
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\CrashControl
    AutoReboot    REG_DWORD    0x1
    CrashDumpEnabled    REG_DWORD    0x2
    Overwrite    REG_DWORD    0x1
    LogEvent    REG_DWORD    0x1
    MinidumpsCount    REG_DWORD    0x32
    DumpFile    REG_EXPAND_SZ    %SystemRoot%\MEMORY.DMP
    MinidumpDir    REG_EXPAND_SZ    %SystemRoot%\Minidump

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\CrashControl\MachineCrash
    DumpFile    REG_SZ    C:\Windows\MEMORY.DMP
    TempDestination    REG_DWORD    0x0
    FinalDumpFileLocation    REG_SZ    C:\Windows\MEMORY.DMP


HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AeDebug
    UserDebuggerHotKey    REG_DWORD    0x0

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AeDebug\AutoExclusionList
    DWM.exe    REG_DWORD    0x1

							
------------------------------------------------- 	
Windows Error Reporting (WER), Dr Watson and dumps files		
------------------------------------------------- 	
							
Directory of "%SystemRoot%\Minidump"  
 
Directory of ""  
 
Directory of "C:\ProgramData\Microsoft\Windows\WER\ReportQueue"  
 
Directory of "C:\Windows\Temp"  
 
Directory of "C:\ProgramData\Documents\DrWatson"  
 
Directory of "C:\ProgramData\Application Data\Microsoft\Dr Watson"  
 
Directory of "C:\Users\nextira\Local Settings\Application Data\Microsoft\Dr Watson"  
 
