0xC0000005 kmode exception in win32k.sys

Posted on 2004-09-23
Medium Priority
Last Modified: 2013-12-28
Machine: IBM 4500R Intel with IBM Serveraid controller, using latest IBM drivers.
OS: NT 4.0 patched to 4
Problem: BSOD during OS loading, specifically as the Windows splash bitmap is loading
Error: See title, 0x0000001e (0xc0000005,0xa003088d,0x00000000,0x00000004)
Does a dump which I cannot locate on the boot volume later.
Repair option from Winnt CD will not work; altho the controller driver loads correctly, the Ui reports that no drives are found.
Almost all services are stopped, including embedded S3 video controller (using vga only);
Almost all drivers disabled with no change in behaviour.
replaced win32k.sys, checked for viruses, trojans.  Removed PCAnywhere.
Disabled the embedded video system and tried a Matrox PCI video adapter; no change.
I can boot and mount all volumes with XP (ERC Commander 2003), and have manually removed all registry entries relating to PCAnywhere.  Server is a MSSQL server 7 host.

No change in any of the BSOD entries; last driver listed is (now) vga.sys (was the S3 before).

Hunted everywhere for 0xc0000005 but no dice.

Question by:michaelheffernan
  • 3
  • 3
LVL 32

Expert Comment

ID: 12136074
Hi michaelheffernan,

Looks like you have a troubling program running from startup.
Try booting into "VGA mode" to disable all unknowns from running (create a backup first, most might be safe)

This entry comes closes to your error:
Note that it might not being you that closes an application :o)



Author Comment

ID: 12136374
Hi, LucF..

Thanks, but nope, that ain't it.  I have found the problem and it turned to be a dll that PCAnywhere loads but doesn't uninstall in its deinstallation routine, specifically awgina.dll.  Removing the dll and replacing it with the original msgina.dll resolved this problem.

Thank you anyway.


Author Comment

ID: 12136399

Please withdraw this question or instruct me how to;  I finally figured this out.

Train for your Pen Testing Engineer Certification

Enroll today in this bundle of courses to gain experience in the logistics of pen testing, Linux fundamentals, vulnerability assessments, detecting live systems, and more! This series, valued at $3,000, is free for Premium members, Team Accounts, and Qualified Experts.

LVL 32

Expert Comment

ID: 12136756
You can ask for a refund at http:/Community_Support/ 
The moderators at Experts Exchange don't view all the questions around here :o)

But I'll surely keep awgina.dll in mind, I've never seen problems with it before, and also never associated it with problems with PCAnywhere.
What I'd like to know, are you now still using PCAW or did removing it fully and replacing the dll fix all of your problems?



Author Comment

ID: 12137175
Well, right now, I have PCAnywhere 10.0 running on a bunch of servers, and have been for years.  Never an issue.

I cannot tell if the awgina.dll file was simply corrupted, altho I suspect that.  What slowed me down was not being able to identify which driver/dll was attempting to load at the barf.  Altho a OS dump was done each time, I could not locate the .dmp file anywhere on the disk.  And I have yet to figure out how to have NT4 create a boot.log.

The ERD 2003 utility is great, tho.  It boots a NTFS system up with XP and allows access (including networking) to all server elements.  Considering that the NT Repair function refused to work, it was a lifesaver.

Thanks for the tip.

LVL 32

Expert Comment

ID: 12137229
>>I could not locate the .dmp file anywhere on the disk.<<
Normally, it's located at %SystemRoot%\Minidump and you'll have to use dumpchk.exe to view the contents of it.

I don't know what brought you to the idea of ERD, but I just love it, I still have 2002, but it suits me great! :o)

Anyway, glad you sorted your problem.


Accepted Solution

ee_ai_construct earned 0 total points
ID: 12160785
Closed, 500 points refunded.
ee_ai_construct (replacement part #xm34)
Community Support Admin

Featured Post

Upgrade your Question Security!

Your question, your audience. Choose who sees your identity—and your question—with question security.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Understanding the various editions available is vital when you decide to purchase Windows Server 2012. You need to have a basic understanding of the features and limitations in each edition in order to make a well-informed decision that best suits …
Virtualization software lets you run different versions of Windows, Ubuntu Linux and other versions of Linux all at the same time, rather than running each one directly from your computer's hard drive.
This Micro Tutorial will give you a basic overview of Windows DVD Burner through its features and interface. This will be demonstrated using Windows 7 operating system.
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

586 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question