Stop error 0x8E on XP shutdown

Posted on 2004-11-26
Last Modified: 2008-03-10
Stop error 0X8E on XP shutdown -

I get a stop error on XP shutdown ONLY and it resembles always a BCCode : 1000008e     BCP1 : C0000005   For ex :
BCCode : 1000008e     BCP1 : C0000005     BCP2 : 00000000     BCP3 : A97ECB5C
BCP4 : 00000000     OSVer : 5_1_2600     SP : 1_0     Product : 256_1

My system restarts automatically and I have to put my laptop to sleep always. I tried all driver updates, BIOS updates and repairing the OS but to no avail. The OS is XP SP1.

Please help me fix this shutdown problem and of course this stop error on shutdown.
Question by:praveenz
    LVL 20

    Accepted Solution

    Check system event log and look system event 1001.
    Control Panel --> Adminstrative Tools -> Event Viewer --> System --> Record 1001
    Copy the content of all the record 1001 and paste them back here

    I also want  your software list
    Open System Information (MSINFO32.EXE) and navigate to Software > Program Group. Click anywhere in the right pane and then press CTRL-A and then CTRL-C. You have copied that data to the clipboard. Paste that data in a reply here.

    Author Comment

    Here is the contents of record 1001 -

    The computer has rebooted from a bugcheck.  The bugcheck was: 0x1000008e (0xc0000005, 0x00000000, 0xa96a6b5c, 0x00000000). A dump was saved in: C:\WINDOWS\Minidump\Mini112704-05.dmp.

    Here  is the program groups -

    Accessories      Default User:Accessories      Default User
    Accessories      All Users:Accessories      All Users
    Accessories      NT AUTHORITY\SYSTEM:Accessories      NT AUTHORITY\SYSTEM
    Accessories      SHAKTIMAA\Administrator:Accessories      SHAKTIMAA\Administrator
    Accessories\Accessibility      Default User:Accessories\Accessibility      Default User
    Accessories\Accessibility      All Users:Accessories\Accessibility      All Users
    Accessories\Accessibility      NT AUTHORITY\SYSTEM:Accessories\Accessibility      NT AUTHORITY\SYSTEM
    Accessories\Accessibility      SHAKTIMAA\Administrator:Accessories\Accessibility      SHAKTIMAA\Administrator
    Accessories\Communications      All Users:Accessories\Communications      All Users
    Accessories\Entertainment      Default User:Accessories\Entertainment      Default User
    Accessories\Entertainment      All Users:Accessories\Entertainment      All Users
    Accessories\Entertainment      NT AUTHORITY\SYSTEM:Accessories\Entertainment      NT AUTHORITY\SYSTEM
    Accessories\Entertainment      SHAKTIMAA\Administrator:Accessories\Entertainment      SHAKTIMAA\Administrator
    Accessories\Microsoft Interactive Training      All Users:Accessories\Microsoft Interactive Training      All Users
    Accessories\System Tools      All Users:Accessories\System Tools      All Users
    ActivCard      All Users:ActivCard      All Users
    ActivCard\ActivCard Gold      All Users:ActivCard\ActivCard Gold      All Users
    Administrative Tools      All Users:Administrative Tools      All Users
    Games      All Users:Games      All Users
    Hewlett-Packard      All Users:Hewlett-Packard      All Users
    Java Web Start      All Users:Java Web Start      All Users
    MUSICMATCH      All Users:MUSICMATCH      All Users
    Microsoft Office      All Users:Microsoft Office      All Users
    Microsoft Office Tools      All Users:Microsoft Office Tools      All Users
    Microsoft Office\Microsoft Office Tools      All Users:Microsoft Office\Microsoft Office Tools      All Users
    Microsoft Works      All Users:Microsoft Works      All Users
    Multimedia      All Users:Multimedia      All Users
    Multimedia\DVD Player      All Users:Multimedia\DVD Player      All Users
    Online Services      Default User:Online Services      Default User
    Online Services      All Users:Online Services      All Users
    Online Services      NT AUTHORITY\SYSTEM:Online Services      NT AUTHORITY\SYSTEM
    Online Services      SHAKTIMAA\Administrator:Online Services      SHAKTIMAA\Administrator
    Oracle - OraDb10g_home1      All Users:Oracle - OraDb10g_home1      All Users
    Oracle - OraDb10g_home1\Application Development      All Users:Oracle - OraDb10g_home1\Application Development      All Users
    Oracle - OraDb10g_home1\Configuration and Migration Tools      All Users:Oracle - OraDb10g_home1\Configuration and Migration Tools      All Users
    Oracle - OraDb10g_home1\Integrated Management Tools      All Users:Oracle - OraDb10g_home1\Integrated Management Tools      All Users
    Oracle - OraDb10g_home1\Oracle Installation Products      All Users:Oracle - OraDb10g_home1\Oracle Installation Products      All Users
    Picture Package      All Users:Picture Package      All Users
    Picture Package\Handycam Tools      All Users:Picture Package\Handycam Tools      All Users
    Picture Package\Picture Package Auto Slide      All Users:Picture Package\Picture Package Auto Slide      All Users
    Picture Package\Picture Package Auto Video      All Users:Picture Package\Picture Package Auto Video      All Users
    Picture Package\Picture Package CD Backup      All Users:Picture Package\Picture Package CD Backup      All Users
    Picture Package\Picture Package Menu      All Users:Picture Package\Picture Package Menu      All Users
    Picture Package\Picture Package VCD Maker      All Users:Picture Package\Picture Package VCD Maker      All Users
    Picture Package\Picture Package Viewer      All Users:Picture Package\Picture Package Viewer      All Users
    PrintMe Internet Printing      All Users:PrintMe Internet Printing      All Users
    Roxio Easy CD and DVD Creator 6      All Users:Roxio Easy CD and DVD Creator 6      All Users
    Startup      Default User:Startup      Default User
    Startup      All Users:Startup      All Users
    Startup      SHAKTIMAA\Administrator:Startup      SHAKTIMAA\Administrator
    Sygate Security Agent      All Users:Sygate Security Agent      All Users
    Symantec Client Security      All Users:Symantec Client Security      All Users
    Utilities      All Users:Utilities      All Users
    Utilities\One-Touch      All Users:Utilities\One-Touch      All Users
    WinZip      All Users:WinZip      All Users
    Yahoo! Messenger      All Users:Yahoo! Messenger      All Users Deluxe Games      All Deluxe Games      All Users Deluxe Games      SHAKTIMAA\ Deluxe Games      SHAKTIMAA\Administrator Deluxe Games\Collapse! Deluxe      SHAKTIMAA\ Deluxe Games\Collapse! Deluxe      SHAKTIMAA\Administrator Deluxe Games\Cubis Deluxe      All Deluxe Games\Cubis Deluxe      All Users Deluxe Games\Mah Jong Tiles Deluxe      SHAKTIMAA\ Deluxe Games\Mah Jong Tiles Deluxe      SHAKTIMAA\Administrator Deluxe Games\TextTwist Deluxe      SHAKTIMAA\ Deluxe Games\TextTwist Deluxe      SHAKTIMAA\Administrator Deluxe Games\Word Mojo Deluxe      All Deluxe Games\Word Mojo Deluxe      All Users
    LVL 20

    Expert Comment

    Although you have accepted my answer, I want to find out the culprit of your problem and it is the reason why I am here. Have you resolved your problem yet? From your latest information, I find your windows crashes at least 5 time on 27th November.   You only supply one system crash information which is insufficient to diagnostic the problem. If you supply all the system record 1001, I will find out the root cause of your problem.  Let me know if youn don't want to proceed any more.

    Author Comment

    Here you go -
    The computer has rebooted from a bugcheck.  The bugcheck was: 0x1000008e (0xc0000005, 0x00000000, 0xa982fb5c, 0x00000000). A dump was saved in: C:\WINDOWS\Minidump\Mini112704-04.dmp.

    The computer has rebooted from a bugcheck.  The bugcheck was: 0x1000008e (0xc0000005, 0x00000000, 0xa96f0b5c, 0x00000000). A dump was saved in: C:\WINDOWS\Minidump\Mini112704-03.dmp.

    The computer has rebooted from a bugcheck.  The bugcheck was: 0x1000008e (0xc0000005, 0x00000000, 0xa9238b5c, 0x00000000). A dump was saved in: C:\WINDOWS\Minidump\Mini112704-02.dmp.

    The computer has rebooted from a bugcheck.  The bugcheck was: 0x1000008e (0xc0000005, 0x00000000, 0xa97dcb5c, 0x00000000). A dump was saved in: C:\WINDOWS\Minidump\Mini112704-01.dmp.

    No the problem is not yet solved - I thought if I had to proceed with debugging I had to accept your answer so I clicked on accept - I am fine with your debugging though. Let me know what you can make out of the above 1001 events. Thanks.
    LVL 20

    Expert Comment

    All of your failing instruction address is 0x00000000 and it implies one of the register get the null value. Windows does not allow read and write to the first 64K (ie 0x00000000 to 0x0000FFFF). Hence windows crashes with 0xc0000005 (ie this is NT status code and it stands for access violation because of Windows low memory protection).

    There have two possibility that Windows get null pointer? Software logic error or faulty RAM. A device driver load a null vaule into a register and I have no idea which module as we don't  have sufficient information. It may be display card driver. BTW what display card that you are using.

    Another possibility is the faulty ram. Your ram gets intermitant problem and windows cannot fetch the correct information from the ram and load a null value. Consequently windows crashes when it refers the low memory address. If I were you, I will download memtest to test the memory.

    The faulty ram may be cache memory of CPU or mother board. If you don't find any error at memtest, try Prime 95 to test the CPU

    After you run memtest and prime 95 and no errors is found.  Attach the minidump to any webspace and I will study the dump and find out more diagnostic information.

    Author Comment

    display - Mine uses RADEON IGP 345 M. I would try the memtests and get back to you.
    LVL 20

    Expert Comment

    For problem isolation, it is worthwhile to upgrade ATI Radeon Display Card Driver. You can use add/remove to uninstall the new ATI display card driver.

    Hope it can help you

    Author Comment

    I tried the uninstall/install of the driver sometime back and ran into a wild goose chase for the correct driver for my PC and I have one right now and it does not pop up a ATI control panel not found upon computer restart. so I am of the opinion to stay put !!! the memtest did not reveal any errors - I am kinda surprised why you want me to go through the prime number search !!!! ???  Are you serious abt the prime 95 search ? how long would that take ? Thanks.
    LVL 20

    Expert Comment

    This utility is recommended by Microsoft Web Site to stress test CPU, memory and cache.  Prime 95 will display "possible hardware error" in the result files, if it finds an error.  I would stress test the windows for at least an hour.

    Author Comment

    Here is the dump check output -

    Loading dump file Mini112804-01.dmp
    ----- 32 bit Kernel Mini Dump Analysis

    MajorVersion        0000000f
    MinorVersion        00000a28
    DirectoryTableBase  061d4000
    PfnDataBase         81053000
    PsLoadedModuleList  8054d4b0
    PsActiveProcessHead 8054f4c8
    MachineImageType    0000014c
    NumberProcessors    00000001
    BugCheckCode        1000008e
    BugCheckParameter1  c0000005
    BugCheckParameter2  00000000
    BugCheckParameter3  a9697b5c
    BugCheckParameter4  00000000
    PaeEnabled          00000000
    KdDebuggerDataBlock 8053f460
    MiniDumpFields      00000dff

    ServicePackBuild      00000100
    SizeOfDump            00010000
    ValidOffset           0000fffc
    ContextOffset         00000320
    ExceptionOffset       000007d0
    MmOffset              00001068
    UnloadedDriversOffset 000010a0
    PrcbOffset            00001878
    ProcessOffset         000024c8
    ThreadOffset          00002720
    CallStackOffset       00002978
    SizeOfCallStack       00000430
    DriverListOffset      00003038
    DriverCount           00000092
    StringPoolOffset      00005b90
    StringPoolSize        00001438
    BrokenDriverOffset    00000000
    TriageOptions         00000041
    TopOfStack            a9697bd0
    DebuggerDataOffset    00002da8
    DebuggerDataSize      00000290
    DataBlocksOffset      00006fc8
    DataBlocksCount       00000005

    Windows XP Kernel Version 2600 (Service Pack 1) UP Free x86 compatible
    Kernel base = 0x804d4000 PsLoadedModuleList = 0x8054d4b0
    Debug session time: Sun Nov 28 11:42:32 2004
    System Uptime: 0 days 13:55:33
    start    end        module name
    804d4000 806c8e00   nt             Checksum: 001F904D  Timestamp: Thu Jun 17 12:
    21:58 2004 (40D1D336)

    Unloaded modules:
    a8861000 a8888000   kmixer.sys    Timestamp: unavailable (00000000)
    a8861000 a8888000   kmixer.sys    Timestamp: unavailable (00000000)
    a884b000 a8861000   hiber_atapi.    Timestamp: unavailable (00000000)
    a8928000 a894f000   kmixer.sys    Timestamp: unavailable (00000000)
    a8b2f000 a8b56000   kmixer.sys    Timestamp: unavailable (00000000)
    a8b43000 a8b6a000   kmixer.sys    Timestamp: unavailable (00000000)
    a8d22000 a8d49000   kmixer.sys    Timestamp: unavailable (00000000)
    a8b54000 a8b6a000   hiber_atapi.    Timestamp: unavailable (00000000)
    a96fb000 a9722000   kmixer.sys    Timestamp: unavailable (00000000)
    f7b9f000 f7ba0000   drmkaud.sys    Timestamp: unavailable (00000000)
    a9858000 a9865000   DMusic.sys    Timestamp: unavailable (00000000)
    a9868000 a9876000   swmidi.sys    Timestamp: unavailable (00000000)
    a9735000 a9758000   aec.sys     Timestamp: unavailable (00000000)
    f7af5000 f7af7000   splitter.sys    Timestamp: unavailable (00000000)
    f7aa7000 f7aa9000   wmiacpi.sys    Timestamp: unavailable (00000000)
    f772d000 f773d000   serial.sys    Timestamp: unavailable (00000000)
    f78d5000 f78da000   Cdaudio.SYS    Timestamp: unavailable (00000000)
    f7a0d000 f7a10000   Sfloppy.SYS    Timestamp: unavailable (00000000)

    Finished dump check

    Also I would try it out - prime 95 for an hour and let you know ...Thank you for your patience.
    LVL 20

    Expert Comment

    Since the failing instuction address is 0 and the information from the minidumps cannot determine the culprit. Most likely it is related to faulty ram, faulty cache at CPU or motherboard.
    LVL 20

    Expert Comment


    Author Comment

    Thank you for keeping on top of this. I ran the memtest and the prime 95 stress test ( 1 hr 10 mins) - both ran fine and reported no errors ! I am at my wit's end now.

    Author Comment

    I have downloaded the Windbg and am waiting as to what needs to be done now ?
    LVL 20

    Expert Comment

    Change the dump option to take full dump. If it crashes again, a full dump is taken. Use Windbg to process the dump.

    !analyze -v
    !process    (display the current process)
    kb             (display the stack trace)
    lm t n        (display the load module)

    Post the output here.

    Author Comment

    Traced it back to a smart card driver ! It shuts down okay now and starts too .... :-)

    Before I went to debug the dump - I repaired the OS - would that do any unwanted stuff ? I am concerned abt the hotfixes too - would I have to reapply if I have repaired the OS ! ?

    I am still getting out of this bitter experience - thanks a ton on the debug !

    My network connection with my SBC Yahoo DSL is still not okay !! :-(
    LVL 20

    Expert Comment

    Which is the name of your smart card driver? Which hotfixes do you want to apply?

    Author Comment

    Smart card is Activcard - any consequent installs of my smart card is getting me in the same problem - the 8E stop error !! Dunno what to do - I need the smart card to VPN into my network !! :-( any help ????
    LVL 20

    Expert Comment

    This is the software problem of ActivCard driver as their code set the null value and branch to address 0.  Send the minidump to ActivCard and ask for solution.

    Featured Post

    Free Trending Threat Insights Every Day

    Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

    Join & Write a Comment

    There are 2 things you must have in order to connect to the internet behind a router, The "Gateway IP" of the router, which is usually something like, I've seen routers with default values of:,,, …
    If your system is showing symptoms of browser hijacks or 'google search redirects' check out my other article ( first and run the tool TDSSKiller ( to get rid of the infection. Once done, and if the …
    Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…
    This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor ( If you're looking for how to monitor bandwidth using netflow or packet s…

    730 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now