Event ID 1005: Unable to produce a minidump file from the full dump file
Windows Event ID Lookup: What Windows event IDs mean: 4625, 4624, 4740, 6008, 41, 7045, 1102 and 3,000 more, with Windows' own message text, the fields and what to check.
Look up a Windows event ID from Event Viewer, a SIEM alert or a log export: what it means, the fields it records, and what to
check. Many IDs are used by more than one source (event 41 is both a Kernel-Power crash and a boot error), so every definition
is shown, the one people usually mean first. The message text is Windows' own, read from the event providers of
Windows 10.0.26200.0, 2026-10-28; the notes are ours, based on Microsoft's
security auditing reference.
Unable to produce a minidump file from the full dump file.
Event 1005
WER-SystemErrorReporting
System log
Error
Message and fields (as Event Viewer shows them)
Unable to produce a minidump file from the full dump file.
The client was unable to validate the following as active DNS server(s) that can service this client.
Event 1005
DNS-Client
System log
Error
Message and fields (as Event Viewer shows them)
The client was unable to validate the following as active DNS server(s) that can service this client. The server(s) may be temporarily unavailable, or may be incorrectly configured. …
Diagnostic warning event on a Namespace on device(Port
The Windows Resource Exhaustion Detector failed to start due to an error.
Event 1005
Resource-Exhaustion-Detector
System log
Error
Message and fields (as Event Viewer shows them)
The Windows Resource Exhaustion Detector failed to start due to an error.
Windows cannot access the file … for one of the following reasons: there is a problem with the network connection, the disk that the file is stored on, or the storage drivers installed on this computer; or the disk is missing.
Event 1005
Application Error
Application log
Error
Message and fields (as Event Viewer shows them)
Windows cannot access the file … for one of the following reasons: there is a problem with the network connection, the disk that the file is stored on, or the storage drivers installed on this computer; or the disk is missing. Windows closed the program … because of this error.
Program: …
File: …
The error value is listed in the Additional Data section.
User Action
1. Open the file again. This situation might be a temporary problem that corrects itself when the program runs again.
2. If the file still cannot be accessed and
- It is on the network, your network administrator should verify that there is not a problem with the network and that the server can be contacted.
- It is on a removable disk, for example, a floppy disk or CD-ROM, verify that the disk is fully inserted into the computer.
3. Check and repair the file system by running CHKDSK. To run CHKDSK, click Start, click Run, type CMD, and then click OK. At the command prompt, type CHKDSK /F, and then press ENTER.
4. If the problem persists, restore the file from a backup copy.
5. Determine whether other files on the same disk can be opened. If not, the disk might be damaged. If it is a hard disk, contact your administrator or computer hardware vendor for further assistance.
Additional Data
Error value: …
Disk type: …
… scan has encountered an error and terminated.
Event 1005
Windows Defender
Windows Defender/Operational log
Error
Message and fields (as Event Viewer shows them)
… scan has encountered an error and terminated.
Scan ID: …
Scan Type: …
Scan Parameters: …
User: …\…
Error Code: …
Error description: …
Negotiate integrity check failed.
Event 1005
SMBServer
SMBServer/Operational log
Error
Message and fields (as Event Viewer shows them)
Negotiate integrity check failed.
Status: …
Client Name: …
Client Address: …
User Name: …
Session ID: …
Guidance:
This event indicates that the client's negotiate request was altered on the network between the client and server due to errors or a "man-in-the-middle" attack. The client has been disconnected to prevent a security downgrade.