Click to Rate and Give Feedback
MSDN
MSDN Library
Windows Driver Kit
Bug Check Codes
 Bug Check 0x8E: KERNEL_MODE_EXCEPTI...

  Switch on low bandwidth view
Windows Driver Kit: Driver Development Tools
Bug Check 0x8E: KERNEL_MODE_EXCEPTION_NOT_HANDLED

The KERNEL_MODE_EXCEPTION_NOT_HANDLED bug check has a value of 0x0000008E. This bug check indicates that a kernel-mode application generated an exception that the error handler did not catch.

Parameters

The following parameters appear on the blue screen.

ParameterDescription
1The exception code that was not handled
2The address where the exception occurred
3The trap frame
4Reserved

Cause

The KERNEL_MODE_EXCEPTION_NOT_HANDLED bug check is a very common bug check. To interpret it, you must identify which exception was generated.

Common exception codes include the following:

  • 0x80000002: STATUS_DATATYPE_MISALIGNMENT indicates that an unaligned data reference was encountered.
  • 0x80000003: STATUS_BREAKPOINT indicates that a breakpoint or ASSERT was encountered when no kernel debugger was attached to the system.
  • 0xC0000005: STATUS_ACCESS_VIOLATION indicates that a memory access violation occurred.

For a complete list of exception codes, see the Ntstatus.h file that is located in the inc directory of the Microsoft Windows Driver Kit (WDK).

Resolving the Problem

If you are not equipped to debug this problem, you should use some basic troubleshooting techniques:

  • Make sure you have enough disk space.
  • If a driver is identified in the bug check message, disable the driver or check with the manufacturer for driver updates.
  • Try changing video adapters.
  • Check with your hardware vendor for any BIOS updates.
  • Disable BIOS memory options such as caching or shadowing.

If you plan to debug this problem, you might find it difficult to obtain a stack trace. Parameter 2 (the exception address) should identify the driver or function that caused this problem.

If exception code 0x80000003 occurs, a hard-coded breakpoint or assertion was hit, but the computer was started with the /NODEBUG switch. This problem should rarely occur. If it occurs repeatedly, make sure that a kernel debugger is connected and that the computer is started with the /DEBUG switch.

If exception code 0x80000002 occurs, the trap frame supplies additional information.

If you do not know the specific cause of the exception, consider the following items:

  • Hardware incompatibility. Make sure that any new hardware installed is listed in the Microsoft Windows Marketplace Tested Products List.
  • Faulty device driver or system service. A faulty device driver or system service might be responsible for this error. Hardware issues, such as BIOS incompatibilities, memory conflicts, and IRQ conflicts can also generate this error.

If the bug check message lists a driver by name , disable or remove that driver. Also, disable or remove any drivers or services that were recently added. If the error occurs during the startup sequence and the system partition is formatted with NTFS file system, you might be able to use Safe Mode to rename or delete the faulty driver. If the driver is used as part of the system startup process in Safe Mode, you have to start the computer by using the Recovery Console to access the file.

If the problem is associated with Win32k.sys, the source of the error might be a third-party remote control program. If such software is installed, you can remove the service by starting the system by using the Recovery Console and then deleting the offending system service file.

Check the System Log in Event Viewer for additional error messages that might help identify the device or driver that is causing bug check 0x1E. You can disable memory caching of the BIOS to try to resolve the error. You should also run hardware diagnostics, especially the memory scanner, that the system manufacturer supplies. For more information about these procedures, see the owner's manual for your computer.

The error that generates this message can occur after the first restart during Windows Setup, or after Setup is finished. A possible cause of the error is lack of disk space for installation and system BIOS incompatibilities. For problems during Windows installation that are associated with lack of disk space, reduce the number of files on the target hard disk drive. Check for and delete any temporary files that you do not have to have, Internet cache files, application backup files, and .chk files that contain saved file fragments from disk scans. You can also use another hard disk drive with more free space for the installation.

You can resolve BIOS problems by upgrading the system BIOS version.


Send feedback on this topic
Built on May 20, 2009
Community Content   What is Community Content?
Add new content RSS  Annotations
Vista SP1 fails to install with BCCode: 1000008e      nicholse   |   Edit   |   Show History
BCCode: 1000008e KERNEL_MODE_EXCEPTION_NOT_HANDLED
BCP1: C0000005 STATUS_ACCESS_VIOLATION
BCP2: 8243A7AD How do I find what driver uses this memory space?

Every time I install SP1 it reboots, loads drivers (really slowly), tries to start the GUI after loading crcdisk.sys and reboots.

Then I have to restore to a point before SP1. This whole process takes a few hours. I want to find the driver that is causing this and update it or disable it.

Vista SP1 fails to install with BCCode: 1000008e      nicholse   |   Edit   |   Show History
Resolved!

Start reading this from the bottom up. Quoted from Discussions in Debugging Tools for Windows http://www.microsoft.com/communities/newsgroups/en-us/default.aspx?dg=microsoft.public.windbg&lang=en&cr=US&mid=93c86571-d341-4423-b411-240b6c66d1e5
The options I chose for the boot process were what drastically slowed the boot time (2m30s). And it was indeed the cherry driver that was crashing windows. I did not need that driver anymore. I uninstalled it and applied SP1. Things are working great here now. Thanks for your lesson in windbg!

The other postings regarding this, how do I refer them to this thread? There was one in Windows Driver Development and one in General Windows Vista Development Issues
RSS. There are also two open support requests to the free Vista SP1 support. They dont make it easy to communicate with them. Guess I'll just post this entire block there.

"Pavel A." wrote:

> nicholse wrote:
> > What is the best way for me to post the windbg output here for others? Its
> > quite long because of symbol errors. Do I want "Windows Vista RTM x86 retail
> > symbols, all languages (File size: 250 MB - Most customers want this
> > package.)" Or should I just remove the driver "Probably caused by :
> > Ch2kPS2.sys ( Ch2kPS2+b6fc )"
>
> Well done, congrats!
> No need to download any symbols manually - just set the
> windbg symbol path per the windbg help file.
> The simplest way: type from the windbg command prompt:
>
> !symfix c:\temp\debugsymbols (substitute this to your own location)
>
> and it will get the right Vista stuff from the MS site.
>
> Of course it won't find symbols for custom 3rd party
> drivers, like your Ch2kPS2.sys - which is...
> O Great Google! it worked again!
>
> Cherry PS2 driver for Win2k - Cherry GmbH Ch2kPS2 - Cherry GmbH
>
> Now you can check for updated driver (win2k seems a bit old for Vista)
> or call their tech support.
> They would be excited to know you have a fresh dump for them :)
>
>
> Regards,
> --PA
> *
>
> > "Pavel A." wrote:
> >
> >> nicholse wrote:
> >>> BCCode: 1000008e KERNEL_MODE_EXCEPTION_NOT_HANDLED
> >>> BCP1: C0000005 STATUS_ACCESS_VIOLATION
> >>> BCP2: 8243A7AD
> >>> How do I find what driver uses this memory space?
> >>>
> >>> Every time I install SP1 it reboots, loads drivers (really slowly), tries to
> >>> start the GUI after loading crcdisk.sys and reboots.
> >>>
> >>> Then I have to restore to a point before SP1. This whole process takes a few
> >>> hours. I want to find the driver that is causing this and update it or
> >>> disable it.
> >>>
> >>> I figure the developers here would be able to help me find the driver in
> >>> this memory space.
> >>
> >> I won't - but maybe you can help yourself.
> >>
> >> a. Set up your system to produce a Kernel dump
> >> b. Download and install windbg on some other PC:
> >> http://msdl.microsoft.com/download/symbols/debuggers/dbg_x86_6.9.3.113.msi
> >> ( note: this isn't the last version, _by intention_)
> >> It doesn't interfere with the system, and you can remove it later.
> >>
> >> Since Windbg needs some debug info from Microsoft website,
> >> that machine must have internet connection.
> >>
> >> c. When your Vista crashes (or "restarts" as you call it), copy the
> >> %windir%\MEMORY.DMP file to the machine with Windbg.
> >> Read windbg help how to do basic analysis of kernel dump.
> >> Basically, you do some more setup steps, then type "!analyze -v"
> >> in windbg command window.
> >> The !analyze command is a small expert system built into windbg.
> >> Quite often it can point to the culprit automagically.
> >> Otherwise, it's text output is useful to proceed further.
> >>
> >> Good luck,
> >> --PA
> >>
> >>
> >>> A screenshot of the device manager with devices listed by memory address.
> >>>
> >>> www.havealoha.com/memory.jpg
> >>>
> >>> Aloha
> >>> Eric
> >>
>
0x8e with 04      flushie86   |   Edit   |   Show History
I get the 0x8e when the system has reached the 2 week old point, then it begins to happen more frequent. Each time it is the same 0x8e 004. This system is just like approximately 100 other systems built from a company image. The other systems have no issues of this kind. This system has had the HDD, RAM, MOBO, PSU & CPU replaced and I still get this error. A point in the right direction would help greatly.
Tags What's this?: Add a tag
Flag as ContentBug
Processing
© 2009 Microsoft Corporation. All rights reserved. Terms of Use  |  Trademarks  |  Privacy Statement
Page view tracker