SyntaxHighlighter

Wednesday, 17 August 2011

Deciphering Blue Screens

One of our customers called today with the infamous blue screen, actually she wasn't getting the blue screen, she was getting the "Windows just recovered from a serious error" screen which happens after Windows automatically reboots itself.

What you can do to troubleshoot this is check the event viewer (eventvwr) for system errors with ID 1001.  This will reveal something about the cause and regularity of the errors.  It is also worth seeing if any other errors occur just momentarily before the 1001 event.

Should you require more information then there is a great program called BlueScreenView, it is included with Windows 7 Professional, but you may be able to download it for other versions of Windows.  Using the Kaseya console I transferred the C:\Windows\Minidump folder to a temporary folder on my local machine and running this was immediately able to see the main suspects


Although the Stop Code was 0x10000008e, and searching Google suggested it was a graphics driver problem.  Using BlueScreenView seemed to suggest is was caused by some security software Trusteer Rapport.  Adding further weight to this theory, the Trusteer website even lists "blue screens" in their FAQ.

For further information check out the detailed response in the Microsoft Forums
Please contact The PC Support Group on +44 (0)845 2233116 if you would like us to resolve these blue screen problems for you.

No comments:

Post a Comment