Link to home
Start Free TrialLog in
Avatar of michaelheffernan
michaelheffernan

asked on

0xC0000005 kmode exception in win32k.sys

Hi.
Machine: IBM 4500R Intel with IBM Serveraid controller, using latest IBM drivers.
OS: NT 4.0 patched to 4
Problem: BSOD during OS loading, specifically as the Windows splash bitmap is loading
Error: See title, 0x0000001e (0xc0000005,0xa003088d,0x00000000,0x00000004)
Does a dump which I cannot locate on the boot volume later.
Repair option from Winnt CD will not work; altho the controller driver loads correctly, the Ui reports that no drives are found.
Almost all services are stopped, including embedded S3 video controller (using vga only);
Almost all drivers disabled with no change in behaviour.
replaced win32k.sys, checked for viruses, trojans.  Removed PCAnywhere.
Disabled the embedded video system and tried a Matrox PCI video adapter; no change.
I can boot and mount all volumes with XP (ERC Commander 2003), and have manually removed all registry entries relating to PCAnywhere.  Server is a MSSQL server 7 host.

No change in any of the BSOD entries; last driver listed is (now) vga.sys (was the S3 before).

Hunted everywhere for 0xc0000005 but no dice.

Suggestions?
Avatar of Luc Franken
Luc Franken
Flag of Netherlands image

Hi michaelheffernan,

Looks like you have a troubling program running from startup.
Try booting into "VGA mode" to disable all unknowns from running (create a backup first, most might be safe)

This entry comes closes to your error:
http://support.microsoft.com/?kbid=195857
Note that it might not being you that closes an application :o)

Greetings,

LucF
Avatar of michaelheffernan
michaelheffernan

ASKER

Hi, LucF..

Thanks, but nope, that ain't it.  I have found the problem and it turned to be a dll that PCAnywhere loads but doesn't uninstall in its deinstallation routine, specifically awgina.dll.  Removing the dll and replacing it with the original msgina.dll resolved this problem.

Thank you anyway.

Mike
Moderator:

Please withdraw this question or instruct me how to;  I finally figured this out.

Mike
You can ask for a refund at http:/Community_Support/ 
The moderators at Experts Exchange don't view all the questions around here :o)

But I'll surely keep awgina.dll in mind, I've never seen problems with it before, and also never associated it with problems with PCAnywhere.
What I'd like to know, are you now still using PCAW or did removing it fully and replacing the dll fix all of your problems?

Thanks,

LucF
Well, right now, I have PCAnywhere 10.0 running on a bunch of servers, and have been for years.  Never an issue.

I cannot tell if the awgina.dll file was simply corrupted, altho I suspect that.  What slowed me down was not being able to identify which driver/dll was attempting to load at the barf.  Altho a OS dump was done each time, I could not locate the .dmp file anywhere on the disk.  And I have yet to figure out how to have NT4 create a boot.log.

The ERD 2003 utility is great, tho.  It boots a NTFS system up with XP and allows access (including networking) to all server elements.  Considering that the NT Repair function refused to work, it was a lifesaver.

Thanks for the tip.

M
>>I could not locate the .dmp file anywhere on the disk.<<
Normally, it's located at %SystemRoot%\Minidump and you'll have to use dumpchk.exe to view the contents of it.

I don't know what brought you to the idea of ERD, but I just love it, I still have 2002, but it suits me great! :o)

Anyway, glad you sorted your problem.

LucF
ASKER CERTIFIED SOLUTION
Avatar of ee_ai_construct
ee_ai_construct
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial