Blue Screen of Death

From Free net encyclopedia

Template:Redirect

Image:Blue Screen Phone.jpg The Blue Screen of Death (sometimes called "bluescreen", "stop error" or just "BSoD") is a popular name for the screen displayed by Microsoft's Windows operating system when it cannot or is in danger of being unable to recover from a system error. There are two Windows error screens that are both referred to as the blue screen of death, with one (Windows NT 4/2000/XP) being significantly more serious than the other (Windows 9x).

The blue screen of death in one form or another has been present in all Windows operating systems since Windows version 3.1. It is related to the black screen of death in OS/2. In early builds of Windows Vista it was complemented with the red screen of death, used for boot loader errors.

The term blue screen of death was coined by Erik Noyes while he worked for Charles Schwab and Co., Inc.'s technical support for the Electronic Service Delivery division in early 1991. At the time, he and the ESD team were supporting Schwab's DOS program, Equalizer on a OS called Microsoft Windows 3.0. Running DOS programs in this new environemt was as challenging as one would expect - for the ESD Support Team as well as the thousands of customers who were also attempting run the DOS program in this Windows environment. .PIF files were a good solution to prevent the blue screen of death, but inevitably it would occur at the worst possible time, and a general term was needed to describe the symptom. Erik coined this phrase and shared it with customers and his co-workers. Soon, it became the standard term within Schwab and among Schwab customer who called in with the symptoms described in this article. Erik's gift for words also extends to songwriting...

Contents 1 Types of blue screens 1.1 Windows NT/2000/XP 1.2 ReactOS 1.3 Windows 9x/Me 1.4 Windows CE 2 Display 3 Red screen of death 4 Blue screens in the IT industry 5 Bug Check codes used on the Windows NT Blue Screen 6 Well-known references to the blue screen of death 7 Gallery 8 References 9 See also 10 External links

Types of blue screens

Windows NT/2000/XP

Image:Windows XP BSOD.png Image:Windows 2000 BSoD.png Image:Windows NT 3.5 BSoD.png In Windows NT, Windows 2000, and Windows XP, a blue screen of death occurs when the kernel or a driver running in kernel mode, encounters an error from which it cannot recover. This is usually caused by an illegal operation being performed. The only safe action the operating system can take in this situation is to restart the computer. As a result, data may be lost, as users are not given an opportunity to save data that has not yet been saved to the hard drive.

Blue screens are known as "Stop errors" in the Windows Resource Kit documentation. They are referred to as "bug checks" in the Windows Software development kit and Driver development kit documentation.

The text on the error screen contains the code of the error as well as its symbolic name (e.g. 0x0000001E, KMODE_EXCEPTION_NOT_HANDLED) along with four error-dependent values in parentheses that are there to help software engineers with fixing the problem that occurred. Depending on the error code, it may display the address where the problem occurred, along with the driver which is loaded at that address. Under Windows NT and 2000, the second and third sections of the screen contain information on all loaded drivers and a stack dump, respectively. The driver information is in three columns; the first lists the base address of the driver, the second lists the driver's creation date (as a Unix timestamp), and the third lists the name of the driver <ref>Template:Cite book</ref>..

By default, Windows will create a memory dump file when a blue screen error occurs. Depending on the OS version, there may be several formats this can be saved in, ranging from a 64 KB "minidump" to a "complete dump" which is effectively a copy of the entire contents of physical RAM. The resulting memory dump file may be debugged later, using a kernel debugger. A debugger is necessary to obtain a stack trace, and may be required to ascertain the true cause of the problem; as the information onscreen is limited and thus possibly misleading, it may hide the true source of the error.

Microsoft Windows can also be configured to send live debugging information to a kernel debugger running on a separate computer. (Windows XP also allows for kernel debugging from the machine that is running the OS.) If a blue screen error is encountered while a live kernel debugger is attached to the system, Windows will halt execution and cause the debugger to "break in", rather than displaying the BSoD. The debugger can then be used to examine the contents of memory and determine the source of the problem.

The Windows debugger is available as a free download from Microsoft.<ref>Template:Cite web</ref>

Windows includes a feature that can be used to manually cause a blue screen. To enable it, the user must add a value to the Windows registry. After that, a BSoD will appear when the user presses the SCROLL LOCK key twice while holding the right CTRL key.<ref>Template:Cite web</ref> This feature is primarily useful for obtaining a memory dump of the computer while it is in a given state. As such, it is generally used to aid in troubleshooting system hangs.

A BSoD can also be caused by a critical boot loader error, where the operating system is unable to access the boot partition due to incorrect storage drivers or similar problems. The error code in this situation is STOP 0x0000007B (INACCESSIBLE_BOOT_DEVICE). In such cases, there is no memory dump saved. Since the system is unable to boot in this situation, correction of the problem may require booting with the Microsoft Windows CD. After booting to the CD, it may be possible to correct the problem by performing a repair install or by using the Recovery Console (with CHKDSK).

ReactOS

ReactOS, an attempt at creating an open-source implementation of a Windows NT-compatible operating system, also features its own BSoD similar to the Windows NT one (see the gallery below).

Windows 9x/Me

Image:Windows 9X BSOD.png The blue screen of death also occurs in Microsoft's home desktop operating systems Windows 95, 98, and Me. Here it is less serious, but more common. In these operating systems, the BSoD is the main way for virtual device drivers to report errors to the user. It is internally referred to by the name of "_VWIN32_FaultPopup". A Windows 9x/Me BSoD gives the user the option to either restart or continue. However, VxDs do not display BSoDs frivolously—they usually indicate a problem which cannot be fixed without restarting the computer, and hence after a BSoD is displayed the system is usually unstable or unresponsive.

The most common reason for BSoD's is that problems occur with incompatible versions of DLLs. This cause is sometimes referred to as DLL hell. Windows loads these DLLs into memory when they are needed by application programs; if versions are changed, the next time an application loads the DLL it may be different from what the application expects. These incompatibilities increase over time as more new software is installed, and is one of the main reasons why a freshly-installed copy of Windows is more stable than an "old" one.

In Windows 95 and 98, a BSoD occurred when the system attempted to access the file "c:\con\con" on the hard drive. This was often inserted on websites to crash users' machines. Microsoft has released a patch for this.<ref>Template:Cite web</ref>

The BSoD can appear if a user ejects a removable medium while it is being read on 9x/ME. This is particularly common while using Microsoft Office, if a user simply wants to view a document, he might eject a floppy disk before exiting the program. Since Microsoft Office always creates a temporary file in the same directory, it will trigger a BSoD upon exiting because it will attempt to delete the file on the disk that is no longer in the drive.

This type of blue screen is no longer seen in Windows NT, 2000, and XP. In the case of these less serious software errors, the program may still crash, but it will not take down the entire operating system with it due to better memory management and decreased legacy support. In these systems, the "true" BSoD is seen only in cases where the entire operating system crashes.

Windows CE

Image:WCE stop message.png The simplest version of the blue screen occurs in Windows CE, but not in Windows CE for Pocket PC. The blue screen in Windows CE 3.0 is similar to the one in Windows 95 and 98.

Display

By default, the display is white (EGA color 0x0F; HTML color #FFFFFF) lettering on a blue (EGA color 0x01; HTML color #0000AA) background, with information about current memory values and register values. For visually impaired users, Microsoft has added a utility that allows the user to change a setting in system.ini that controls the colors that the BSoD code uses to any of the 16 EGA colors.

Windows 95, 98 and Me use 80x25 text mode. The font is identical to Fixedsys. The Windows NT BSoD uses 80x50 text mode. The screen resolution is 720x400. The XP BSoD uses font Lucida Console.

Red screen of death

Image:Longhorn RSoD.png

The Red Screen of Death (abbreviated RSoD, sometimes called "Red Screen of Doom") is a nickname for the error message which exists in some beta versions of Microsoft's upcoming operating system, Windows Vista. It was dropped in Build 5112 of Windows Vista.

The red screen of death appeared when boot loader errors occurred. Windows Vista continues to have blue screens for other types of errors.

The red screen of death also sometimes refers to fatal errors in recent versions of Lotus Notes. These errors are not full-screen like the Microsoft red or blue screens of death, but rather are bright red boxes with black borders. The RSoD uses 80×25 text mode, with a screen resolution of 640×400 and a font similar to Fixedsys.

Blue screens in the IT industry

System administrators often use "to bluescreen" or "to BSoD" as a verb, as in: "The server just bluescreened", "Oh, great, it's going to BSoD", or "Windows 2000 doesn't bluescreen as much as NT 4 did."

Embedded systems running Microsoft Windows NT Embedded and Windows XP Embedded have also been known to Bluescreen.<ref>Template:Cite web</ref> Typical examples are Internet payphones, automatic teller machines and information displays.

WinNuke can cause a BSoD on an unpatched Windows 95 system.

Bug Check codes used on the Windows NT Blue Screen

A complete listing of the bug check codes used by Windows (for example, Bug Check 0x1E: KMODE_EXCEPTION_NOT_HANDLED), as well as interpretations of their meanings, can be found in the help file installed with the Microsoft Debugging Tools for Windows.<ref>Template:Cite web</ref> These are listed under "Bug Check Code Reference" in the table of contents or may be found by searching for "Bug Check" in the index.

Well-known references to the blue screen of death

In perhaps the most famous BSoD event, when Bill Gates himself was unveiling the then new Windows 98 at COMDEX. The demo PC crashed with a BSoD when his assistant connected a scanner to the PC. (Video can be viewed here.) This event brought thunderous applause from the crowd and considerable embarrassment to Microsoft; although to be fair Windows 98 was still in a very early development stage at the time. Gates only limited himself to say "that must be why we are not shipping Windows 98 yet"

As the BSoD is often subject to jokes and gags, it was also "introduced" to other system platforms as part of screensavers.

Microsoft has also included a reference to the BSoD as an Easter egg in the Internet Explorer browser (versions 4 through 6). Typing "about:mozilla" in the address bar will result in a blank blue page being displayed. However, this has been removed with Service Pack 2 but it can still be shown by typing "res://mshtml.dll/about.moz" instead. The command is the standard way to bring up The Book of Mozilla, another Easter egg on the Netscape/Mozilla family of browsers.

Several online vendors sell blue T-shirts that re-create the BSoD, and BSoDs commonly appear in video games and webcomics.

In Advance Wars: Dual Strike, Black Hole CO Jugger speaks in very technical diction, and often says "blue screen of death."

One of the sanity effects of Eternal Darkness: Sanity's Requiem involves abruptly displaying a BSoD during a battle or tense scene. It appears for only a few seconds, before the screen flashes white, returning to the actual game.

In the Halo 2 multiplayer map Zanzibar, opening the gate from the control panel causes the panel to display a spoof blue screen.

In the game Startopia, workstations in the lab can sometimes be seen experiencing BSoD. (Causing the Turraken staff to bash the machines soundly.)