Post problem reports here for Batch files for use in BSOD debugging

Both V2 and DM log collectors are having problems with collecting usable text results for the event viewer.

What options are there so that it no longer displays:

Task: N/A
Level: N/A
Opcode: N/A
Keyword: N/A
User: N/A
User Name: N/A
Computer:
Description:
N/A

Go to Eleven Forum if the problems arise on Windows 11.
Have you run the version attached to post #1172 on Windows 10?

Matthew Wai said:

Go to Eleven Forum if the problems arise on Windows 11.
Have you run the version attached to post #1172 on Windows 10?

How can it be posted in EF when you're here and there is no similar thread yet in EF?


The version in post #1172 was just ran on the same computer and it did not display a warning using Microsoft Defender.

What was triggering the false positive?

zbook said:

How can it be posted in EF when you're here and there is no similar thread yet in EF?

I have no Windows 11 and am thus in no position to help you. You may start a new thread on EF. Perhaps the members there can help you.

zbook said:

What was triggering the false positive?

I just tried to download V2 Log collector from this page: BSOD - Posting Instructions

Then, I got the following message:

zbook said:

The version in post #1172 was just ran on the same computer and it did not display a warning using Microsoft Defender.

The version had been modified by me.

Which PUA was detected?
What did you modify that fixed the PUA trigger so that it no longer occurred?


Please see post #1169.
Which commands work for each: conx, cbs, and memory dump collection?

What's happening with LOGS script.

Which new bat scripts can run for testing so that it displays similar results with multiple bat files?


If and when V2 is modified please create commands (if possible) to identify any installed:
a) antivirus, b) firewall, c) drive encryption d) status of hibernation

zbook said:

Which PUA was detected?

zbook said:

What did you modify that fixed the PUA trigger so that it no longer occurred?

I replaced "log-collector.lnk" with "log-collector.cmd".

zbook said:

C:\WINDOWS\system32>findstr /c:"CONX" C:\$Windows.~BT\Sources\Panther\setupact.log >"%userprofile%\Desktop\Setupactdetails.txt"
FINDSTR: Cannot open C:\$Windows.~BT\Sources\Panther\setupact.log

It could not be opened because it did not exist.

zbook said:

C:\WINDOWS\system32>copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt"Compress-Archive -Path
The syntax of the command is incorrect.

PowerShell Compress-Archive "%WinDir%\Logs\CBS\CBS.log" "%UserProfile%\Desktop\CBS"

zbook said:

C:\WINDOWS\system32>"$env:homeDrive\Windows\MEMORY.DMP" -DestinationPath "$env:homeDrive$env:homePath\Desktop\Memory_dmp"
The filename, directory name, or volume label syntax is incorrect.

PowerShell Compress-Archive "%WinDir%\MEMORY.DMP" "%UserProfile%\Desktop\Memory_dmp"

zbook said:

What's happening with LOGS script.

I don't know what is happening.

zbook said:

Which new bat scripts can run for testing so that it displays similar results with multiple bat files?

The commands can be written into a script.

zbook said:

If and when V2 is modified please create commands (if possible) to identify any installed:
a) antivirus, b) firewall, c) drive encryption d) status of hibernation

The administrator would not allow anyone except Spectrum to modify it.

I don't need Windows 11 at the moment.
I won't bother about it for the moment.