"0x000000C4" Stop error after you restart a Windows 7-based, Windows 8-based, Windows Server 2008 R2-based or Windows Server 2012-based computer that has the Driver Verifier tool enabled

Applies To
Windows 8 Windows 8 Enterprise Windows 8 Pro Windows Server 2012 Datacenter Windows Server 2012 Datacenter Windows Server 2012 Essentials Windows Server 2012 Foundation Windows Server 2012 Foundation Windows Server 2012 Standard Windows Server 2012 Standard Windows 7 Enterprise Windows 7 Professional Windows 7 Ultimate Windows 7 Home Basic Windows 7 Home Premium Windows Server 2008 R2 Datacenter Windows Server 2008 R2 Enterprise Windows Server 2008 R2 Standard

Symptoms

Assume that you enable the Driver Verifier tool on a computer that uses certain processors. The computer is running one of the following operating systems:

  • Windows 7
  • Windows Server 2008 R2
  • Windows 8
  • Windows Server 2012

When you restart the computer, the computer crashes before the Desktop is displayed. Additionally, you receive a Stop error message that resembles the following:

Note

STOP: 0x000000C4 (parameter1, parameter2, parameter3, parameter4)

Notes

  • This Stop error describes a DRIVER_VERIFIER_DETECTED_VIOLATION issue.
  • The parameters in this Stop error message vary, depending on the configuration of the computer.
  • Not all "Stop 0x000000C4" errors are caused by this issue.

Cause

This issue occurs because Driver Verifier incorrectly detects that the interrupt service routine (ISR) for the driver has corrupted the extended thread context. Driver Verifier captures XSAVE areas before and after an ISR is called, and compares the values to verify that the context is not corrupted by the ISR. However, the areas differ in the feature mask in some cases. Then, Diver Verifier incorrectly flags the change as a violation. Therefore, the computer crashes.

Resolution

Hotfix information

A supported hotfix is available from Microsoft. However, this hotfix is intended to correct only the problem that is described in this article. Apply this hotfix only to systems that are experiencing this specific problem.

If the hotfix is available for download, there is a "Hotfix Download Available" section at the top of this Knowledge Base article. If this section does not appear, submit a request to Microsoft Customer Service and Support to obtain the hotfix.

Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, visit the following Microsoft website:

http:⁠//support.microsoft.com/contactus/?ws=support Note The "Hotfix Download Available" form displays the languages for which the hotfix is available. If you do not see your language, it is because a hotfix is not available for that language.

Prerequisites

To apply this hotfix, you must be running one of the following operating systems:

  • Windows 7 Service Pack 1 (SP1)
  • Windows Server 2008 R2 SP1
  • Windows 8
  • Windows Server 2012

For more information about how to obtain a Windows 7 or a Windows Server 2008 R2 service pack, click the following article number to view the article in the Microsoft Knowledge Base:

976932 Information about Service Pack 1 for Windows 7 and for Windows Server 2008 R2

Registry information

To use the hotfix in this package, you do not have to make any changes to the registry.

Restart requirement

You must restart the computer after you apply this hotfix.

Hotfix replacement information

This hotfix does not replace a previously released hotfix.

File information

The global version of this hotfix installs files that have the attributes that are listed in the following tables. The dates and the times for these files are listed in Coordinated Universal Time (UTC). The dates and the times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and the times may change when you perform certain operations on the files.

Windows 7 and Windows Server 2008 R2 file information notes
Important Windows 7 hotfixes and Windows Server 2008 R2 hotfixes are included in the same packages. However, hotfixes on the Hotfix Request page are listed under both operating systems. To request the hotfix package that applies to one or both operating systems, select the hotfix that is listed under "Windows 7/Windows Server 2008 R2" on the page. Always refer to the "Applies To" section in articles to determine the actual operating system that each hotfix applies to.

  • The files that apply to a specific product, SR_Level (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table.

    Version Product SR_Level Service branch
    6.1.760
    1.
    18xxx
    Windows 7 and Windows Server 2008 R2 SP1 GDR
    6.1.760
    1.
    22xxx
    Windows 7 and Windows Server 2008 R2 SP1 LDR
  • GDR service branches contain only those fixes that are widely released to address widespread, extremely important issues. LDR service branches contain hotfixes in addition to widely released fixes.

  • The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are listed separately in the "Additional file information for Windows Server 2008 R2 and for Windows 7" section. MUM and MANIFEST files, and the associated security catalog (.cat) files, are extremely important to maintain the state of the updated components. The security catalog files, for which the attributes are not listed, are signed with a Microsoft digital signature.

For all supported x86-based versions of Windows 7

File name File version File size Date Time Platform
Appid-ppdlic.xrm-ms Not Applicable 3,013 19-Mar-2013 04:55 Not Applicable
Appid.sys 6.1.7601.22280 50,176 19-Mar-2013 03:09 x86
Appidapi.dll 6.1.7601.22280 50,688 19-Mar-2013 04:30 x86
Appidcertstorecheck.exe 6.1.7601.22280 16,896 19-Mar-2013 03:09 x86
Appidpolicyconverter.exe 6.1.7601.22280 97,792 19-Mar-2013 03:09 x86
Appidsvc.dll 6.1.7601.22280 29,696 19-Mar-2013 03:09 x86
Csrsrv.dll 6.1.7601.18113 38,912 19-Mar-2013 04:48 x86
Csrsrv.dll 6.1.7601.22280 38,912 19-Mar-2013 04:31 x86
Ntkrnlpa.exe 6.1.7601.18113 3,968,856 19-Mar-2013 05:04 Not Applicable
Ntoskrnl.exe 6.1.7601.18113 3,913,560 19-Mar-2013 05:04 Not Applicable
Ntkrnlpa.exe 6.1.7601.22280 3,972,440 19-Mar-2013 04:41 Not Applicable
Ntoskrnl.exe 6.1.7601.22280 3,916,632 19-Mar-2013 04:41 Not Applicable
Smss.exe 6.1.7601.18113 69,632 19-Mar-2013 02:49 x86
Smss.exe 6.1.7601.22280 69,632 19-Mar-2013 02:43 x86
Smss.exe 6.1.7601.18113 69,632 19-Mar-2013 02:49 x86
Smss.exe 6.1.7601.22280 69,632 19-Mar-2013 02:43 x86

For all supported x64-based versions of Windows 7 and of Windows Server 2008 R2

File name File version File size Date Time Platform
Appid-ppdlic.xrm-ms Not Applicable 3,013 19-Mar-2013 05:41 Not Applicable
Appid.sys 6.1.7601.22280 61,440 19-Mar-2013 03:37 x64
Appidapi.dll 6.1.7601.22280 58,368 19-Mar-2013 05:16 x64
Appidcertstorecheck.exe 6.1.7601.22280 17,920 19-Mar-2013 03:37 x64
Appidpolicyconverter.exe 6.1.7601.22280 148,480 19-Mar-2013 03:37 x64
Appidsvc.dll 6.1.7601.22280 34,304 19-Mar-2013 05:16 x64
Csrsrv.dll 6.1.7601.18113 43,520 19-Mar-2013 05:46 x64
Csrsrv.dll 6.1.7601.22280 43,520 19-Mar-2013 05:17 x64
Ntoskrnl.exe 6.1.7601.18113 5,550,424 19-Mar-2013 06:04 x64
Ntoskrnl.exe 6.1.7601.22280 5,553,496 19-Mar-2013 05:25 x64
Smss.exe 6.1.7601.18113 112,640 19-Mar-2013 03:06 x64
Smss.exe 6.1.7601.22280 112,640 19-Mar-2013 02:57 x64
Smss.exe 6.1.7601.18113 112,640 19-Mar-2013 03:06 x64
Smss.exe 6.1.7601.22280 112,640 19-Mar-2013 02:57 x64
Appidapi.dll 6.1.7601.22280 50,688 19-Mar-2013 04:30 x86
Apisetschema.dll 6.1.7601.18113 6,656 19-Mar-2013 04:47 x86
Apisetschema.dll 6.1.7601.22280 6,656 19-Mar-2013 04:30 x86
Apisetschema.dll 6.1.7601.18113 6,656 19-Mar-2013 04:47 x86
Apisetschema.dll 6.1.7601.22280 6,656 19-Mar-2013 04:30 x86
Ntkrnlpa.exe 6.1.7601.18113 3,968,856 19-Mar-2013 05:04 Not Applicable
Ntoskrnl.exe 6.1.7601.18113 3,913,560 19-Mar-2013 05:04 Not Applicable
Ntkrnlpa.exe 6.1.7601.22280 3,972,440 19-Mar-2013 04:41 Not Applicable
Ntoskrnl.exe 6.1.7601.22280 3,916,632 19-Mar-2013 04:41 Not Applicable

Windows 8 and Windows Server 2012 file information notesImportant Windows 8 hotfixes and Windows Server 2012 hotfixes are included in the same packages. However, only "Windows 8" is listed on the Hotfix Request page. To request the hotfix package that applies to one or both operating systems, select the hotfix that is listed under "Windows 8" on the page. Always refer to the "Applies To" section in articles to determine the actual operating system that each hotfix applies to.

  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:

    Version Product Milestone Service branch
    6.2.920 0.16 xxx Windows 8 and Windows Server 2012 RTM GDR
    6.2.920 0.20 xxx Windows 8 and Windows Server 2012 RTM LDR
  • GDR service branches contain only those fixes that are widely released to address widespread, extremely important issues. LDR service branches contain hotfixes in addition to widely released fixes.

  • The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are listed separately in the "Additional file information for Windows 8 and Windows Server 2012" section. MUM and MANIFEST files, and the associated security catalog (.cat) files, are extremely important to maintain the state of the updated components. The security catalog files, for which the attributes are not listed, are signed with a Microsoft digital signature.

For all supported x86-based versions of Windows 8

File name File version File size Date Time Platform
Ntoskrnl.exe 6.2.9200.16548 5,577,448 02-Mar-2013 09:06 Not Applicable
Ntoskrnl.exe 6.2.9200.20652 5,558,504 02-Mar-2013 09:26 Not Applicable

For all supported x64-based versions of Windows 8 and of Windows Server 2012

File name File version File size Date Time Platform
Ntoskrnl.exe 6.2.9200.16548 6,991,592 02-Mar-2013 10:39 x64
Ntoskrnl.exe 6.2.9200.20652 6,963,432 02-Mar-2013 10:48 x64

      

      

Status

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

More Information

For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base:

824684 Description of the standard terminology that is used to describe Microsoft software updates The third-party products that this article discusses are manufactured by companies that are independent of Microsoft. Microsoft makes no warranty, implied or otherwise, about the performance or reliability of these products.

Additional file information

Additional file information for Windows Vista and for Windows Server 2008

Additional files for all supported x86-based versions of Windows Vista and of Windows Server 2008

File name Update-bf.mum
File version Not Applicable
File size 2,285
Date (UTC) 19-Mar-2013
Time (UTC) 11:08
Platform Not Applicable
File name Update.mum
File version Not Applicable
File size 2,331
Date (UTC) 19-Mar-2013
Time (UTC) 11:07
Platform Not Applicable
File name X86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22280_none_598d480629c3881b.manifest
File version Not Applicable
File size 15,313
Date (UTC) 19-Mar-2013
Time (UTC) 05:03
Platform Not Applicable
File name X86_microsoft-windows-csrsrv_31bf3856ad364e35_6.1.7601.18113_none_cb8d824703a0c682.manifest
File version Not Applicable
File size 2,513
Date (UTC) 19-Mar-2013
Time (UTC) 05:33
Platform Not Applicable
File name X86_microsoft-windows-csrsrv_31bf3856ad364e35_6.1.7601.22280_none_cbc86ec01cf9ddde.manifest
File version Not Applicable
File size 2,513
Date (UTC) 19-Mar-2013
Time (UTC) 05:11
Platform Not Applicable
File name X86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.18113_none_6e36ace212663721.manifest
File version Not Applicable
File size 16,151
Date (UTC) 19-Mar-2013
Time (UTC) 05:34
Platform Not Applicable
File name X86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.22280_none_6e71995b2bbf4e7d.manifest
File version Not Applicable
File size 16,151
Date (UTC) 19-Mar-2013
Time (UTC) 05:12
Platform Not Applicable
File name X86_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.18113_none_ae40f33e7774c473.manifest
File version Not Applicable
File size 27,700
Date (UTC) 19-Mar-2013
Time (UTC) 11:10
Platform Not Applicable
File name X86_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.22280_none_ae7bdfb790cddbcf.manifest
File version Not Applicable
File size 27,700
Date (UTC) 19-Mar-2013
Time (UTC) 11:10
Platform Not Applicable
File name X86_microsoft-windows-smss_31bf3856ad364e35_7.1.7601.18113_none_9fb16f84025b6d42.manifest
File version Not Applicable
File size 27,734
Date (UTC) 19-Mar-2013
Time (UTC) 11:10
Platform Not Applicable
File name X86_microsoft-windows-smss_31bf3856ad364e35_7.1.7601.22280_none_9fec5bfd1bb4849e.manifest
File version Not Applicable
File size 27,734
Date (UTC) 19-Mar-2013
Time (UTC) 11:10
Platform Not Applicable

Additional files for all supported x64-based versions of Windows Vista and of Windows Server 2008

File name Amd64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22280_none_b5abe389e220f951.manifest
File version Not Applicable
File size 15,317
Date (UTC) 19-Mar-2013
Time (UTC) 05:49
Platform Not Applicable
File name Amd64_microsoft-windows-csrsrv_31bf3856ad364e35_6.1.7601.18113_none_27ac1dcabbfe37b8.manifest
File version Not Applicable
File size 2,515
Date (UTC) 19-Mar-2013
Time (UTC) 06:34
Platform Not Applicable
File name Amd64_microsoft-windows-csrsrv_31bf3856ad364e35_6.1.7601.22280_none_27e70a43d5574f14.manifest
File version Not Applicable
File size 2,515
Date (UTC) 19-Mar-2013
Time (UTC) 05:55
Platform Not Applicable
File name Amd64_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.18113_none_ca554865cac3a857.manifest
File version Not Applicable
File size 15,291
Date (UTC) 19-Mar-2013
Time (UTC) 06:37
Platform Not Applicable
File name Amd64_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.22280_none_ca9034dee41cbfb3.manifest
File version Not Applicable
File size 15,291
Date (UTC) 19-Mar-2013
Time (UTC) 05:58
Platform Not Applicable
File name Amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.18113_none_0a5f8ec22fd235a9.manifest
File version Not Applicable
File size 28,015
Date (UTC) 19-Mar-2013
Time (UTC) 11:13
Platform Not Applicable
File name Amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.22280_none_0a9a7b3b492b4d05.manifest
File version Not Applicable
File size 28,015
Date (UTC) 19-Mar-2013
Time (UTC) 11:13
Platform Not Applicable
File name Amd64_microsoft-windows-smss_31bf3856ad364e35_7.1.7601.18113_none_fbd00b07bab8de78.manifest
File version Not Applicable
File size 28,049
Date (UTC) 19-Mar-2013
Time (UTC) 11:13
Platform Not Applicable
File name Amd64_microsoft-windows-smss_31bf3856ad364e35_7.1.7601.22280_none_fc0af780d411f5d4.manifest
File version Not Applicable
File size 28,049
Date (UTC) 19-Mar-2013
Time (UTC) 11:13
Platform Not Applicable
File name Update-bf.mum
File version Not Applicable
File size 2,911
Date (UTC) 19-Mar-2013
Time (UTC) 11:08
Platform Not Applicable
File name Update.mum
File version Not Applicable
File size 2,969
Date (UTC) 19-Mar-2013
Time (UTC) 11:07
Platform Not Applicable
File name Wow64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22280_none_c0008ddc1681bb4c.manifest
File version Not Applicable
File size 3,356
Date (UTC) 19-Mar-2013
Time (UTC) 04:51
Platform Not Applicable
File name Wow64_microsoft-windows-csrsrv_31bf3856ad364e35_6.1.7601.18113_none_3200c81cf05ef9b3.manifest
File version Not Applicable
File size 1,136
Date (UTC) 19-Mar-2013
Time (UTC) 05:22
Platform Not Applicable
File name Wow64_microsoft-windows-csrsrv_31bf3856ad364e35_6.1.7601.22280_none_323bb49609b8110f.manifest
File version Not Applicable
File size 1,136
Date (UTC) 19-Mar-2013
Time (UTC) 04:50
Platform Not Applicable
File name Wow64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.18113_none_14b439146432f7a4.manifest
File version Not Applicable
File size 8,429
Date (UTC) 19-Mar-2013
Time (UTC) 05:23
Platform Not Applicable
File name Wow64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.22280_none_14ef258d7d8c0f00.manifest
File version Not Applicable
File size 8,429
Date (UTC) 19-Mar-2013
Time (UTC) 04:51
Platform Not Applicable
File name Wow64_microsoft-windows-smss_31bf3856ad364e35_7.1.7601.18113_none_0624b559ef19a073.manifest
File version Not Applicable
File size 8,429
Date (UTC) 19-Mar-2013
Time (UTC) 05:23
Platform Not Applicable
File name Wow64_microsoft-windows-smss_31bf3856ad364e35_7.1.7601.22280_none_065fa1d30872b7cf.manifest
File version Not Applicable
File size 8,429
Date (UTC) 19-Mar-2013
Time (UTC) 04:51
Platform Not Applicable
File name X86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.18113_none_6e36ace212663721.manifest
File version Not Applicable
File size 16,151
Date (UTC) 19-Mar-2013
Time (UTC) 05:34
Platform Not Applicable
File name X86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.22280_none_6e71995b2bbf4e7d.manifest
File version Not Applicable
File size 16,151
Date (UTC) 19-Mar-2013
Time (UTC) 05:12
Platform Not Applicable

Additional file information for Windows 8 and Windows Server 2012

Additional files for all supported x86-based versions of Windows 8

File name Update-bf.mum
File version Not Applicable
File size 2,216
Date (UTC) 13-Mar-2013
Time (UTC) 16:30
Platform Not Applicable
File name Update.mum
File version Not Applicable
File size 2,255
Date (UTC) 13-Mar-2013
Time (UTC) 16:30
Platform Not Applicable
File name X86_5cdf5419cf8d87f79cd9c6302b8390af_31bf3856ad364e35_6.2.9200.16548_none_aef0564b8ffb6dc4.manifest
File version Not Applicable
File size 697
Date (UTC) 13-Mar-2013
Time (UTC) 16:30
Platform Not Applicable
File name X86_b3ddc01f49e4d4cd62237cd6ecd0d781_31bf3856ad364e35_6.2.9200.20652_none_ed2cb5749bdaa594.manifest
File version Not Applicable
File size 697
Date (UTC) 13-Mar-2013
Time (UTC) 16:30
Platform Not Applicable
File name X86_microsoft-windows-os-kernel_31bf3856ad364e35_6.2.9200.16548_none_690ab2258565c70f.manifest
File version Not Applicable
File size 2,590
Date (UTC) 02-Mar-2013
Time (UTC) 09:13
Platform Not Applicable
File name X86_microsoft-windows-os-kernel_31bf3856ad364e35_6.2.9200.20652_none_69837d489e90eac0.manifest
File version Not Applicable
File size 2,590
Date (UTC) 02-Mar-2013
Time (UTC) 09:32
Platform Not Applicable

Additional files for all supported x64-based versions of Windows 8 and of Windows Server 2012

File name Amd64_630a8f6ef943c7f9a54fd7488ebbe907_31bf3856ad364e35_6.2.9200.20652_none_3e98372fd0e3a644.manifest
File version Not Applicable
File size 701
Date (UTC) 13-Mar-2013
Time (UTC) 16:34
Platform Not Applicable
File name Amd64_8cb2092053ba513de51fd962e38951fe_31bf3856ad364e35_6.2.9200.16548_none_237e0e317b98c924.manifest
File version Not Applicable
File size 701
Date (UTC) 13-Mar-2013
Time (UTC) 16:34
Platform Not Applicable
File name Amd64_microsoft-windows-os-kernel_31bf3856ad364e35_6.2.9200.16548_none_c5294da93dc33845.manifest
File version Not Applicable
File size 2,592
Date (UTC) 02-Mar-2013
Time (UTC) 11:54
Platform Not Applicable
File name Amd64_microsoft-windows-os-kernel_31bf3856ad364e35_6.2.9200.20652_none_c5a218cc56ee5bf6.manifest
File version Not Applicable
File size 2,592
Date (UTC) 02-Mar-2013
Time (UTC) 10:53
Platform Not Applicable
File name Update-bf.mum
File version Not Applicable
File size 2,684
Date (UTC) 13-Mar-2013
Time (UTC) 16:34
Platform Not Applicable
File name Update.mum
File version Not Applicable
File size 2,731
Date (UTC) 13-Mar-2013
Time (UTC) 16:34
Platform Not Applicable