Despite shouting about the imminent demise of Windows, the brainchild of Bill Gates stubbornly refuses to give up his position. Moreover, the number of users is only getting larger. Unfortunately, dispelling the myth of Windows "insecurity" and "buggy" is not so simple.
Sadly, the developers of this OS themselves, to the best of their ability, help maintain this stereotype. Recently, a very common question among users is how to fix the error "0xc0000005". For many, it began to appear immediately after the regular update of Windows.
What kind of mistake is this? Why is she appearing? Our article will tell about all this.
When it all started
And all this happened in August, when an update came to users' computers under the number KB2859537. Immediately after that, Microsoft technical support and thematic forums were overwhelmed with work: people stopped running programs, and in some cases even loading the OS itself crashed with an error.
What was this update for?
Users of all kinds of "assemblies" immediately began to build speculation about a "universal conspiracy", the purpose of which was to transfer unscrupulous pirates to legal programs. Oddly enough, but users of pirated copies were accidentally hit. Moreover, their fate was shared by the owners of legal copies of Wilndows.
And the purpose of this update is extremely important: it closes four (!) Critical vulnerabilities in the system core at once. If an attacker follows certain rules, he will be able to gain full control over those computers where this vulnerability is not closed.
However, the technical details are not so interesting. This is only said so that before you fix the "0xc0000005" error, you do not think about the "dangers" of regular system updates.
Why does this problem arise?
Everything happened due to the fact that the “patch” KB2859537 replaces several system files at once. In the case where the original system core undergoes modifications, this leads to big problems.
And another portion of unpleasant news. The fact is that in September and October updates KB2872339 and KB2882822 were released, which replace the first patch. Since they have a similar purpose, their installation often leads to completely similar consequences.
But if the error "0xc0000005" appeared on your computer after the update, you should remember that the reasons may lie deeper. First, you should immediately scan the hard drive for viruses and trojans.
Illegally activated copies
If the problem occurs on a broken system, the reason is the old version of the ntoskrnl.exe file, which, when illegally activated by a special utility, is renamed to xNtKrnl.exe, and then it is written to the kernel using bcdedit.
This is done in order to ensure that the system works adequately with the software "layer", which replaces the SLIC table at boot time. After the upgrade, the old version of the kernel becomes incompatible with some files of the subsystem, which is why Windows x64 refuses to start programs previously launched in x32 mode. Simply put, when you run the application "0xc0000005", after which it crashes completely.
And Microsoft is not to blame here: no one guaranteed the operation of broken systems. By the way, if you activate an updated version of the kernel, then the OS will work stably. This once again confirms that with the release of this update, a fight against pirates was not planned. It just so happened.
How to fix it
We immediately warn you: if you assume that the error "0xc0000005" after the update may appear on your system, it is logical not to install the updates that we wrote about above. True, one should not forget about the unclosed vulnerabilities of the system kernel that malware can take advantage of.
However, even if this error appears on a legal copy, you can fix it only by rolling back the changes in the system kernel.
First method
First you will have to run the command line with administrator privileges. Make it easy. First you need to click on the "Start" button, and in the search bar type the word "CMD". In the list that opens on the right, find the file of the same name, right-click on it, and in the pop-up context menu, select the option “Run as Administrator”.
In the console that opens, type the command "wusa.exe / uninstall / KB: 2882822". Accordingly, if you have installed the update under a different serial number, then it must be written in the last paragraph.
The line “wusa.exe” launches a specialized utility that is just responsible for removing or installing system patches.
Since it is not always possible to fix the error "0xc0000005" in this way, you can use the system rollback.
Rollback system
This method is quite reliable, because before each installation of critical updates and other important operations, the system automatically creates a restore point. How to start a rollback so as not to see the annoying "access violation 0xc0000005"?
To do this, again, click on the "Start" button, select "Control Panel" in the menu that opens, in which you need to activate the "Restore" option. In the
dialog box that opens, click on the "Start System Restore" button. Going through the Wizard prompts, you can easily roll back Windows to a healthy state.
Using DISM
If the application error "0xc0000005" Windows 7 pops up even after all of the above actions, it remains only to resort to the help of "heavy artillery."
First you need to start the recovery environment. To do this, you will need the installation disk from which you installed the operating system. If you do not have this, then before you fix the error "0xc0000005", you should create it yourself.
To do this, download the official boot disk with Windows 7, and then write it to a disk or flash drive of the appropriate size.
After recording, the disc is inserted into the drive for optical media, and the computer is sent to reboot. In the BIOS, you need to set the boot from the CD / DVD-drive. How to do this, you will need to learn from the instructions for the motherboard, as the process can vary greatly from one manufacturer to another.
After booting from the disk, you need to select the "Recovery". Keep in mind that when you boot the computer, you can press the F8 button (even without a disk), after which a menu of boot options will appear. Select Computer Troubleshooting. But we still recommend using optical media, since in this case you will not depend on possible failures of the operating system itself.
In any case, after selecting the recovery option, a dialog box opens in which you need to select the "Command Line" mode.
Commands Used
Keep in mind: since you will eliminate the "0xc0000005" error in Windows 7 from under the BIOS, it is better to rewrite all of the commands below to a separate sheet or print it. If it is possible to install a second computer or laptop nearby, it’s very good.
So let's get started. First and foremost, accurately identify the drive letter on which the operating system is installed. Of course, in the vast majority of cases this is “C”, but there may be nuances. This is especially true for those users who simultaneously use two or more systems that are located on the same physical disk.
In the command line, write the command "DISM / Image: C: \ / Get-Packages", where ": C: \" is just the designation of the logical drive. Accordingly, if necessary, this parameter must be changed to your requirements.
A list will pop up where you need a point that mentions one of the above updates (KB2872339, KB2882822, etc.). It will look something like this: "PackageName: Package_for_KV2859537 ~ 31bf3856ad364e35 ~ x86 ~~ 6.1.1.3."
Select the item you need using the left mouse button. After that, right-click on the selected text, select “Copy” from the context menu. After that, at a command prompt, type a command of the form: "DISM / Image: C: \ / Remove-Package / PackageName:".
Do everything as carefully as possible, since an extra space or a Cyrillic letter accidentally squeezed in there will reduce all your work to "no"!
Immediately after the colon, paste the line that we copied above. It will look something like this: "DISM / Image: C: \ / Remove-Package / PackageName: PackageName: Package_for_KV2859537 ~ 31bf3856ad364e35 ~ x86 ~~ 6.1.1.3." Without quotes, of course.
After pressing the “Enter” key, a special system utility will be launched that uninstalls the package you specified. Note! The operation was successful if the selected package is not listed in the list of installed updates.
Check it out is simple. Open the "Control Panel", find the item "Windows Update", run it. In the lower left corner of the dialog box that opens, there is a link “Installed Updates”. If there is no "hero of the occasion" in the list, then the annoying message "0xc0000005", which appeared after the Windows update , will not bother you anymore.
Preventive measures
All of the above is completely useless if you do not know about methods of preventing such phenomena in the future. First, be sure to protect your computer against viruses.
At the very beginning, we mentioned that the modification of the kernel of the system with malware can just cause a program crash in case of an update. In addition, we strongly advise against using different patches to install third-party themes into the system.
You (perhaps) will lead “Beauty”, but only the error of updating “0xc0000005” will surely reduce all joy from new “whistles” to zero.
The second one. Never use activators. Believe me, if you even intended to use pirated software for research purposes (!), Then it is better to use OEM keys. Where safer and more reliable. But this is only a theory, not a guide to action. Everyone already knows that nothing can be more reliable and secure than licensed software ...
Accordingly, all kinds of “assemblies” fall under the same item. Who knows what and how “talented” young technicians stuffed it there. And the “treated” core is far from the worst. How do you like the Radmin program for remote administration without a master password? And such assemblies came across, and more than once. Using products from unknown people, you risk not only the stability of the system, but also your own private data and even money!
Technical support
Finally, if you followed our good advice using licensed software, in the event of a complete system crash, you can contact Microsoft technical support. The phone or other contact information must be on the serial number sticker. In addition, you can learn more about this by simply going to Computer Properties, where the contact information for the computer manufacturer or Microsoft itself should be. Of course, if in the column “Properties” there is something like “Kulzhaker007”, this will not help you.
And further. Returning again to the topic of assemblies and especially “advanced” users, we note the importance of automatic system recovery. By default, this option is enabled.
But our proud users and creators of assemblies, considering themselves much smarter than the creators of Windows, regularly turn it off. Given how much easier life becomes when recovery is enabled, doing so is simply stupid. By saving a couple of gigabytes of free space, you risk losing the system due to a minor failure.
We hope you find out about the reasons why the “0xc0000005” application error appears. How to fix this annoying misunderstanding, we have described in sufficient detail in our article. Go for it! To do all of the above is quite simple.