretty much a lot of nul and weird signs.

Thought I'm not to familiar with the driver//service errors as I'm not that technical.

Will paste the info on the alerts I found, in hope someone can help me get a better understanding of whats going on.

******************************
Log Name: System
Source: Microsoft-Windows-Kernel-PnP
Date: 20/01/2013 21:27:34
Event ID: 219
Task Category: (212)
Level: Warning
Keywords:
User: SYSTEM
Computer: Morinth
Description:
The driver \Driver\WudfRd failed to load for the device WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_GENERIC-&PROD_MULTI-CARD&REV_1.00#20060413092100000&0#.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-PnP" Guid="{9C205A39-1250-487D-ABD7-E831C6290539}" />
<EventID>219</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>212</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2013-01-20T20:27:34.351555400Z" />
<EventRecordID>1521</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="72" />
<Channel>System</Channel>
<Computer>Morinth</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="DriverNameLength">121</Data>
<Data Name="DriverName">WpdBusEnumRoot\UMB\2&amp;37c186b&amp;0&amp;STORAGE#VOLUME#_??_USBSTOR#DISK&amp;VEN_GENERIC-&amp;PROD_MULTI-CARD&amp;REV_1.00#20060413092100000&amp;0#</Data>
<Data Name="Status">3221226341</Data>
<Data Name="FailureNameLength">14</Data>
<Data Name="FailureName">\Driver\WudfRd</Data>
<Data Name="Version">0</Data>
</EventData>
</Event>

****************************************************
Log Name: System
Source: Microsoft-Windows-WER-SystemErrorReporting
Date: 20/01/2013 21:27:34
Event ID: 1001
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Morinth
Description:
The computer has rebooted from a bugcheck. The bugcheck was: 0x0000001e (0xffffffffc0000096, 0xfffffa800a257f90, 0xfffffa80091fe000, 0x0000000000000002). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 012013-8377-01.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-WER-SystemErrorReporting" Guid="{ABCE23E7-DE45-4366-8631-84FA6C525952}" EventSourceName="BugCheck" />
<EventID Qualifiers="16384">1001</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2013-01-20T20:27:34.000000000Z" />
<EventRecordID>1518</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>Morinth</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">0x0000001e (0xffffffffc0000096, 0xfffffa800a257f90, 0xfffffa80091fe000, 0x0000000000000002)</Data>
<Data Name="param2">C:\Windows\MEMORY.DMP</Data>
<Data Name="param3">012013-8377-01</Data>
</EventData>
</Event>
************************************************************
Log Name: System
Source: Microsoft-Windows-Kernel-Power
Date: 20/01/2013 21:27:28
Event ID: 41
Task Category: (63)
Level: Critical
Keywords: (2)
User: SYSTEM
Computer: Morinth
Description:
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
<EventID>41</EventID>
<Version>3</Version>
<Level>1</Level>
<Task>63</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000002</Keywords>
<TimeCreated SystemTime="2013-01-20T20:27:28.002282900Z" />
<EventRecordID>1506</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="8" />
<Channel>System</Channel>
<Computer>Morinth</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="BugcheckCode">30</Data>
<Data Name="BugcheckParameter1">0xffffffffc0000096</Data>
<Data Name="BugcheckParameter2">0xfffffa800a257f90</Data>
<Data Name="BugcheckParameter3">0xfffffa80091fe000</Data>
<Data Name="BugcheckParameter4">0x2</Data>
<Data Name="SleepInProgress">0</Data>
<Data Name="PowerButtonTimestamp">0</Data>
<Data Name="BootAppStatus">0</Data>
</EventData>
</Event>
*****************************************************

Updating the drivers I can and is aware of.