SYSTEM_SCAN_AT_RAISED_IRQL_CAUGHT_IMPROPER_DRIVER_UNLOAD
Code: 0xd4 (212)
As HRESULT:- S: 0 (Success)
- C: 0 (Microsoft-defined)
- N: 0 (Not an NTSTATUS value)
- Facility: 0x000 (FACILITY_NULL: Default)
- Code: 0x00d4 (212)
- Sev: 0 (STATUS_SEVERITY_SUCCESS)
- C: 0 (Microsoft-defined)
- Facility: 0x000 (Default)
- Code: 0x00d4 (212)
Parameters
| Parameter | Description |
|---|---|
| 1 | Memory referenced |
| 2 | IRQL at time of reference |
| 3 | 0: Read 1: Write |
| 4 | Address that referenced memory |
Description
The SYSTEM_SCAN_AT_RAISED_IRQL_CAUGHT_IMPROPER_DRIVER_UNLOAD bug check has a value of 0x000000D4. This indicates that a driver did not cancel pending operations before unloading.
Important
This article is for programmers. If you're a customer who has received a blue screen error code while using your computer, see Troubleshoot blue screen errors.
Cause
This driver failed to cancel lookaside lists, DPCs, worker threads, or other such items before unload. Subsequently, the system attempted to access the driver's former location at a raised IRQL.
Resolution
To begin debugging, use a kernel debugger to get a stack trace: the !analyze debug extension displays information about the bug check and can be helpful in determining the root cause, then use the kb (Display Stack Backtrace) command to get a stack trace. If the driver that caused the error has been identified, activate Driver Verifier and attempt to replicate this bug.
For full details on Driver Verifier, see the Windows Driver Kit.
Article text from the Windows driver documentation (opens in a new tab), by Microsoft, under the CC BY 4.0 (opens in a new tab) licence.
Associated Modules
| Module | Code | Found in | Description |
|---|---|---|---|
| ESENT.dll | 0xd4 | 8.11011 | %1 (%2) %3A shadow copy backup is starting. |
| EventCreate.exe | 0xd4 | 78.11011 | %1 |
| KernelBase.dll | 0xd4 | 78.1 | The segment is locked and cannot be reallocated. |
| dsreg.dll | 0xd4 | 11 | Failed to read virtual desktop settings from registry. Error: %1 Registry key: %2 |
| kernel32.dll | 0xd4 | 78.11011 | The segment is locked and cannot be reallocated. |
| nslookup.exe | 0xd4 | 78.11011 | Conversion from IPv6 address to Reversename failed. |
| webservices.dll | 0xd4 | 78.11011 | There was an error receiving from the UDP socket. |
| wuaueng.dll | 0xd4 | 1011 | Revert Successful: Windows successfully reverted the following update: %1 |
| wuauengcore.dll | 0xd4 | 11 | Revert Successful: Windows successfully reverted the following update: %1 |
| 9 entries | |||