您好，
沒有看到疑似防毒軟體的程式，
在安全模式下關機試試有沒有這個問題，
在 Windows 10 中以安全模式啟動電腦 - Windows Help
如果沒有問題，從開機啓動軟體裏面找問題軟體，軟體 32位元的優先排查。
如果也出現問題，搜cmd 右鍵點擊，選擇以系統管理員身份運行，
輸入 netsh winsock reset 重開機試試，
或者輸入 for %1 in (%windir%\system32\*.dll) do regsvr32.exe /s %1 重開機試試。
每次關機必產生藍屏，顯示critical process die
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
匿名
目前遇到的狀況:只要進行關機動作，均會產生藍屏顯示critical process die
使用Window debug tool分析Memory Dump得到以下結果
請協助分析原因
已在最高權限管理命令提示元輸入以下指令修復檔案但無效
DISM.exe /Online /Cleanup-image /Restorehealth
sfc /scannow
Microsoft (R) Windows Debugger Version 10.0.14321.1024 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [H:\MEMORY.DMP]
Kernel Bitmap Dump File: Kernel address space is available, User address space may not be available.
Symbol search path is: srv*
Executable search path is:
Windows 10 Kernel Version 16299 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 16299.15.amd64fre.rs3_release.170928-1534
Machine Name:
Kernel base = 0xfffff800ab20d000 PsLoadedModuleList = 0xfffff800ab574130
Debug session time: Fri Apr 6 09:21:52.345 2018 (UTC + 8:00)
System Uptime: 0 days 0:19:52.226
Loading Kernel Symbols
...............................................................
...Page 34d366 not present in the dump file. Type ".hh dbgerr004" for details
.............................................................
...........................................Page 11d559 not present in the dump file. Type ".hh dbgerr004" for details
...............
Press ctrl-c (cdb, kd, ntsd) or ctrl-break (windbg) to abort symbol loads that take too long.
Run !sym noisy before .reload to track down problems loading symbols.
......
........................
Loading User Symbols
.....
Loading unloaded module list
...............
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck EF, {ffffe08fca7a9580, 0, 0, 0}
Page 370401 not present in the dump file. Type ".hh dbgerr004" for details
Page 370401 not present in the dump file. Type ".hh dbgerr004" for details
Page 11d559 not present in the dump file. Type ".hh dbgerr004" for details
Page 11d559 not present in the dump file. Type ".hh dbgerr004" for details
Page 372286 not present in the dump file. Type ".hh dbgerr004" for details
Page 372286 not present in the dump file. Type ".hh dbgerr004" for details
Page 34d366 not present in the dump file. Type ".hh dbgerr004" for details
Page 34d366 not present in the dump file. Type ".hh dbgerr004" for details
Probably caused by : ntdll.dll ( ntdll!NtTerminateProcess+14 )
Followup: MachineOwner
2: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
CRITICAL_PROCESS_DIED (ef)
A critical system process died
Arguments:
Arg1: ffffe08fca7a9580, Process object or thread object
Arg2: 0000000000000000, If this is 0, a process died. If this is 1, a thread died.
Arg3: 0000000000000000
Arg4: 0000000000000000
Debugging Details:
DUMP_CLASS: 1
DUMP_QUALIFIER: 401
BUILD_VERSION_STRING: 16299.15.amd64fre.rs3_release.170928-1534
SYSTEM_MANUFACTURER: LENOVO
SYSTEM_PRODUCT_NAME: 80XK
SYSTEM_SKU: LENOVO_MT_80XK_BU_idea_FM_ideapad 320-14IKB
SYSTEM_VERSION: Lenovo ideapad 320-14IKB
BIOS_VENDOR: LENOVO
BIOS_VERSION: 4WCN38WW
BIOS_DATE: 12/25/2017
BASEBOARD_MANUFACTURER: LENOVO
BASEBOARD_PRODUCT: LNVNB161216
BASEBOARD_VERSION: SDK0J40700 WIN
DUMP_TYPE: 1
BUGCHECK_P1: ffffe08fca7a9580
BUGCHECK_P2: 0
BUGCHECK_P3: 0
BUGCHECK_P4: 0
PROCESS_NAME: svchost.exe
CRITICAL_PROCESS: svchost.exe
EXCEPTION_CODE: (NTSTATUS) 0xc3c87080 - <Unable to get error code text>
ERROR_CODE: (NTSTATUS) 0xc3c87080 - <Unable to get error code text>
CPU_COUNT: 4
CPU_MHZ: b58
CPU_VENDOR: GenuineIntel
CPU_FAMILY: 6
CPU_MODEL: 8e
CPU_STEPPING: 9
CPU_MICROCODE: 6,8e,9,0 (F,M,S,R) SIG: 7C'00000000 (cache) 7C'00000000 (init)
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
BUGCHECK_STR: 0xEF
CURRENT_IRQL: 0
ANALYSIS_SESSION_HOST: LAPTOP-5327MES9
ANALYSIS_SESSION_TIME: 04-07-2018 13:22:01.0442
ANALYSIS_VERSION: 10.0.14321.1024 amd64fre
LAST_CONTROL_TRANSFER: from fffff800ab92126f to fffff800ab382510
STACK_TEXT:
ffff9302d9576838 fffff800ab92126f : 00000000000000ef ffffe08fca7a9580 0000000000000000 0000000000000000 : nt!KeBugCheckEx
ffff9302d9576840 fffff800ab857bfd : ffffe08fca7a95c0 ffffe08fca7a9580 ffffe08fca7a9580 0000000040010004 : nt!PspCatchCriticalBreak+0xff
ffff9302d95768e0 fffff800ab66c0a8 : ffffe08f00000000 ffffe08fca7a9580 ffffe08fca7a9858 ffffe08fca7a9580 : nt!PspTerminateAllThreads+0x113421
ffff9302d9576950 fffff800ab66be91 : ffffffffffffffff ffff9302d9576a80 ffffe08fc6e42580 0000000000000001 : nt!PspTerminateProcess+0xe0
ffff9302d9576990 fffff800ab395003 : ffffe08f000030d4 ffffe08fc3c87080 ffffe08fca7a9580 0000020a7c841980 : nt!NtTerminateProcess+0xa9
ffff9302d9576a00 00007ffd3f7e0404 : 0000000000000000 0000000000000000 0000000000000000 0000000000000000 : nt!KiSystemServiceCopyEnd+0x13
0000003c133ffbb8 0000000000000000 : 0000000000000000 0000000000000000 0000000000000000 0000000000000000 : ntdll!NtTerminateProcess+0x14
STACK_COMMAND: kb
THREAD_SHA1_HASH_MOD_FUNC: 1ee16e27f2a3bf32487936ba1484cfcaf564e2dc
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: efd501109c2111ca07b61e101773ddd7f430ba82
THREAD_SHA1_HASH_MOD: fce38ccd7b727228240c1b437cae1484437f51f9
FOLLOWUP_IP:
ntdll!NtTerminateProcess+14
00007ffd`3f7e0404 c3 ret
FAULT_INSTR_CODE: c32ecdc3
SYMBOL_STACK_INDEX: 6
SYMBOL_NAME: ntdll!NtTerminateProcess+14
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: ntdll
IMAGE_NAME: ntdll.dll
DEBUG_FLR_IMAGE_TIMESTAMP: 0
BUCKET_ID_FUNC_OFFSET: 14
FAILURE_BUCKET_ID: 0xEF_svchost.exe_BUGCHECK_CRITICAL_PROCESS_c3c87080_ntdll!NtTerminateProcess
BUCKET_ID: 0xEF_svchost.exe_BUGCHECK_CRITICAL_PROCESS_c3c87080_ntdll!NtTerminateProcess
PRIMARY_PROBLEM_CLASS: 0xEF_svchost.exe_BUGCHECK_CRITICAL_PROCESS_c3c87080_ntdll!NtTerminateProcess
TARGET_TIME: 2018-04-06T01:21:52.000Z
OSBUILD: 16299
OSSERVICEPACK: 0
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK: 784
PRODUCT_TYPE: 1
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS Personal
OS_LOCALE:
USER_LCID: 0
OSBUILD_TIMESTAMP: 2018-03-01 13:36:55
BUILDDATESTAMP_STR: 170928-1534
BUILDLAB_STR: rs3_release
BUILDOSVER_STR: 10.0.16299.15.amd64fre.rs3_release.170928-1534
ANALYSIS_SESSION_ELAPSED_TIME: 7a1
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:0xef_svchost.exe_bugcheck_critical_process_c3c87080_ntdll!ntterminateprocess
FAILURE_ID_HASH: {360917f2-1fa3-626d-e8c8-9c2c31c73311}
Followup: MachineOwner
2: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
CRITICAL_PROCESS_DIED (ef)
A critical system process died
Arguments:
Arg1: ffffe08fca7a9580, Process object or thread object
Arg2: 0000000000000000, If this is 0, a process died. If this is 1, a thread died.
Arg3: 0000000000000000
Arg4: 0000000000000000
Debugging Details:
DUMP_CLASS: 1
DUMP_QUALIFIER: 401
BUILD_VERSION_STRING: 16299.15.amd64fre.rs3_release.170928-1534
SYSTEM_MANUFACTURER: LENOVO
SYSTEM_PRODUCT_NAME: 80XK
SYSTEM_SKU: LENOVO_MT_80XK_BU_idea_FM_ideapad 320-14IKB
SYSTEM_VERSION: Lenovo ideapad 320-14IKB
BIOS_VENDOR: LENOVO
BIOS_VERSION: 4WCN38WW
BIOS_DATE: 12/25/2017
BASEBOARD_MANUFACTURER: LENOVO
BASEBOARD_PRODUCT: LNVNB161216
BASEBOARD_VERSION: SDK0J40700 WIN
DUMP_TYPE: 1
BUGCHECK_P1: ffffe08fca7a9580
BUGCHECK_P2: 0
BUGCHECK_P3: 0
BUGCHECK_P4: 0
PROCESS_NAME: svchost.exe
CRITICAL_PROCESS: svchost.exe
EXCEPTION_CODE: (NTSTATUS) 0xc3c87080 - <Unable to get error code text>
ERROR_CODE: (NTSTATUS) 0xc3c87080 - <Unable to get error code text>
CPU_COUNT: 4
CPU_MHZ: b58
CPU_VENDOR: GenuineIntel
CPU_FAMILY: 6
CPU_MODEL: 8e
CPU_STEPPING: 9
CPU_MICROCODE: 6,8e,9,0 (F,M,S,R) SIG: 7C'00000000 (cache) 7C'00000000 (init)
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
BUGCHECK_STR: 0xEF
CURRENT_IRQL: 0
ANALYSIS_SESSION_HOST: LAPTOP-5327MES9
ANALYSIS_SESSION_TIME: 04-07-2018 13:22:21.0783
ANALYSIS_VERSION: 10.0.14321.1024 amd64fre
LAST_CONTROL_TRANSFER: from fffff800ab92126f to fffff800ab382510
STACK_TEXT:
ffff9302d9576838 fffff800ab92126f : 00000000000000ef ffffe08fca7a9580 0000000000000000 0000000000000000 : nt!KeBugCheckEx
ffff9302d9576840 fffff800ab857bfd : ffffe08fca7a95c0 ffffe08fca7a9580 ffffe08fca7a9580 0000000040010004 : nt!PspCatchCriticalBreak+0xff
ffff9302d95768e0 fffff800ab66c0a8 : ffffe08f00000000 ffffe08fca7a9580 ffffe08fca7a9858 ffffe08fca7a9580 : nt!PspTerminateAllThreads+0x113421
ffff9302d9576950 fffff800ab66be91 : ffffffffffffffff ffff9302d9576a80 ffffe08fc6e42580 0000000000000001 : nt!PspTerminateProcess+0xe0
ffff9302d9576990 fffff800ab395003 : ffffe08f000030d4 ffffe08fc3c87080 ffffe08fca7a9580 0000020a7c841980 : nt!NtTerminateProcess+0xa9
ffff9302d9576a00 00007ffd3f7e0404 : 0000000000000000 0000000000000000 0000000000000000 0000000000000000 : nt!KiSystemServiceCopyEnd+0x13
0000003c133ffbb8 0000000000000000 : 0000000000000000 0000000000000000 0000000000000000 0000000000000000 : ntdll!NtTerminateProcess+0x14
STACK_COMMAND: kb
THREAD_SHA1_HASH_MOD_FUNC: 1ee16e27f2a3bf32487936ba1484cfcaf564e2dc
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: efd501109c2111ca07b61e101773ddd7f430ba82
THREAD_SHA1_HASH_MOD: fce38ccd7b727228240c1b437cae1484437f51f9
FOLLOWUP_IP:
ntdll!NtTerminateProcess+14
00007ffd`3f7e0404 c3 ret
FAULT_INSTR_CODE: c32ecdc3
SYMBOL_STACK_INDEX: 6
SYMBOL_NAME: ntdll!NtTerminateProcess+14
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: ntdll
IMAGE_NAME: ntdll.dll
DEBUG_FLR_IMAGE_TIMESTAMP: 0
BUCKET_ID_FUNC_OFFSET: 14
FAILURE_BUCKET_ID: 0xEF_svchost.exe_BUGCHECK_CRITICAL_PROCESS_c3c87080_ntdll!NtTerminateProcess
BUCKET_ID: 0xEF_svchost.exe_BUGCHECK_CRITICAL_PROCESS_c3c87080_ntdll!NtTerminateProcess
PRIMARY_PROBLEM_CLASS: 0xEF_svchost.exe_BUGCHECK_CRITICAL_PROCESS_c3c87080_ntdll!NtTerminateProcess
TARGET_TIME: 2018-04-06T01:21:52.000Z
OSBUILD: 16299
OSSERVICEPACK: 0
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK: 784
PRODUCT_TYPE: 1
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS Personal
OS_LOCALE:
USER_LCID: 0
OSBUILD_TIMESTAMP: 2018-03-01 13:36:55
BUILDDATESTAMP_STR: 170928-1534
BUILDLAB_STR: rs3_release
BUILDOSVER_STR: 10.0.16299.15.amd64fre.rs3_release.170928-1534
ANALYSIS_SESSION_ELAPSED_TIME: 6b7
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:0xef_svchost.exe_bugcheck_critical_process_c3c87080_ntdll!ntterminateprocess
FAILURE_ID_HASH: {360917f2-1fa3-626d-e8c8-9c2c31c73311}
Followup: MachineOwner
Windows for home | Windows 10 | 睡眠與電源開啟、關閉
鎖定的問題。 此問題已從 Microsoft 支援服務社群移轉。 您可以對其是否有幫助進行投票，但無法對問題新增註解或回覆，或進行追蹤。
-
匿名
2018-04-09T06:12:51+00:00 -
匿名
2018-04-09T06:27:47+00:00 您好，
沒有看到疑似防毒軟體的程式，
在安全模式下關機試試有沒有這個問題，
在 Windows 10 中以安全模式啟動電腦 - Windows Help
Ans:沒有問題
如果沒有問題，從開機啓動軟體裏面找問題軟體，軟體 32位元的優先排查。
如果也出現問題，搜cmd 右鍵點擊，選擇以系統管理員身份運行，
輸入 netsh winsock reset 重開機試試，
或者輸入 for %1 in (%windir%\system32\*.dll) do regsvr32.exe /s %1 重開機試試。
以上兩種指令均輸入過，今天電腦運作時重開機都沒發生藍屏現象
如有更新再告知各位
-
匿名
2018-04-10T03:35:40+00:00 您好，
好的，先測試一段時間看看，如果還出現問題可以繼續回復此貼，
感謝您使用微軟產品。
-
匿名
2018-04-13T02:04:55+00:00 Dears
各位好，今天在使用Skype通訊時發生了藍屏現象，以下是memory dump file
Microsoft (R) Windows Debugger Version 10.0.14321.1024 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Windows\MEMORY.DMP]
Kernel Bitmap Dump File: Kernel address space is available, User address space may not be available.
Symbol search path is: srv*
Executable search path is:
Windows 10 Kernel Version 16299 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 16299.15.amd64fre.rs3_release.170928-1534
Machine Name:
Kernel base = 0xfffff802
dea00000 PsLoadedModuleList = 0xfffff802ded66070Debug session time: Fri Apr 13 09:55:18.844 2018 (UTC + 8:00)
System Uptime: 0 days 14:19:49.718
Loading Kernel Symbols
...............................................................
................................................................
................................................................
..........
Loading User Symbols
.....
Loading unloaded module list
..................
Loading Wow64 Symbols
............................
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck EF, {ffffbe864e899080, 0, 0, 0}
Page 3e0d0 not present in the dump file. Type ".hh dbgerr004" for details
Page 3e0d0 not present in the dump file. Type ".hh dbgerr004" for details
Page 36474b not present in the dump file. Type ".hh dbgerr004" for details
Page 36474b not present in the dump file. Type ".hh dbgerr004" for details
Page 13e56a not present in the dump file. Type ".hh dbgerr004" for details
Page 13e56a not present in the dump file. Type ".hh dbgerr004" for details
"C:\WINDOWS\System32\KERNELBASE.dll" was not found in the image list.
Debugger will attempt to load "C:\WINDOWS\System32\KERNELBASE.dll" at given base 00000000`00000000.
Please provide the full image name, including the extension (i.e. kernel32.dll)
for more reliable results.Base address and size overrides can be given as
.reload <image.ext>=<base>,<size>.
Unable to add module at 00000000`00000000
Probably caused by : wow64cpu.dll ( wow64cpu!CpupSyscallStub+c )
Followup: MachineOwner
2: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
CRITICAL_PROCESS_DIED (ef)
A critical system process died
Arguments:
Arg1: ffffbe864e899080, Process object or thread object
Arg2: 0000000000000000, If this is 0, a process died. If this is 1, a thread died.
Arg3: 0000000000000000
Arg4: 0000000000000000
Debugging Details:
DUMP_CLASS: 1
DUMP_QUALIFIER: 401
BUILD_VERSION_STRING: 16299.15.amd64fre.rs3_release.170928-1534
SYSTEM_MANUFACTURER: LENOVO
SYSTEM_PRODUCT_NAME: 80XK
SYSTEM_SKU: LENOVO_MT_80XK_BU_idea_FM_ideapad 320-14IKB
SYSTEM_VERSION: Lenovo ideapad 320-14IKB
BIOS_VENDOR: LENOVO
BIOS_VERSION: 4WCN39WW
BIOS_DATE: 02/24/2018
BASEBOARD_MANUFACTURER: LENOVO
BASEBOARD_PRODUCT: LNVNB161216
BASEBOARD_VERSION: SDK0J40700 WIN
DUMP_TYPE: 1
BUGCHECK_P1: ffffbe864e899080
BUGCHECK_P2: 0
BUGCHECK_P3: 0
BUGCHECK_P4: 0
PROCESS_NAME: svchost.exe
CRITICAL_PROCESS: svchost.exe
EXCEPTION_CODE: (Win32) 0x4e9d54c0 (1318933696) - <Unable to get error code text>
ERROR_CODE: (NTSTATUS) 0x4e9d54c0 - <Unable to get error code text>
CPU_COUNT: 4
CPU_MHZ: b58
CPU_VENDOR: GenuineIntel
CPU_FAMILY: 6
CPU_MODEL: 8e
CPU_STEPPING: 9
CPU_MICROCODE: 6,8e,9,0 (F,M,S,R) SIG: 84'00000000 (cache) 84'00000000 (init)
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
BUGCHECK_STR: 0xEF
CURRENT_IRQL: 0
ANALYSIS_SESSION_HOST: LAPTOP-5327MES9
ANALYSIS_SESSION_TIME: 04-13-2018 09:59:44.0431
ANALYSIS_VERSION: 10.0.14321.1024 amd64fre
LAST_CONTROL_TRANSFER: from fffff802df1132ff to fffff802deb75930
STACK_TEXT:
ffff9580
cb65f878 fffff802df1132ff : 00000000000000ef ffffbe864e899080 0000000000000000 0000000000000000 : nt!KeBugCheckExffff9580
cb65f880 fffff802df049c95 : 0000000074693bc0 ffff83025a1bda18 0000000000000100 0000000000000000 : nt!PspCatchCriticalBreak+0xffffff9580
cb65f920 fffff802dee5df55 : ffffffff00000000 0000000000000000 ffffbe864e899080 0000000000000000 : nt!PspTerminateAllThreads+0x113499ffff9580
cb65f990 fffff802deb87513 : ffffbe864e9d54c0 ffffbe864e9d54c0 ffffbe864e899080 0000000000000001 : nt!NtTerminateProcess+0x19dffff9580
cb65fa00 00000000712e1e5c : 00000000712e1e1b 000000237782e88c 0000000071280023 00000000058160f8 : nt!KiSystemServiceCopyEnd+0x1300000000
00a5e998 00000000712e1e1b : 000000237782e88c 0000000071280023 00000000058160f8 0000000000a9fbd4 : wow64cpu!CpupSyscallStub+0xc00000000
00a5e9a0 000000007129ac86 : 00000000008c7000 0000000000f300e0 0000000000000000 0000000000a5f290 : wow64cpu!Thunk0Arg+0x500000000
00a5ea50 000000007128bea0 : 0000000000000000 0000000000a5eab0 0000000000c03b18 0000000000000000 : wow64!RunCpuSimulation+0xecd600000000
00a5ea80 00007ff81c1d5b3d : 0000000000f300e0 0000000000000010 00000000008c6000 0000000000000003 : wow64!Wow64LdrpInitialize+0x12000000000
00a5ed30 00007ff81c17941e : 0000000000000001 0000000000000000 0000000000000000 0000000000000001 : ntdll!LdrpInitializeProcess+0x18a100000000
00a5f170 00007ff81c1792db : 0000000000a5f290 0000000000000000 0000000000000000 00000000008c8000 : ntdll!LdrpInitialize+0x12e00000000
00a5f210 00007ff81c17928e : 0000000000a5f290 0000000000000000 0000000000000000 0000000000000000 : ntdll!LdrpInitialize+0x3b00000000
00a5f240 0000000000000000 : 0000000000000000 0000000000000000 0000000000000000 0000000000000000 : ntdll!LdrInitializeThunk+0xeSTACK_COMMAND: kb
THREAD_SHA1_HASH_MOD_FUNC: ce05886d14d8a748c21a26efbad171a688375260
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 5f1fa4b9148680f10ec1ec033b82ba059bb7ddeb
THREAD_SHA1_HASH_MOD: dd512ffc1f36f2777629d41b4b8c3e0a72698ccc
FOLLOWUP_IP:
wow64cpu!CpupSyscallStub+c
00000000`712e1e5c c3 ret
FAULT_INSTR_CODE: c32ecdc3
SYMBOL_STACK_INDEX: 5
SYMBOL_NAME: wow64cpu!CpupSyscallStub+c
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: wow64cpu
IMAGE_NAME: wow64cpu.dll
DEBUG_FLR_IMAGE_TIMESTAMP: 5e2e7e70
BUCKET_ID_FUNC_OFFSET: c
FAILURE_BUCKET_ID: 0xEF_svchost.exe_BUGCHECK_CRITICAL_PROCESS_4e9d54c0_wow64cpu!CpupSyscallStub
BUCKET_ID: 0xEF_svchost.exe_BUGCHECK_CRITICAL_PROCESS_4e9d54c0_wow64cpu!CpupSyscallStub
PRIMARY_PROBLEM_CLASS: 0xEF_svchost.exe_BUGCHECK_CRITICAL_PROCESS_4e9d54c0_wow64cpu!CpupSyscallStub
TARGET_TIME: 2018-04-13T01:55:18.000Z
OSBUILD: 16299
OSSERVICEPACK: 0
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK: 784
PRODUCT_TYPE: 1
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS Personal
OS_LOCALE:
USER_LCID: 0
OSBUILD_TIMESTAMP: 2018-03-30 11:22:49
BUILDDATESTAMP_STR: 170928-1534
BUILDLAB_STR: rs3_release
BUILDOSVER_STR: 10.0.16299.15.amd64fre.rs3_release.170928-1534
ANALYSIS_SESSION_ELAPSED_TIME: 956
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:0xef_svchost.exe_bugcheck_critical_process_4e9d54c0_wow64cpu!cpupsyscallstub
FAILURE_ID_HASH: {2450aad2-4c97-4442-8e07-eefc3bc0be9d}
Followup: MachineOwner
2: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
CRITICAL_PROCESS_DIED (ef)
A critical system process died
Arguments:
Arg1: ffffbe864e899080, Process object or thread object
Arg2: 0000000000000000, If this is 0, a process died. If this is 1, a thread died.
Arg3: 0000000000000000
Arg4: 0000000000000000
Debugging Details:
DUMP_CLASS: 1
DUMP_QUALIFIER: 401
BUILD_VERSION_STRING: 16299.15.amd64fre.rs3_release.170928-1534
SYSTEM_MANUFACTURER: LENOVO
SYSTEM_PRODUCT_NAME: 80XK
SYSTEM_SKU: LENOVO_MT_80XK_BU_idea_FM_ideapad 320-14IKB
SYSTEM_VERSION: Lenovo ideapad 320-14IKB
BIOS_VENDOR: LENOVO
BIOS_VERSION: 4WCN39WW
BIOS_DATE: 02/24/2018
BASEBOARD_MANUFACTURER: LENOVO
BASEBOARD_PRODUCT: LNVNB161216
BASEBOARD_VERSION: SDK0J40700 WIN
DUMP_TYPE: 1
BUGCHECK_P1: ffffbe864e899080
BUGCHECK_P2: 0
BUGCHECK_P3: 0
BUGCHECK_P4: 0
PROCESS_NAME: svchost.exe
CRITICAL_PROCESS: svchost.exe
EXCEPTION_CODE: (Win32) 0x4e9d54c0 (1318933696) - <Unable to get error code text>
ERROR_CODE: (NTSTATUS) 0x4e9d54c0 - <Unable to get error code text>
CPU_COUNT: 4
CPU_MHZ: b58
CPU_VENDOR: GenuineIntel
CPU_FAMILY: 6
CPU_MODEL: 8e
CPU_STEPPING: 9
CPU_MICROCODE: 6,8e,9,0 (F,M,S,R) SIG: 84'00000000 (cache) 84'00000000 (init)
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
BUGCHECK_STR: 0xEF
CURRENT_IRQL: 0
ANALYSIS_SESSION_HOST: LAPTOP-5327MES9
ANALYSIS_SESSION_TIME: 04-13-2018 09:59:46.0901
ANALYSIS_VERSION: 10.0.14321.1024 amd64fre
LAST_CONTROL_TRANSFER: from fffff802df1132ff to fffff802deb75930
STACK_TEXT:
ffff9580
cb65f878 fffff802df1132ff : 00000000000000ef ffffbe864e899080 0000000000000000 0000000000000000 : nt!KeBugCheckExffff9580
cb65f880 fffff802df049c95 : 0000000074693bc0 ffff83025a1bda18 0000000000000100 0000000000000000 : nt!PspCatchCriticalBreak+0xffffff9580
cb65f920 fffff802dee5df55 : ffffffff00000000 0000000000000000 ffffbe864e899080 0000000000000000 : nt!PspTerminateAllThreads+0x113499ffff9580
cb65f990 fffff802deb87513 : ffffbe864e9d54c0 ffffbe864e9d54c0 ffffbe864e899080 0000000000000001 : nt!NtTerminateProcess+0x19dffff9580
cb65fa00 00000000712e1e5c : 00000000712e1e1b 000000237782e88c 0000000071280023 00000000058160f8 : nt!KiSystemServiceCopyEnd+0x1300000000
00a5e998 00000000712e1e1b : 000000237782e88c 0000000071280023 00000000058160f8 0000000000a9fbd4 : wow64cpu!CpupSyscallStub+0xc00000000
00a5e9a0 000000007129ac86 : 00000000008c7000 0000000000f300e0 0000000000000000 0000000000a5f290 : wow64cpu!Thunk0Arg+0x500000000
00a5ea50 000000007128bea0 : 0000000000000000 0000000000a5eab0 0000000000c03b18 0000000000000000 : wow64!RunCpuSimulation+0xecd600000000
00a5ea80 00007ff81c1d5b3d : 0000000000f300e0 0000000000000010 00000000008c6000 0000000000000003 : wow64!Wow64LdrpInitialize+0x12000000000
00a5ed30 00007ff81c17941e : 0000000000000001 0000000000000000 0000000000000000 0000000000000001 : ntdll!LdrpInitializeProcess+0x18a100000000
00a5f170 00007ff81c1792db : 0000000000a5f290 0000000000000000 0000000000000000 00000000008c8000 : ntdll!LdrpInitialize+0x12e00000000
00a5f210 00007ff81c17928e : 0000000000a5f290 0000000000000000 0000000000000000 0000000000000000 : ntdll!LdrpInitialize+0x3b00000000
00a5f240 0000000000000000 : 0000000000000000 0000000000000000 0000000000000000 0000000000000000 : ntdll!LdrInitializeThunk+0xeSTACK_COMMAND: kb
THREAD_SHA1_HASH_MOD_FUNC: ce05886d14d8a748c21a26efbad171a688375260
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 5f1fa4b9148680f10ec1ec033b82ba059bb7ddeb
THREAD_SHA1_HASH_MOD: dd512ffc1f36f2777629d41b4b8c3e0a72698ccc
FOLLOWUP_IP:
wow64cpu!CpupSyscallStub+c
00000000`712e1e5c c3 ret
FAULT_INSTR_CODE: c32ecdc3
SYMBOL_STACK_INDEX: 5
SYMBOL_NAME: wow64cpu!CpupSyscallStub+c
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: wow64cpu
IMAGE_NAME: wow64cpu.dll
DEBUG_FLR_IMAGE_TIMESTAMP: 5e2e7e70
BUCKET_ID_FUNC_OFFSET: c
FAILURE_BUCKET_ID: 0xEF_svchost.exe_BUGCHECK_CRITICAL_PROCESS_4e9d54c0_wow64cpu!CpupSyscallStub
BUCKET_ID: 0xEF_svchost.exe_BUGCHECK_CRITICAL_PROCESS_4e9d54c0_wow64cpu!CpupSyscallStub
PRIMARY_PROBLEM_CLASS: 0xEF_svchost.exe_BUGCHECK_CRITICAL_PROCESS_4e9d54c0_wow64cpu!CpupSyscallStub
TARGET_TIME: 2018-04-13T01:55:18.000Z
OSBUILD: 16299
OSSERVICEPACK: 0
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK: 784
PRODUCT_TYPE: 1
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS Personal
OS_LOCALE:
USER_LCID: 0
OSBUILD_TIMESTAMP: 2018-03-30 11:22:49
BUILDDATESTAMP_STR: 170928-1534
BUILDLAB_STR: rs3_release
BUILDOSVER_STR: 10.0.16299.15.amd64fre.rs3_release.170928-1534
ANALYSIS_SESSION_ELAPSED_TIME: b6a
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:0xef_svchost.exe_bugcheck_critical_process_4e9d54c0_wow64cpu!cpupsyscallstub
FAILURE_ID_HASH: {2450aad2-4c97-4442-8e07-eefc3bc0be9d}
Followup: MachineOwner
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(41.6, 32%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
温弘隆 13,220 信譽點數 志願仲裁者2018-04-13T02:24:19+00:00 能看一下事件檢視器的內容錯誤訊息?
一般如果發現事件異常發生平繁我會全新安裝
全新安裝的會較穩定,Windows 10 1803也快發表了
先備份你的資料準備重裝! (我裝了60次 Windows 10)
我因 Skype 市集版用不慣, 昨天改到 PCHOME Skype
Store Skype 已經移除,你要不要試試?