
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\CrashControl
    AutoReboot    REG_DWORD    0x1
    CrashDumpEnabled    REG_DWORD    0x2
    Overwrite    REG_DWORD    0x1
    LogEvent    REG_DWORD    0x1
    MinidumpsCount    REG_DWORD    0x32
    DumpFile    REG_EXPAND_SZ    %SystemRoot%\MEMORY.DMP
    MinidumpDir    REG_EXPAND_SZ    %SystemRoot%\Minidump

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\CrashControl\MachineCrash
    DumpFile    REG_SZ    C:\Windows\MEMORY.DMP
    TempDestination    REG_DWORD    0x0
    FinalDumpFileLocation    REG_SZ    C:\Windows\MEMORY.DMP


HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AeDebug
    UserDebuggerHotKey    REG_DWORD    0x0

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AeDebug\AutoExclusionList
    DWM.exe    REG_DWORD    0x1

							
-------------------------------------------------------- 	
Windows Error Reporting [WER], Dr Watson and dumps files		
-------------------------------------------------------- 	
							
Defined DumpFile - "C:\Windows\MEMORY.DMP"  
Directory of C:\Windows\ 
14.06.2013  01:36     1.385.501.270 MEMORY.DMP
 
Directory of "C:\Windows\Minidump"  
09.03.2012  04:45           262.144 030912-19718-01.dmp
23.04.2012  12:18           274.768 042312-19624-01.dmp
19.11.2011  08:40           274.768 111911-19500-01.dmp
 
Directory of "C:\ProgramData\Microsoft\Windows\WER\ReportQueue"  
 
Directory of "C:\Windows\Temp"  
 
