Bugcheck 0xDEADDEAD

jcgriff2

Co-Founder / Admin
BSOD Instructor/Expert
Microsoft MVP (Ret.)
Staff member
Joined
Feb 19, 2012
Posts
21,541
Location
New Jersey Shore
A bugcheck = 0xdeaddead indicates that the user initiated the BSOD via his keyboard.

BSOD Expert @Vir Gnarus explained the stack text in this BSOD post in a 0xdeaddead BSOD thread -

NETwNs64.sys shows up immediately before KeBugCheckEx. This kinda gives you a hint that this fella was responsible.

The thread - 0xDEADDEAD

No idea why an OP would waste our (BSOD Analysts) precious time except perhaps the OP thought it was funny or just wanted to see if we'd catch it. Unreal.

Regards. . .

jcgriff2
 
One reason could be that programs like WhoCrashed initiated it as a test for dump file generation.
 
Well, I don't know if OP really made fun of you because I met with a case when BSoD 0xDEADDEAD appeared despite the fact that no shortcut was pressed to call it. The NETwns64.sys driver referenced there is a driver from the Intel Wi-Fi card so I would take a closer look at this case
Here is another such case:
BSOD 0xDEADDEAD - Please Help!
 
Anything is possible as we BSOD Analysts have found out over the years and many thousands of dumps later.

However, Microsoft as well as the debugger.chm help file states:

debugger.chm said:
Bug Check 0xDEADDEAD: MANUALLY_INITIATED_CRASH1

The MANUALLY_INITIATED_CRASH1 bug check has a value of 0xDEADDEAD. This indicates that the user deliberately initiated a crash dump from either the kernel debugger or the keyboard.

John
 
Last edited:
One reason could be that programs like WhoCrashed initiated it as a test for dump file generation.
I did not know that was possible (for WhoCrashed to generate a 0xdeaddead)

However, even if it was WhoCrashed, why would an OP then post asking for help with the 0xdeaddead BSOD?
 
They usually wanted me to check if there were any issues or if the dump actually was created, this was in the middle of troubleshooting and they took some initiative to help in identifying why no dumps were created, but I don't think it's meant as a joke or something.
 
I understand the definition of this error code, however, practice has shown that it does not have to be as it was written. As I have already mentioned, I encountered cases where the blue screen with this error code was displayed accidentally during normal operation of the computer, and most often here the update of the driver for the Intel Wi-Fi card was helpful.
Yes, a blue screen with this error code may also be displayed as it is called manually, but it may also appear in the event of a driver error. Anyway, look at yourself and see how many cases I am talking about:
bsod 0xdeaddead - Google Search
And here is an interesting case from which it follows that this blue screen helped ... cleaning the registry
0xdeaddead blue screen problem
 
You're saying that cleaning the registry solved a 0xdeaddead BSOD epidemic. . .?

I think that is far-fetched.

I can't imagine what would have been lingering in the registry to cause this.

You do know that the items that registry cleaners delete are fragmented data, right? i.e., useless pieces of leftover data.

Sometimes, however, registry cleaners do delete vital data that results in an unstable Windows OS.
 
They usually wanted me to check if there were any issues or if the dump actually was created, this was in the middle of troubleshooting and they took some initiative to help in identifying why no dumps were created, but I don't think it's meant as a joke or something.

I guess that maybe you guys have not been exposed like I have to the posting of fake BSODs.

I would estimate that I have encountered somewhere between 50-100 threads involving absolutely fake BSODs since 2007 - over the last 12+ years.

Beware of Fake BSOD Posts

Where are dump files (.dmp) saved after crash ?

A lot of them came after I inadvertently posted BSOD help at a notorious site known for hacking and working with cracked Windows. I did not know what kind of a site it was at the time I posted, but I posted that the Windows OS was cracked and everyone seemed to laugh and I did not get the joke. I did a very detailed analysis of the full kernel dump provided and showed them exactly how I came to my conclusions. They were very thankful! :0

This unfortunate exchange led to quite a few fake BSOD threads in the following weeks and months. I was obviously being targeted and the OPs were laughing all the way. But I was able to catch each fake BSOD usually by noticing an old hex date on the picture of the BSOD attached to the post (i.e., OP would say it was W7 or W8, but the hex timestamp was for a 2002 XP-era driver) or by some other method before investing a lot of time trying to solve the thread.

Others were outright cracked Windows.

Some had drivers from 2 or 3 different versions of Windows in one dump, which I easily figured out with the pver/cver FOR command that IDs module/driver versions and this was very easy for me to spot.

So, being a target of pranksters, I always think that something like 0xdeaddead is a joke of some kind first, until other evidence shows me otherwise.

John
 
Last edited:
Like I posted earlier, anything is possible.

I do not doubt at all that there could be a legitimate 0xdeaddead bugcheck BSOD.
 

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top