| Previous | Next |
| SMB_SERVER_LIVEDUMP | WIN32K_SECURITY_FAILURE |
LOADER_ROLLBACK_DETECTED
The LOADER_ROLLBACK_DETECTED bug check has a value of 0x00000196. This indicates that the version of the OS loader does not match the operating system.
Important
This topic is for programmers. If you are a customer who has received a blue screen error code while using your computer, see Troubleshoot blue screen errors.
LOADER_ROLLBACK_DETECTED Parameters
| Parameter | Description |
|---|---|
| 1 | Loader security version |
| 2 | OS security version |
| 3 | Reserved |
| 4 | Reserved |
Dump evidence for LOADER_ROLLBACK_DETECTED
For LOADER_ROLLBACK_DETECTED, preserve the complete dump, the four bug-check parameters, the exact Windows build, loaded-module list, and the event timeline immediately before the stop. AllStat summarizes the condition as “LOADER_ROLLBACK_DETECTED”; that sentence identifies the failure class, while the parameters and stack determine which object, driver, processor, or subsystem instance was involved.
Analysis order for LOADER_ROLLBACK_DETECTED
- Run WinDbg
!analyze -v, then inspect the documented meaning of each LOADER_ROLLBACK_DETECTED parameter instead of relying only on the probably-caused-by line. - Find the earliest abnormal event: driver update, firmware change, device reset, storage error, verifier report, resource exhaustion, or application hang connected with loader / rollback / detected.
- For LOADER_ROLLBACK_DETECTED, keep third-party filter, security, storage, graphics, and virtualization drivers in the module inventory; removing evidence before dump analysis can obscure the responsible path.
Do not repeatedly reboot a machine affected by LOADER_ROLLBACK_DETECTED before collecting the dump and event logs. For LOADER_ROLLBACK_DETECTED, recovery actions should follow the component identified by the stack and parameters, not merely the symbolic stop-code name.
Looking for a different code? Search another status or error code.