You receive the Stop error "Stop 0x05 (INVALID_PROCESS_ATTACH_ATTEMPT)" in Windows XP Service Pack 2 or Windows Server 2003 (887742)



The information in this article applies to:

  • Microsoft Windows XP Home Edition Service Pack 2 (SP2)
  • Microsoft Windows XP Professional Service Pack 2 (SP2)
  • Microsoft Windows Server 2003, Web Edition
  • Microsoft Windows Server 2003, Standard Edition
  • Microsoft Windows Server 2003, Enterprise Edition
  • Microsoft Windows Server 2003, Datacenter Edition
  • Microsoft Windows XP Media Center Edition Service Pack 2 (SP2)
  • Microsoft Windows XP Tablet PC Edition 2005

SYMPTOMS

A computer that is running Microsoft Windows XP Service Pack 2 (SP2), Microsoft Windows XP Tablet PC Edition 2005, or Microsoft Windows Server 2003 unexpectedly stops. Additionally, the following Stop error message appears on a blue screen:
Stop 0x05 (INVALID_PROCESS_ATTACH_ATTEMPT)
Note The Windows XP SP2 features and components are included in Windows XP Tablet PC Edition 2005.

CAUSE

This problem occurs because a coding error in the Http.sys file causes stack corruption. This problem occurs if the following conditions are true:
  • TDI filter drivers are installed on your computer. TDI filter drivers are typically installed by antivirus or firewall programs.
  • The installed TDI filter drivers return STATUS_PENDING to the TDI_SET_EVENT_HANDLER I/O request, so that the call is processed as an asyncronous APC.
A coding error in the Http.sys file may cause stack corruption when the TDI filter driver finishes processing the TDI_SET_EVENT_HANDLER I/O request asynchronously on a different thread. The stack for the original thread is overwritten when the I/O request is processed. This causes the Stop error message.

Note This problem does not occur with the original released version of Windows XP or with Windows XP Service Pack 1 (SP1).

RESOLUTION

Windows XP

To resolve this problem in Windows XP SP2, download and install the 887742 update for Windows XP.

The following file is available for download from the Microsoft Download Center:
Release Date: November 2004

For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How to obtain Microsoft support files from online services

Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.

Windows Server 2003

There is no hotfix or update currently available to resolve this problem in Windows Server 2003.

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

Windows XP

This problem was resolved in update 887742 for Windows XP.

MORE INFORMATION

File information

The English version of this update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.
   Date         Time   Version        Size     File name  Platform
   ---------------------------------------------------------------
   08-Oct-2004  15:18  5.1.2600.2525  262,400  Http.sys   x86

Modification Type:MinorLast Reviewed:9/18/2006
Keywords:kbQFE kbHotfixServer ATdownload kbtshoot kbprb KB887742 kbAudEndUser kbAudITPRO