xformer
Had this question 139
Question
xformer asked on
| 129975 views

Blue Screen (Stop 0x50) after applying update KB2982791 to Windows 7 Home Premium 64 bit

Yesterday I ran all the updates of the August patch day. Installation went smoothly. After rebooting everything worked fine. But when I shut down my notebook and switched it on a little later it came up with a blue screen with a Stop 0x50 in Win32k.sys. I could not even boot into safe mode as Windows failed to start no matter which mode chose.

So I restored from a backup, installed the updates again and... same effect. After restoring again I went through the updates and found update KB2982791 which relates to Win32k.sys and fonts. I also found this KB article (Stop error 0x50 in Win32k.sys) which says that a Stop 0x50 occurs because Win32k.sys crashes when the font cache is not correctly maintained. Quite a bizarre behaviour to crash the whole operating system because a cache seems to be invalid. A decent programmer would have just cleared the cache and continued.

Since security update KB2982791 relates to fonts, as well, I guess that MS has once again messed up an update.

From my experience with MS "support" I know that MS does not care about bug reports. So I just post this to inform people which may have been bitten by this bug. If possible, restore your OS or boot from CD and uninstall update KB2982791. Then things should work again. Oh, and after that switch off automatic updating...

Regards,

Frank

rvuerinckx
Found this helpful 81
Answer
rvuerinckx replied on

Reply

Hello,

I had the same problem on two computers, both win7 64bits.

I could solve it by booting from a DVD and removing the following file:

c:\Windows\System32\FNTCACHE.DAT

For sake of completeness, I first removed the files

c:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat

c:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat

But that didn't solve the problem. Then I removed the file I mentioned first. So, in the end all 3 files were removed, but I guess the first one is the culprit.

[Susan moderator here, I'm marking this ONLY as an answer so that it shows up at the top.  This is a workaround - NOT a real answer. We still don't understand why this is happening and what the root cause is.]

Laurens (NLD)
Found this helpful 45
Answer
Laurens (NLD) replied on

Reply

I can confirm that removing fntcache.dat fixed the issue.

My dad had this issue on his win7 x64 PC after the update that he received on 15-08-2014.

Checking the update history, He only received KB2982791, not the other mentioned suspects.

Removal of fntcache.dat via command prompt via de recovery disk solved the problem.

For anyone having issues removing the file with commandprompt, here is my quick guide:

1. Insert the recovery disk/windows installation disk.

2. Boot from disk by pressing F12 or whatever key is shown when your PC turns on that says "BOOT MENU" or something alike.

3. Select CD/Disk Drive

4. Let the windows files load, select a language and then select the restore option on the bottom.

5. Then select the top option to get a list of all the repair tools.

6. Click on command prompt on the bottom.

7. You'll see a letter, for example X:\. This is your windows CD. We need to get to the windows installation on your hard drive, but even though this might have been C: when your PC was still working, it could very well be another letter now, so to try this out, first type:

wmic logicaldisk get name


to get a list of all your drives. Then access every disk you see in that list by typing:


cd /d A:
cd /d B:
cd /d C: 

and so on, each time checking what's on the drive by typing dir.

If you see a list that contains folders like "Windows" and "Program Files", you're most likely on your harddrive that contains your windows installation.


8. Now go to the system32 folder by typing:


cd windows

cd system32


9. Now check if the fntcache.dat file exists, by typing:


if exist fntcache.dat ( echo yes ) else ( echo no )


10. If you see "yes" below that line, this means that the file exists, and your problems will most likely be fixed very soon.

11. Type the following command to remove the file:


del fntcache.dat


12. Press <arrow up> twice, to repeat the "if exist fntcache..." command. This should now output "no".


13. If that's the case, reboot your computer and keep your fingers crossed. This worked for me :-)! Good luck. If it still doesn't work, I suggest you follow the steps to remove the entire faulty windows update by following the instructions elsewhere in this topic, that I'll also post below (my own version, for your convenience):

1. Once you know the letter of your windows drive (see my tutorial above), type the following command (replace C: with the letter of your drive that contains your windows installation):


dism /image:C:\ /get-packages


2. Search the results for the faulty security update KB2982791, and just to be sure, find KB2976897 and KB2970228 as well.


3. Write down the exact package names, and remove them with the following commands (replace drive letter again to fit your system, and replace the package names with how they're named on your system):


dism /image:C:\ /remove-package/PackageName:Package_for_KB2970228~31bf3856ad364e35~amd64~~6.1.1.2

dism /image:C:\ /remove-package/PackageName:Package_for_KB2982791~31bf3856ad364e35~amd64~~6.1.1.1

dism /image:C:\ /remove-package/PackageName:Package_for_KB2976897~31bf3856ad364e35~amd64~~6.1.1.0

4. You'll receive messages that state that the uninstallations were successfull.


5. Restart the computer into normal mode.

Susan Bradley
Found this helpful 13
Susan Bradley replied on

Yea, well I care.  Let's get an official support case opened up so that they can care.

email me at susan-at-msmvps.com (change the -at- to @) and I'll need a phone number to set up a call back from an engineer at Microsoft.

xformer
Found this helpful 5
xformer replied on

Reply

Hi, Susan

thanks for your helpful answer. In fact I found MVPs to be much more helpful than MS "support".. I will write you an email. Thanks for caring.

Meanwhile I have spent about 8 hours looking into this and I found out that the error occurs when I install any of the following updates: KB2976897, KB2982791, and KB2970228. I checked my laptop's ram and hard disk and they do not show any defects.

If I try to install hotfix 463450 (KB2908190) it tells me that "This update is not applicable to your computer". *sigh*

Regards,

Frank

A. User
Found this helpful 2
A. User replied on

Reply

Meanwhile I have spent about 8 hours looking into this and I found out that the error occurs when I install any of the following updates: KB2976897, KB2982791, and KB2970228.

@xformer only:

Please answer-by-number in your reply...

1. KB2976897 & KB2982791 are both kernel-mode driver updates (MS14-045). Is KB2930275 and/or KB2876284 listed in Installed Updates? [1][2]

2. Has a Norton application and/or a McAfee application ever been installed on the computer?

3. Did a Norton free-trial or a McAfee free-trial [PICK ONE] come preinstalled on the computer when you bought it? (Doesn't matter if you never used or Activated it.)

4. Is KB2976627, KB2918614, KB2978668, KB2937610, and/or KB2943357 listed in Installed Updates (not Update History)?

Note: KB2970228 is an optional, non-security update (yes, even though it may be offered as an Important update). Feel free to hide it.


   • HOW TO Hide an Update or Restore a Hidden Update
     http://www.sevenforums.com/tutorials/24376-windows-update-hide-restore-hidden-updates.html

==========================================================
[1] Start | Control Panel | Programs and Features | View installed updates (in left-hand menu)

[2] KB2982791 supersedes KB2930275 and KB2976897 supersedes KB2876284.

Susan Bradley
Found this helpful 4
Susan Bradley replied on

Reply

Sorry PaBear, to disagree with you,  this ain't Norton, so asking the canned bit about Norton is taking him down a rabbit hole that just isn't here. 

I'm kinda mad at the Russians for invading countries so I kinda agree with skipping that Russian ruble one but it is of interest that that too pops a bsod.

That said, can you email me so we can get a case opened?  I have at least one other repro, looking for more.

tongpo
Found this helpful 2
tongpo replied on

Reply

I too have had the same problem blue screen of death after installing Tuesdays updates after messing around for hours I have had to hide KB2976897, KB2982791, and KB2970228 to be able to start my computer normally I wish that Microsoft would check the updates before releasing them I suspect that these updates mentioned above are not compatible with windows 7 64bit which I am running

regards Kevin

 
Susan Bradley
Found this helpful 1
Susan Bradley replied on

Reply

They do test, they just missed something here.  Would you mind emailing me so we can get this officially investigated?   The more samples/cases we have the faster we can get to the bottom of it.
Steve.Ward
Found this helpful 1
Steve.Ward replied on
MVP

Reply

Just for the record, I have the same problem. Susan, I;ll email you the info in the morning.

Steve

PS: No problem with any of the  updates on Win 7 Pro, 32bit Netbook!!!

"I was gratified to be able to answer promptly, and I did. I said I didn't know." (Mark Twain)
Cake2100
Found this helpful 1
Cake2100 replied on
Same problem
Susan Bradley
Found this helpful 3
Susan Bradley replied on

Reply

please - email me at susan-at-msmvps.com (change the -at- to @) the more cases that are set up, the faster we can figure out the root cause.
MartinTü
Found this helpful 1
MartinTü replied on

Reply

The Same problems are reporting in Germany

http://answers.microsoft.com/de-de/windows/forum/windows_7-windows_update/bluescreen-nach-windows-update/c7e7bfd6-7c70-4137-bfcc-2a3325520fab

Previous Previous Page of 63 Next Next