SYSTEM_THREAD_EXCEPTION_NOT_HANDLED
Code: 0x7e (126)
As HRESULT:- S: 0 (Success)
- C: 0 (Microsoft-defined)
- N: 0 (Not an NTSTATUS value)
- Facility: 0x000 (FACILITY_NULL: Default)
- Code: 0x007e (126)
- Sev: 0 (STATUS_SEVERITY_SUCCESS)
- C: 0 (Microsoft-defined)
- Facility: 0x000 (Default)
- Code: 0x007e (126)
Parameters
| Parameter | Description |
|---|---|
| 1 | The exception code that wasn't handled. |
| 2 | The address where the exception occurred. |
| 3 | The address of the exception record. |
| 4 | The address of the context record. |
Description
The SYSTEM_THREAD_EXCEPTION_NOT_HANDLED bug check has a value of 0x0000007E. This bug check indicates that a system thread generated an exception that the error handler didn't catch.
Important
This article is for programmers. If you're a customer who has received a blue screen error code while using your computer, see Troubleshoot blue screen errors.
Cause
This bug check indicates that a system thread generated an exception that the error handler didn't catch. To interpret it, you must identify which exception was generated.
Common exception codes include the following:
- 0x80000002: STATUS_DATATYPE_MISALIGNMENT indicates an unaligned data reference was encountered.
- 0x80000003: STATUS_BREAKPOINT indicates a breakpoint or ASSERT was encountered when no kernel debugger was attached to the system.
- 0xC0000005: STATUS_ACCESS_VIOLATION indicates a memory access violation occurred.
For a complete list of exception codes, see NTSTATUS values. The exception codes are defined in ntstatus.h, a header file provided by the Windows Driver Kit. For more information, see Header files in the Windows Driver Kit.
Resolution
If you plan to debug this problem, the exception address (parameter 2) should identify the driver or function that caused this problem.
If a driver is listed by name within the bug check message, disable or remove that driver. If the issue is narrowed down to a single driver, set breakpoints and single-step forward in code to locate the failure and gain insight into events leading up to the crash.
The !analyze debugger extension displays information about the bug check and can be helpful in determining the root cause.
More analysis can be done by using the !thread extension, and the dds, dps, and dqs (display words and symbols) commands. This technique is reasonable when WinDbg reports "Probably caused by : ntkrnlmp.exe."
If exception code 0x80000003 occurs, a hard-coded breakpoint or assertion was hit, but the system was started with the /NODEBUG switch. This problem shouldn't occur frequently. If it occurs repeatedly, make sure that a kernel debugger is connected and the system is started with the /DEBUG switch.
If exception code 0x80000002 occurs, the trap frame supplies additional information.
For more information about WinDbg and !analyze, see:
- Analyze crash dump files by using WinDbg
- Analyzing a kernel-mode dump file with WinDbg
- Using the !analyze extension and !analyze
Remarks
If you're not equipped to use the Windows debugger to work on this problem, you should use some basic troubleshooting techniques:
- Check the System Log in Event Viewer for more error messages that might help identify the device or driver that is causing bug check 0x7E.
- If a driver is identified in the bug check message, disable the driver or check with the manufacturer for driver updates.
- Check with your hardware vendor for any ACPI or other firmware updates. Hardware issues, such as system incompatibilities, memory conflicts, and IRQ conflicts can also generate this error.
- Disable memory caching/shadowing of the BIOS to try to resolve the error. You can also run hardware diagnostics that the system manufacturer supplies.
- Confirm that any new hardware that is installed is compatible with the installed version of Windows. For example, you can get information about required hardware at Windows 10 Specifications.
For more general troubleshooting information, see Analyze Bug Check Blue Screen Data.
Article text from the Windows driver documentation (opens in a new tab), by Microsoft, under the CC BY 4.0 (opens in a new tab) licence.
Associated Modules
| Module | Code | Found in | Description |
|---|---|---|---|
| EventCreate.exe | 0x7e | 78.11011 | %1 |
| KernelBase.dll | 0x7e | 78.1 | The specified module could not be found. |
| kernel32.dll | 0x7e | 78.11011 | The specified module could not be found. |
| nslookup.exe | 0x7e | 78.11011 | (name truncated?) |
| sc.exe | 0x7e | 78.11011 | SDDL right Right value ---------- ----------- GA - GENERIC_ALL GR - GENERIC_READ GW - GENERIC_WRITE GX - GENERIC_EXECUTE RC - READ_CONTROL SD - DELETE WD - WRITE_DAC WO - WRITE_OWNER RP - SERVICE_START WP - SERVICE_STOP CC - SERVICE_QUERY_CONFIG DC - SERVICE_CHANGE_CONFIG LC - SERVICE_QUERY_STATUS SW - SERVICE_ENUMERATE_DEPENDENTS LO - SERVICE_INTERROGATE DT - SERVICE_PAUSE_CONTINUE CR - SERVICE_USER_DEFINED_CONTROL |
| webservices.dll | 0x7e | 78.11011 | The SOAPAction HTTP header appeared more than once in the request. |
| win32k.sys | 0x7e | 78.1 | SizeAll |
| win32kbase.sys | 0x7e | 1011 | SizeAll |
| 8 entries | |||