Solved

0xC0000005 kmode exception in win32k.sys

Posted on 2004-09-23
8
2,225 Views
Last Modified: 2013-12-28
Hi.
Machine: IBM 4500R Intel with IBM Serveraid controller, using latest IBM drivers.
OS: NT 4.0 patched to 4
Problem: BSOD during OS loading, specifically as the Windows splash bitmap is loading
Error: See title, 0x0000001e (0xc0000005,0xa003088d,0x00000000,0x00000004)
Does a dump which I cannot locate on the boot volume later.
Repair option from Winnt CD will not work; altho the controller driver loads correctly, the Ui reports that no drives are found.
Almost all services are stopped, including embedded S3 video controller (using vga only);
Almost all drivers disabled with no change in behaviour.
replaced win32k.sys, checked for viruses, trojans.  Removed PCAnywhere.
Disabled the embedded video system and tried a Matrox PCI video adapter; no change.
I can boot and mount all volumes with XP (ERC Commander 2003), and have manually removed all registry entries relating to PCAnywhere.  Server is a MSSQL server 7 host.

No change in any of the BSOD entries; last driver listed is (now) vga.sys (was the S3 before).

Hunted everywhere for 0xc0000005 but no dice.

Suggestions?
0
Comment
Question by:michaelheffernan
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
8 Comments
 
LVL 32

Expert Comment

by:LucF
ID: 12136074
Hi michaelheffernan,

Looks like you have a troubling program running from startup.
Try booting into "VGA mode" to disable all unknowns from running (create a backup first, most might be safe)

This entry comes closes to your error:
http://support.microsoft.com/?kbid=195857
Note that it might not being you that closes an application :o)

Greetings,

LucF
0
 

Author Comment

by:michaelheffernan
ID: 12136374
Hi, LucF..

Thanks, but nope, that ain't it.  I have found the problem and it turned to be a dll that PCAnywhere loads but doesn't uninstall in its deinstallation routine, specifically awgina.dll.  Removing the dll and replacing it with the original msgina.dll resolved this problem.

Thank you anyway.

Mike
0
 

Author Comment

by:michaelheffernan
ID: 12136399
Moderator:

Please withdraw this question or instruct me how to;  I finally figured this out.

Mike
0
Transaction Monitoring Vs. Real User Monitoring

Synthetic Transaction Monitoring Vs. Real User Monitoring: When To Use Each Approach? In this article, we will discuss two major monitoring approaches: Synthetic Transaction and Real User Monitoring.

 
LVL 32

Expert Comment

by:LucF
ID: 12136756
You can ask for a refund at http:/Community_Support/ 
The moderators at Experts Exchange don't view all the questions around here :o)

But I'll surely keep awgina.dll in mind, I've never seen problems with it before, and also never associated it with problems with PCAnywhere.
What I'd like to know, are you now still using PCAW or did removing it fully and replacing the dll fix all of your problems?

Thanks,

LucF
0
 

Author Comment

by:michaelheffernan
ID: 12137175
Well, right now, I have PCAnywhere 10.0 running on a bunch of servers, and have been for years.  Never an issue.

I cannot tell if the awgina.dll file was simply corrupted, altho I suspect that.  What slowed me down was not being able to identify which driver/dll was attempting to load at the barf.  Altho a OS dump was done each time, I could not locate the .dmp file anywhere on the disk.  And I have yet to figure out how to have NT4 create a boot.log.

The ERD 2003 utility is great, tho.  It boots a NTFS system up with XP and allows access (including networking) to all server elements.  Considering that the NT Repair function refused to work, it was a lifesaver.

Thanks for the tip.

M
0
 
LVL 32

Expert Comment

by:LucF
ID: 12137229
>>I could not locate the .dmp file anywhere on the disk.<<
Normally, it's located at %SystemRoot%\Minidump and you'll have to use dumpchk.exe to view the contents of it.

I don't know what brought you to the idea of ERD, but I just love it, I still have 2002, but it suits me great! :o)

Anyway, glad you sorted your problem.

LucF
0
 

Accepted Solution

by:
ee_ai_construct earned 0 total points
ID: 12160785
Closed, 500 points refunded.
ee_ai_construct (replacement part #xm34)
Community Support Admin
0

Featured Post

What Is Transaction Monitoring and who needs it?

Synthetic Transaction Monitoring that you need for the day to day, which ensures your business website keeps running optimally, and that there is no downtime to impact your customer experience.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Determining the an SCCM package name from the Package ID
When asking a question in a forum or creating documentation, screenshots are vital tools that can convey a lot more information and save you and your reader a lot of time
The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…
Finding and deleting duplicate (picture) files can be a time consuming task. My wife and I, our three kids and their families all share one dilemma: Managing our pictures. Between desktops, laptops, phones, tablets, and cameras; over the last decade…

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question