How to get a memory dump file of Kaspersky Anti-Virus 8.0 for Windows Servers Enterprise Edition work process (kavfswp.exe)

 

Kaspersky Anti-Virus 8.0 for Windows Servers Enterprise Edition

 
 
 

How to get a memory dump file of Kaspersky Anti-Virus 8.0 for Windows Servers Enterprise Edition work process (kavfswp.exe)

Back to "Troubleshooting"
Latest update: 2019 Jun 10 ID: 4634
 
 
 
 

When Kaspersky Anti-Virus 8.0 for Windows Servers Enterprise Edition work process kavfswp.exe crashes, it is necessary to have a dump file of the process generated at the moment of the crash for troubleshooting.

In order to generate a process dump file:

  1. Create a folder (C:\Temp e.g.) on the server with installed Kaspersky Anti-Virus.
  2. Grant the permission FullControl to the group Users for that folder.
  3. Add the following system registry keys on the protected server:

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\kavfswp.exe]
    "DumpFolder"="c:\temp"
    "DumpType"=dword:00000002
    "DumpCount"=dword:00000005


    You can use the following .reg file to add these values to the system registry: WSEE_dump.reg. Edit the .reg file if you are going to use a non-default folder for dump files (not C:\Temp).

  4. Reproduce the situation causing the process kavfswp.exe to crash.
  5. Find the file .dmp in the dump folder (C:\Temp by default), archive it and attach that archive to your Technical Support request. It is necessary to provide a detailed description of the situation causing the process kavfswp.exe to crash in the request.
  6. Remove the no-longer needed system registry keys added in the Step 3.
 
 
 
 
Was this information helpful?
Yes No
Thank you
 

 
 

How can we improve this article?

Your feedback will be used for content improvement purposes only. If you need assistance, please contact technical support.

Submit Submit

Thank you for your feedback!

Your suggestions will help improve this article.

OK