{"id":2076,"date":"2014-03-30T08:00:43","date_gmt":"2014-03-30T06:00:43","guid":{"rendered":"http:\/\/outofmymind.scanlen.com\/?p=2076"},"modified":"2014-03-24T21:07:35","modified_gmt":"2014-03-24T19:07:35","slug":"bsod-process1_initialization_failed","status":"publish","type":"post","link":"https:\/\/outofmymind.scanlen.com\/?p=2076","title":{"rendered":"BSOD: PROCESS1_INITIALIZATION_FAILED"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" class=\"alignleft size-full wp-image-1706\" alt=\"Topic-Windows\" src=\"http:\/\/outofmymind.scanlen.com\/wp-content\/uploads\/2011\/05\/Topic-Windows.jpeg\" width=\"150\" height=\"150\" \/><\/p>\n<p>When your day starts off with a client coming in with a BSOD (Blue Screen Of Death) on their PC you can pretty much be assured at what type of day both you and the client are going to have&#8230;<\/p>\n<p>This particular BSOD was a\u00a0<strong><em>PROCESS1_INITIALIZATION_FAILED<\/em><\/strong> &#8211; <strong><em>STOP: 0x0000006B<\/em><\/strong> &#8230;<\/p>\n<p style=\"text-align: center;\"><a href=\"http:\/\/outofmymind.scanlen.com\/wp-content\/uploads\/2014\/03\/BSOD_18032014.jpg\" rel=\"lightbox[2076]\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-medium wp-image-2077\" alt=\"BSOD_18032014\" src=\"http:\/\/outofmymind.scanlen.com\/wp-content\/uploads\/2014\/03\/BSOD_18032014-300x225.jpg\" width=\"300\" height=\"225\" srcset=\"https:\/\/outofmymind.scanlen.com\/wp-content\/uploads\/2014\/03\/BSOD_18032014-300x225.jpg 300w, https:\/\/outofmymind.scanlen.com\/wp-content\/uploads\/2014\/03\/BSOD_18032014.jpg 640w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p>After powering on the machine, it would past the <em>POST<\/em> (Power On Self Test) and then the starting Windows splash screen would show and then it would crash with the BSOD. Tried Safe Mode and Last Known Good without success&#8230;. things were not looking good.<\/p>\n<p>Did a search and found on the Microsoft website the exact error &#8211;\u00a0<a href=\"http:\/\/support.microsoft.com\/kb\/981833\" target=\"_blank\">http:\/\/support.microsoft.com\/kb\/981833<\/a> .<\/p>\n<p>It seems the\u00a0issue occurs because the <em>Bootcat.cache<\/em> file is corrupted or because the size of the <em>Bootcat.cache<\/em> file is changed since the last successful start.\u00a0The <em>Bootcat.cache<\/em> file is located in the <em>%SystemRoot%\\system32\\codeintegrity<\/em> \u00a0 folder. \u00a0Microsoft suggests to\u00a0work around this issue, start the computer from the disc drive or from the USB drive by using the Windows installation media. Delete the <em>Bootcat.cache<\/em> file, and then restart the computer.<\/p>\n<p>I managed to boot into the System Repair console and delete the file however rebooting did not resolve the issue. \ud83d\ude41<\/p>\n<p>Now this machine was a Lenovo T440 machine, so I popped out the hard drive, inserted it into a USB HDD bay and then copied the<em> Bootcat.cache<\/em> file over from a newly imaged machine&#8230; Issue still not resolved&#8230;<\/p>\n<p>As this was a first year clerk, and we setup the machines in batches 3 months prior, I found another clerk whose machine was setup at the same time as his and copied their <em>Bootcat.cache<\/em> file across to his machine (using the USB HDD bay route); and for the first time it actually booted into Windows! \u00a0There was cheering and happiness as the next 3 reboots worked without any issues. The clerk then disappeared off into the morning sun to the client, and I felt good that another client had been helped.<\/p>\n<p><em>Fast Forward 2 Days&#8230;<\/em><\/p>\n<p>When I arrived at my office the same clerk was waiting for me at the door&#8230;same issue&#8230;BSOD error every startup<\/p>\n<p>After asking all the usual questions about what software have you recently loaded, what external media have you plugged in, etc. he said the expected &#8220;nothing&#8221; but then he stated that the USB ports were not working at all after the last &#8220;fix&#8221;. \u00a0Hmmmm&#8230;. definately a more serious issue than just replacing 1 file.<\/p>\n<p>I removed his HDD from the machine and placed it into my USB HDD bay once again and took a peak at the Bootcat.cache file &#8211; it had changed the previous day (round about when the Antivirus scan was scheduled to start) and had shrunk from 6879kb to 21kb in size&#8230; I then decided to search for &#8220;bootcat.cache corrupting&#8221; and then stumbled across the following URL:\u00a0<a href=\"http:\/\/answers.microsoft.com\/en-us\/windows\/forum\/windows_7-system\/bootcatcache-becomes-corruptedchanged-every-time-i\/cdcc2141-cc0f-44f2-81c6-78b067a86f86\" target=\"_blank\">http:\/\/answers.microsoft.com\/en-us\/windows\/forum\/windows_7-system\/bootcatcache-becomes-corruptedchanged-every-time-i\/cdcc2141-cc0f-44f2-81c6-78b067a86f86<\/a><\/p>\n<p>In it there was a post by Derek McNelly that said the following:<\/p>\n<p><a href=\"http:\/\/outofmymind.scanlen.com\/wp-content\/uploads\/2014\/03\/BSOD-bootcat_cache.png\" rel=\"lightbox[2076]\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-medium wp-image-2089\" alt=\"BSOD-bootcat_cache\" src=\"http:\/\/outofmymind.scanlen.com\/wp-content\/uploads\/2014\/03\/BSOD-bootcat_cache-300x182.png\" width=\"300\" height=\"182\" srcset=\"https:\/\/outofmymind.scanlen.com\/wp-content\/uploads\/2014\/03\/BSOD-bootcat_cache-300x182.png 300w, https:\/\/outofmymind.scanlen.com\/wp-content\/uploads\/2014\/03\/BSOD-bootcat_cache.png 725w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p>I looked in his\u00a0<span style=\"text-decoration: underline;\"><em>C:\\Windows\\System32\\catroot\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}<\/em><\/span> folder and found that it only had 81 files (of about 5Mb) in it and the other folder in\u00a0<span style=\"text-decoration: underline;\"><em>C:\\Windows\\System32\\catroot\\<\/em><\/span> was actually empty! \u00a0I then compared it to another clerks machine and the whole\u00a0<span style=\"text-decoration: underline;\"><em>C:\\Windows\\System32\\catroot\\<\/em><\/span> folder was 112Mb on that machine! \u00a0I promptly copied the files across as well as the Bootcat.cache file to my clients drive, and then put the drive back into his PC.<\/p>\n<p>Windows started successfully and the USB ports WORKED!<\/p>\n<p>So it MUST have been McAfee that removed these files &#8211; seems it is a &#8220;known&#8221; issue &#8211; <a href=\"https:\/\/kc.mcafee.com\/corporate\/index?page=content&amp;id=KB75956\" target=\"_blank\">URL<\/a><\/p>\n<p>I force updated the McAfee Agent on the machine to version 4.8 \u00a0and now I wait for a week to see if the machine behaves or not&#8230; \u00a0but I am sure it will this time!\u00a0Damn McAfee!<\/p>\n<p><em>(Edit: 1 week later and client has confirmed all is still well!)<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>When your day starts off with a client coming in with a BSOD (Blue Screen Of Death) on their PC you can pretty much be assured at what type of day both you and the client are going to have&#8230; This particular BSOD was a\u00a0PROCESS1_INITIALIZATION_FAILED &#8211; STOP: 0x0000006B &#8230; After powering on the machine, it [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"ngg_post_thumbnail":0,"footnotes":""},"categories":[12],"tags":[],"class_list":["post-2076","post","type-post","status-publish","format-standard","hentry","category-windows"],"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/outofmymind.scanlen.com\/index.php?rest_route=\/wp\/v2\/posts\/2076","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/outofmymind.scanlen.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/outofmymind.scanlen.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/outofmymind.scanlen.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/outofmymind.scanlen.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2076"}],"version-history":[{"count":6,"href":"https:\/\/outofmymind.scanlen.com\/index.php?rest_route=\/wp\/v2\/posts\/2076\/revisions"}],"predecessor-version":[{"id":2183,"href":"https:\/\/outofmymind.scanlen.com\/index.php?rest_route=\/wp\/v2\/posts\/2076\/revisions\/2183"}],"wp:attachment":[{"href":"https:\/\/outofmymind.scanlen.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2076"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/outofmymind.scanlen.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2076"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/outofmymind.scanlen.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2076"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}