Windows XP中的用户启动的内核转储

Question

我记得看过Mark Russinovich的网络直播，显示用户启动的内核转储的键盘键序列。有人可以根据键的确切顺序刷新我的记忆。

请注意这是针对XP的。

Answer 1

http://psacake.com/web/jr.asp包含完整说明，以下是摘录：

While it may seem odd to think about purposefully causing a Blue Screen Of Death (BSOD), Microsoft includes such a provision in Windows XP. This might come in handy for testing and troubleshooting your Startup And Recovery settings, Event logging, and for demonstration purposes.

Here's how to create a BSOD:

Launch the Registry Editor (Regedit.exe).
Go to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\i8042prt\Parameters.
Go to Edit, select New | DWORD Value and name the new value CrashOnCtrlScroll.
Double-click the CrashOnCtrlScroll DWORD Value, type 1 in the Value Data textbox, and click OK.
Close the Registry Editor and restart Windows XP.
When you want to cause a BSOD, press and hold down the [Ctrl] key on the right side of your keyboard, and then tap the [ScrollLock] key twice. Now you should see the BSOD.

If your system reboots instead of displaying the BSOD, you'll have to disable the Automatically
Restart setting in the System Properties dialog box. To do so, follow these steps:

Press [Windows]-Break.
Select the Advanced tab.
Click the Settings button in the Startup And Recovery panel.
Clear the Automatically Restart check box in the System Failure panel.
Click OK twice.

Here's how you remove the BSOD configuration:

Launch the Registry Editor (Regedit.exe).
Go to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\i8042prt\Parameters.
Select the CrashOnCtrlScroll value, pull down the Edit menu, and select the Delete command.
Close the Registry Editor and restart Windows XP.
Note: Editing the registry is risky, so make sure you have a verified backup before making any changes. 

我可能错误地假设你想要BSOD，所以这是一个显示如何捕获内核转储的Microsoft页面： https://web.archive.org/web/20151014034039/https://support.microsoft.com/fr-ma/kb/316450

Answer 2

据我所知，“创建转储”命令仅添加到Vista中的任务管理器。我知道这样做的唯一过程是使用Debugging Tools附带的adplus VBScript。没有连接到dbghelp并以编程方式自己完成。

Answer 3

您可以使用热键设置Microsoft的user dump tool以转储进程。但是，这是用户进程转储，而不是内核转储......

Answer 4

我不知道任何键盘快捷方式，但是当你右键点击一个进程并选择“创建转储”时，你是否正在寻找任务管理器？