Why does Windows 2 K/XP have a blue screen?

Why does Windows 2 K/XP have a blue screen?
The operating system of the NT Kernel uses a layered structure (layer also known as the Mode), which mainly includes the User Mode and the Kernel layer (Kernel ).

Mode), we can use the following image metaphor to understand the operating specifications of Windows and the causes of the blue screen.
Please refer to the following link for more information:
┃ Product manufacturing plant: entire computer (including operating systems, hardware and software)
Pilot Factory: kernel layer pilot
Production Group: user layer (software, drivers) Producer
Staff member: Dr. Watson doctor
Defender: KeDugCheck reporter
Please refer to the following link for more information:
At ordinary times, product manufacturing plants run in an orderly and efficient manner. Each production team works overtime to create products for various purposes.

Strict regulations, that is, no matter what assembly parts to use, must go through the factory leaders who directly control all parts (with a high level of license,

You can directly access the European hardware and memory) for approval before you can extract the corresponding parts from the warehouse, and the production team is only responsible for the production (only have

Low permissions, cannot directly access hardware and use memory ).
One day, the production team secretly ran to the warehouse to get an assembly part without the approval of the factory leader, but was immediately evaluated every year.

Dr. Watson, an advanced shift attendant, discovered this, So Dr. Watson understood and informed the factory leader that the work of the production team was immediately stopped.

In addition, a notice is also posted on the factory publicity Board: the XXX production team encountered an error. The factory leaders decided to immediately close and rectify the problem and generate notes.

For future effect.
However, the error of A production team does not seem to attract everyone's attention. One day, D production team broke into the warehouse and snatched assembly parts to prevent

The failure of parts resources caused more serious confusion. The factory leader immediately decided to stop the work of the entire plant and ordered the defender team to keep all growing small.

After the inspection, the team submitted a blue paper report for the factory leader.

The notification is divided into fault information, recommended operations, and debugging port information.
1. fault check information
* ** STOP 0x0000001E (0xC0000005, 0xFDE38AF9, 0x0000001, 0x7E8B0EB4)
KMODE_EXCEPTION_NOT_HANDLED ***
The first part of the error is the Stop Code, that is, STOP 0x0000001E, which is used to identify the type of the error that has occurred.

The second part is the four number sets enclosed in parentheses, which represent random parameters defined by developers (this parameter is not available to common users at all ).

Understanding: Only drivers or developers of Microsoft operating systems can understand this information.) The third part is the error name.

This information is mostly concise, but the downtime code can be used as a search item in the Microsoft Knowledge Base and its

Used in technical materials.
2. Recommended operations
The second part of the blue screen is the operation information recommended by the user. Sometimes, the recommended operation is only a general suggestion (for example, to the seller's website ).

Find BIOS updates). Sometimes, a prompt related to the current problem is displayed. Generally, the only suggestion is to restart the system.
3. the debug port tells the user whether the memory dump image has been written to the disk vendor. The memory dump image can be used to determine the nature of the problem.

Tell the user whether the debugging information is transmitted to another computer vendor and the port used to complete the communication. However, the information here is

For normal users, there is no meaning.
Sometimes, the security department can find out which production team the problem is. In the first part, it will clearly report the document which made the mistake, but often

Often, it can only check the approximate scope, but cannot clearly specify the problem. Because the factory is forced to stop completely, it only needs to start a new rectification and sometimes

The production team will realize the mistake and will not repeat it again. But sometimes it will still try to snatch parts, so the factory leaders have to repeat the shutdown

(The blue screen information cannot be started and displayed, or the blue screen is displayed again when the same operation is performed ).
Windows 2 K/XP has a lot of blue screen information and cannot be fully explained in an article. However, they are often caused by incompatibility

Software and drivers, problematic software, viruses, etc. Therefore, we first provide some common solutions, in the case of a blue screen Error

And should be excluded against these solutions first.
1. Restart
Sometimes only a program or driver makes a mistake at the moment. After the restart, they will change themselves. (Note: see 7. query the shutdown code at this time)
2. New hardware
First, check whether the new hardware is firmly inserted. The problem overlooked by many people may lead to many inexplicable faults.

Check that there is no problem. Unplug it, change the slot, and install the latest driver. At the same time, compare it with Microsoft's hardware compatibility.

Check whether the hardware is compatible with the operating system. If your hardware is not in the table, you can query the hardware vendor's website,

Or call them.
[Color]
Windows XP hardware compatibility list: http://support.microsoft.com/default.aspx? Scid = kb; zh-cn; 314062
Windows 2 k hardware compatible category: http://winqual.microsoft.com/download/display.asp?

FileName = hcl/Win2000HCL.txt
[/Color]
3. New drivers and services
If you have just installed a new driver for a hardware, or installed a software, and it has added the corresponding project to the System Service (for example: Kill

Virus software, CPU cooling software, firewall software, etc.), a blue screen fault occurs during restart or use. please uninstall or disable it in safe mode.

.
4. Check for viruses
For example, viruses such as shock waves and ripple waves sometimes cause Windows blue screens to crash, so virus detection and removal are essential.

The ghost software also triggers a blue screen, so it is best to use the relevant tools for scanning and checking.
5. Check BIOS and hardware compatibility
For newly installed computers that often encounter blue screen problems, check and upgrade the BIOS to the latest version, and disable memory related items,

For example: cache and ing. In addition, check your hardware against the Microsoft hardware compatibility list. Also, if the motherboard BIOS does not have

Large-capacity hard disks can also lead to blue screens, which need to be upgraded.
┌ ── ─
│ Tips: │
│ BIOS cache and ing items │
│ Video BIOS Shadowing (Video BIOS ing) │
│ Shadowing address ranges (ing address column) │
│ System BIOS Cacheable (System BIOS buffer) │
│ Video BIOS Cacheable (Video BIOS buffer) │
│ Video RAM Cacheable (Video memory buffer) │
└ ── ─
6. Check System Logs
Enter EventVwr. msc in the start --> menu, and press enter to display the "Event Viewer". Check the "System Logs" and "Applications ".

Indicates an error in the program log.
7. query the shutdown code
Write down the dense E text on the blue screen, and then go to other computers to access the Microsoft Help and Support website.

Http://support.microsoft.com, enter the stop code in search (Knowledge Base) in the upper left corner, if the search result does not

Select "English knowledge base" and search for the appropriate information. Generally, a useful solution is found here. In addition

In baidu, Google, and other search engines, the blue screen shutdown code or subsequent instructions are keywords for searching.

Obtained.
8. The last correct configuration
In general, the blue screen appears after the hardware driver is updated or the hardware is added and the driver is installed, then the Windows 2 K/XP provides"

The last correct configuration "is to solve the blue screen shortcut. restart the system. When the Start menu appears, press F8 to display advanced startup.

Select the option menu, and then select "Last correct configuration ".
9. Install the latest system patch and Service Pack
Some blue screens are caused by defects in Windows, which can be solved by installing the latest system patches and Service packs.
─ ── Done
│ 1 │
─ ── 0x0000000A: IRQL_NOT_LESS_OR_EQUAL
◆ Error Analysis: it is mainly caused by the problematic driver, defective or incompatible hardware and software.

In kernel mode, there is an Ethernet internal request level (IRQL) for access to memory addresses that are not authorized to access.
◇ Solution: Use solution 2, 3, 5, 8, and 9 in the preceding solution to try to eliminate this problem.
─ ── Done
│ 2 │
Dead-rows 0x00000012: TRAP_CAUSE_UNKNOWN
◆ Error Analysis: If this error message is returned, it is unfortunate that the analysis result of KeBudCheck is that the cause of the error is unknown.
◇ Solution: Since Microsoft is not able to help, you have to rely on yourself. Please think carefully about when this error occurred. The first time

What operations are performed on the system at the time of occurrence, and what operations are being performed at the time of occurrence. Find out the possible causes from the information and select the appropriate

Solution try to exclude.
─ ── Done
│ 3 │
─ ── 0x0000001A: MEMORY_MANAGEMENT
◆ Error Analysis: This memory management error is often caused by hardware, such as the newly installed hardware and memory problems.
◇ Solution: If it appears during Windows installation, it may be because your computer cannot reach the minimum memory and

Disk requirements.
─ ── Done
│ 4 │
─ ── 0x0000001E: KMODE_EXCEPTION_NOT_HANDLED
◆ Error Analysis: an invalid or unknown process command is detected in the Windows Kernel. The shutdown code is generally caused by the faulty memory or

Cause similar to 0x0000000A.
◇ Solution:
(1) hardware compatibility problems: Check whether all hardware is included in the list against the latest hardware compatibility list mentioned above.
(2) Problematic device drivers, system services, or memory conflicts and interruptions: if the driver name appears in the blue screen information,

Please try to disable or delete the driver in installation mode or fault recovery console, and disable all newly installed drivers and software. If not

During system startup, enter safe mode to rename or delete the files marked in the blue screen information.
(3) If the error message clearly states that Win32K. sys is likely to be caused by a third-party remote control software, it must be recovered from the fault.

The service of the software will be disabled in the console.
(4) The first restart after Windows is installed: The maximum suspicion may be caused by insufficient disk space or BIOS compatibility.
(5) If a software is disabled: the software may have design defects in this province, please upgrade or uninstall it.
─ ── Done
│ 5 │ 0x00000023: FAT_FILE_SYSTEM
─ ── Defaults 0x00000024: NTFS_FILE_SYSTEM
◆ Error Analysis: 0x00000023 usually occurs when reading and writing the system partition of the FAT16 or FAT32 file system, while 0x00000024 is

The NTFS. sys file has an error (the driver file is used to allow the system to read and write the disk of the NTFS file system). The two blue screens

The error may be caused by physical damage to the disk, or the packet loss (IRP) required by the interruption.