Re: STOP 0x0000001e after MS05-018 on Windows 2000

You'll need to contact Microsoft Product Support Services to obtain the free
hotfix.

--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

"VTSINC" wrote:
| Referring to:
|
| http://support.microsoft.com/default.aspx?scid=KB;EN-US;Q898114&;
|
| I see that a hotfix is available that might solve my problem. Does anyone
| have a link available to this hotfix?
| Regards,
| Mike
|
| You receive a "STOP 0x0000001E" error after you install security update
| MS05-018 on a Windows 2000-based computer
| View products that this article applies to.
| Article ID : 898114
| Last Review : January 11, 2006
| Revision : 3.1
| On This Page
| SYMPTOMS
| CAUSE
| RESOLUTION
| Hotfix information
| Prerequisites
| Restart requirement
| Hotfix replacement information
| File information
| STATUS
| MORE INFORMATION
| APPLIES TO
|
| SYMPTOMS
| After you install security update MS05-018 (KB890859) on a Microsoft
Windows
| 2000-based computer, you may experience any one of the following
symptoms: .
| The computer unexpectedly restarts.
| . You receive one of the following Stop error messages on a blue screen:
|
| Message 1
| A problem has been detected and Windows has been shut down to prevent
damage
| to your computer...
| Technical information:
|
| *** STOP: 0x0000001E (0xc0000005, 0x804b2185, 0x00000000, 0x000000b0)
| KMODE_EXCEPTION_NOT_HANDLED
| Message 2
| A problem has been detected and Windows has been shut down to prevent
damage
| to your computer...
| Technical information:
|
| *** STOP: 0x0000001E (0xc0000005, 0xdd4b2185, 0x00000000, 0x000000b0)
| KMODE_EXCEPTION_NOT_HANDLED
| . An error message that is similar to the following is logged in the
System
| event log:
| Date: date
| Source: System
| Error Time: time
| Category: (102)
| Type: Error
| Event ID: 1003
| User: N/A
| Computer: COMPUTER
| Description: Error code 0000001E, parameter1 c0000005, parameter2
804b2185,
| parameter3 00000000, parameter4 000000b0. For more information, see Help
and
| Support Center at http://go.microsoft.com/fwlink/events.asp. Data: 0000:
53
| 79 73 74 65 6d 20 45 System E 0008: 72 72 6f 72 20 20 45 72 rror Er 0010:
72
| 6f 72 20 63 6f 64 65 ror code 0018: 20 30 30 30 30 30 30 35 000001E 0020:
30
| 20 20 50 61 72 61 6d 0 Param 0028: 65 74 65 72 73 20 66 66 eters ff 0030:
66
| 66 66 66 64 31 2c
| Notes. The Stop error message varies depending on the configuration of the
| computer's system failure options. For more information about how to
| configure system failure options, click the following article number to
view
| the article in the Microsoft Knowledge Base:
| 307973 (http://support.microsoft.com/kb/307973/) How to configure system
| failure and recovery options in Windows
| . The four parameters that are listed in the Stop error message vary with
| the computer's configuration.
| . Not all "Stop 0x0000001E" errors are caused by the problem that is
| described in this article. For more information about how to troubleshoot
| "Stop 0x0000001E" errors, click the following article number to view the
| article in the Microsoft Knowledge Base:
| 264223 (http://support.microsoft.com/kb/264223/) How to troubleshoot "Stop
| 0x0000001E" with first parameter of 0xC0000044
|
| Back to the top
|
| CAUSE
| The Stop error occurs when the computer accesses a NULL DeviceObject
object
| in a volume parameter block. This volume parameter block access is caused
by
| a race condition. This race condition occurs when the computer mounts
volumes
| on removable media devices such as CD or DVD drives.
|
| This Stop error is more likely to occur in the following types of
| computers:. On a computer that is stressed
| . On a computer that uses multiple processors or hyper-threading
| . On a computer that mounts volumes frequently on removable media devices
|
| Back to the top
|
| RESOLUTION
| Hotfix information
| A supported hotfix is now available from Microsoft, but it is only
intended
| to correct the problem that this article describes. Apply it only to
systems
| that are experiencing this specific problem.
|
| To resolve this problem, contact Microsoft Product Support Services to
| obtain the hotfix. For a complete list of Microsoft Product Support
Services
| telephone numbers and information about support costs, visit the following
| Microsoft Web site:
| http://support.microsoft.com/contactus/?ws=support
| (http://support.microsoft.com/contactus/?ws=support)
| Note In special cases, charges that are ordinarily incurred for support
| calls may be canceled if a Microsoft Support Professional determines that
a
| specific update will resolve your problem. The usual support costs will
apply
| to additional support questions and issues that do not qualify for the
| specific update in question.
| Prerequisites
| You must have Windows 2000 Service Pack 3 (SP3) or Windows 2000 Service
Pack
| 4 (SP4) installed.
| Restart requirement
| You must restart the computer after you apply this hotfix.
| Hotfix replacement information
| This hotfix does not replace any other hotfixes.
| File information
| The English version of this hotfix has the file attributes (or later file
| attributes) that are listed in the following table. The dates and times
for
| these files are listed in Coordinated Universal Time (UTC). When you view
the
| file information, it is converted to local time. To find the difference
| between UTC and local time, use the Time Zone tab in the Date and Time
tool
| in Control Panel. Date Time Version Size File
name
| ----------------------------------------------------------
| 06-May-2005 11:45 5.0.2195.7045 1,714,240 Ntkrnlmp.exe
| 06-May-2005 11:45 5.0.2195.7045 1,713,280 Ntkrnlpa.exe
| 06-May-2005 11:45 5.0.2195.7045 1,735,488 Ntkrpamp.exe
| 06-May-2005 11:45 5.0.2195.7045 1,690,432 Ntoskrnl.exe
| Back to the top
|
| STATUS
| Microsoft has confirmed that this is a bug in the Microsoft products that
| are listed in the "Applies to" section.
| Back to the top
|
| MORE INFORMATION
| For more information, click the following article number to view the
article
| in the Microsoft Knowledge Base:
| 890859 (http://support.microsoft.com/kb/890859/) MS05-018: Vulnerabilities
| in Windows kernel could allow elevation of privilege and denial of service
| Back to the top
|
|
| I have a machine with a very intermittent problem in which it bluescreens
| with a
| KMODE_EXCEPTION_NOT_HANDLED (1e) error. I have not been able to determin
| what driver is causing the problem. There was a minor spyware infection
| which has apparently been resolved in that I am no longer seeing spyware
| symptoms.
|
| The machine bluescreens once or twice a day. I had it running memory
| diagnostics for several hours yesterday, and have also tested the hard
disk
| thoroughly but find no problems. No software or hardware changes have
taken
| place recently. If anyone can find anything suspicious in the following
| memory dump debug your comments would be greatly appreciated - thanks!
|
| Mike
|


.