When Windows detects a error while in user mode, it shuts down the offending application and initiates Dr. Watson. Although it is unfortunate that the application failed, other applications and the operating system are protected and continue the operate normally.
When Windows detects an error in kernel mode, it stops everything to prevent further damage. This is much more serious because all applications stop. The Control Panel System properties has a Startup and Recovery dialog which allows you to specify options for a kernel mode system failure.
A kernel mode system failure will produce a STOP error message commonly known as the blue screen of death. The following are examples of the blue screen of death. The critical information to look for on the screen is the name of the program that caused of the failure. In the first example we see that it is wdmaud.sys and in the second example we see wxyz.sys. Once we know the module, we can determine who will provide the fix for this problem. In most cases, kernel mode errors come from Windows code and we look to Microsoft for hotfixes or service packs. In some cases it is a device driver vendor and we must get the fix from the companies that supply the device driver. Most companies maintain support web sites where fixed and improved drivers can be downloaded.
Stop Errors are caused by software running in kernel mode either
Most kernel mode software is part of Microsoft's Windows operating system but some device drivers come from other companies. In many cases, the stop error can only be fixed by a hotfix or service pack provided by Microsoft. In other cases, a new device driver will fix the problem. In these cases, knowing which organization will provide the solution is the important information. Knowing exactly what bug is encountered does not help us, because we are not able to fix the software.
In some cases, as specific hardware problem is identified.
In many other cases, it is a device driver problem and you need to do the following
Keyboard Exercise
Caution! This exercise will cause your system fail to a blue screen. Ensure that you have backup all of your data and you are prepared to reinstall Windows and all applications of your computer. Do not delete any registry entries other than those in CurrentControlSet, because this is the only section that can be repaired by using the Last Known Good Configuration.
Use REGEDIT and find the key in the current control set that corresponds to your disk controller. For computers with an IDE controller, it is at
When Windows detects an error in kernel mode, it stops everything to prevent further damage. This is much more serious because all applications stop. The Control Panel System properties has a Startup and Recovery dialog which allows you to specify options for a kernel mode system failure.
A kernel mode system failure will produce a STOP error message commonly known as the blue screen of death. The following are examples of the blue screen of death. The critical information to look for on the screen is the name of the program that caused of the failure. In the first example we see that it is wdmaud.sys and in the second example we see wxyz.sys. Once we know the module, we can determine who will provide the fix for this problem. In most cases, kernel mode errors come from Windows code and we look to Microsoft for hotfixes or service packs. In some cases it is a device driver vendor and we must get the fix from the companies that supply the device driver. Most companies maintain support web sites where fixed and improved drivers can be downloaded.
Stop Errors are caused by software running in kernel mode either
- encountering an software bug or
- encountering a hardware problem that cannot be resolved.
Most kernel mode software is part of Microsoft's Windows operating system but some device drivers come from other companies. In many cases, the stop error can only be fixed by a hotfix or service pack provided by Microsoft. In other cases, a new device driver will fix the problem. In these cases, knowing which organization will provide the solution is the important information. Knowing exactly what bug is encountered does not help us, because we are not able to fix the software.In some cases, as specific hardware problem is identified.
| Code | Text | Description |
| 0x0000007B | INACCESSIBLE_BOOT_DEVICE | Check hard disk hardware. During startup, %systemroot% became inaccessible |
| 0x0000002E | DATA_BUS_ERROR | Replace faulty memory if this is repeated. A parity error in the system memory. |
- Check that you have adequate disk space, especially for new installations
- Disable any newly installed drivers. You might also want to disable a service associated with the driver or any newly installed programs
- If the computer will not start normally, try starting it in Last Known Good Configuration or in safe mode, and then remove or disable newly added programs or drivers
- Ensure that you have the latest system BIOS
| Code | Text | Description |
| 0x0000000A | IRQ NOT LESS OR EQUAL | Drivers are using improper memory addresses. |
| 0x0000001E | KMODE_EXCEPTION_NOT_HANDLED | Disable any newly installed drivers. You might also want to disable a service associated with the driver or any newly installed programs |
| 0x00000050 | PAGE_FAULT_IN_NONPAGED_AREA | Requested data is not found in memory. This might be caused by a printer driver or remote access driver. |
| 0x00000024 | NTFS_FILE_SYSTEM | The hard disk is fragmented or there is excessive file I/O. This Stop error may also be cause by drive-mirroring or some antivirus software. |
| 0x0000007F | UNEXPECTED_KERNEL_MODE_TRAP | This is usually caused by a hardware failure. |
| 0x4C000221 | BAD_IMAGE_CHECKSUM | This message might be caused by a corrupted system file or driver or a hardware problem. |
| 0x4C00021A | FATAL_SYSTEM_ERROR | The Windows Logon Process system process terminated unexpectedly. |
| 0x00000077 | KERNEL_STACK_INPAGE_ERROR | Bad sectors on the hard disk, Defective or loose cabling, improper SCSI termination, or the controller not seeing the hard disk, Another device is causing a resource conflict with the storage controller, Failing RAM |
| 0x0000007A | KERNEL_DATA_INPAGE_ERROR | a bad sector in a paging file, a virus, a disk controller error, defective hardware, or failing RAM |
| 0x00000079 | MISMATCHED_HAL | the hardware abstraction layer (HAL) and the kernel or the computer type do not match. This error occurs when single-processor and multiprocessor configuration files are mixed on the same system. |
Keyboard ExerciseCaution! This exercise will cause your system fail to a blue screen. Ensure that you have backup all of your data and you are prepared to reinstall Windows and all applications of your computer. Do not delete any registry entries other than those in CurrentControlSet, because this is the only section that can be repaired by using the Last Known Good Configuration.Use REGEDIT and find the key in the current control set that corresponds to your disk controller. For computers with an IDE controller, it is at
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\atapi