How to get a process dump file using the kldumper.exe tool
Show applications and versions that this article concerns
- Kaspersky Security Center 14.2 (version 14.2.0.26967)
- Kaspersky Security Center 14 (version 14.0.0.10902)
- Kaspersky Security Center 13.2 (version 13.2.0.1511)
- Kaspersky Security Center 13.1 (version 13.1.0.8324)
- Kaspersky Security Center 13 (version 13.0.0.11247)
After installing Kaspersky Security Center, the operating system or the application may work incorrectly. This is the result of a conflict between the Kaspersky application and other software or drivers already installed on your computer. When you contact Kaspersky Technical Support with this issue, a support engineer may ask for the Kaspersky Security Center process dump. It will help to find the cause of the problem.
Before you collect a dump of the process:
- Make sure that the user who is going to collect the dump has administrative privileges.
- Check that the Base Filtering Engine is running on the device. To do so, type in the command line:
powershell Get-Service bfeIf Status = Running, then the Base Filtering Engine is running.
- Make sure that the user who is going to collect the dump has debug privileges. To do so, type in the command line:
cmd /c "whoami /priv | findstr Debug"
If the result is Debug programs Enabled, the user has the debug privileges.
If the result is empty or the text is different, the user does not have the debug privileges. Grant them using these instructions on the Microsoft website.
How to get the Kaspersky Security Center process dump using the kldumper.exe tool
- Disable the Network Agent protection if it was enabled:
- Open Kaspersky Security Center and go to Policies.
- Right-click the Kaspersky Security Center Network Agent policy and select Properties.
- Select Settings. Clear the Protect Network Agent service against unauthorized removal or termination, and prevent changes to the settings checkbox and click ОК.
- Run the kldumper.exe tool from the application’s installation folder via the command line.
The kldumper.exe tool is located in the folder with the installed application:- Administration Server:
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Center - Administration Console:
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Center Console - Network Agent:
C:\Program Files (x86)\Kaspersky Lab\NetworkAgent
- For the Kaspersky Security Center Administration Server:
.\kldumper.exe klserver.exe c:\klserver.dmp
- For the Kaspersky Security Center Administration Console:
.\kldumper.exe mmc.exe c:\mmc.dmp
- For the Network Agent:
.\kldumper.exe klnagent.exe c:\klnagent.dmp
- Administration Server:
- Enable the Network Agent protection again, if necessary.