| Previous | Next |
| PREVIOUS_FATAL_ABNORMAL_RESET_ERROR | CLUSTER_CLUSPORT_STATUS_IO_TIMEOUT_LIVEDUMP |
ELAM_DRIVER_DETECTED_FATAL_ERROR
ELAM early-boot security driver failure
ELAM_DRIVER_DETECTED_FATAL_ERROR is bug check code 0x00000178. The built-in table identifies it as ELAM_DRIVER_DETECTED_FATAL_ERROR
; the useful diagnostic question is what Windows component raised the stop and which invariant failed.
ELAM drivers run very early in the boot process so antimalware software can classify boot-start drivers. This bug check means the ELAM driver or its early-boot security path reported a fatal problem.
How to read the parameters
- The relevant evidence is in boot-start driver ordering, ELAM driver state, and early boot logs.
- A normal antivirus service crash after boot is not the same as an ELAM fatal error.
- The crash can occur before many user-mode logs are available.
What to check in the dump
- Check the installed security product, ELAM driver version, boot-start driver changes, Secure Boot state, and recent antimalware updates.
- Preserve boot logs and recovery environment evidence before removing drivers.
- If the machine is managed, check enterprise security policy and update rings.
References
Looking for a different code? Search another status or error code.