To generate a complete memory dump:

1. Enable complete memory dump by setting the "CrashDumpEnabled" DWORD to 1. Do the following:

   [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CrashControl]
   DWORD: CrashDumpEnabled=1

2. Enable crash via keyboard stroke by setting the following registry entries:
   • For PS/2 keyboards: (Available in Windows 2000 and later versions of Windows):

     [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\i8042prt\Parameters]
     DWORD: CrashOnCtrlScroll=1

   • For USB keyboards: (Available in Windows Vista and later versions of Windows):

     [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\kbdhid\Parameters]
     DWORD: CrashOnCtrlScroll=1

   • Hyper-V keyboards: (Available in Windows 10 version 1903 and later versions of Windows)

     [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\hyperkbd\Parameters]
     DWORD: CrashOnCtrlScroll=1

3. Reboot the machine and verify that "Complete memory dump" is selected by going to Control Panel > System and Security > System. Select Advanced system settings. Under the Startup and Recovery section, select Settings.

   Click the image to enlarge.

4. Test whether you can obtain a manual memory dump file:

   Hold down the right "CTRL" key while pressing the "Scroll Lock" key two times. The system should go to BSoD and the memory dumping process would appear on the screen. After the machine restarts, wait for disk activity to stop. The dump file should be the same size as the physical memory and is found in %SystemRoot%\MEMORY.DMP.

5. Send the following to Trend Micro Technical Support.
   • Case Diagnostic Tool
   • %SystemRoot%\MEMORY.DMP

For more details about enabling crash dump in Windows, follow the steps in this Microsoft KB article.