none
电脑蓝屏 A critical system process died RRS feed

  • 问题

  • 各位大神好,

      现在发现一台新装的三星笔记本频繁出现蓝屏问题,代码是A critical system process died,系统是WIN10 64 PRO.

    现在我已经做的操作是:1:WIN10 UPDATE 更新到最新 2:三星官方自带的驱动软件Samsung update,BIOS和驱动更新到最新 3:SFC \scannow 和 CHKDSK没有问题。

    WINDBG Log如下:

     

    Microsoft (R) Windows Debugger Version 10.0.18362.1 X86

    Copyright (c) Microsoft Corporation. All rights reserved.

     

     

    Loading Dump File [D:\MEMORY.DMP]

    Kernel Bitmap Dump File: Kernel address space is available, User address space may not be available.

     

     

    ************* Path validation summary **************

    Response                         Time (ms)     Location

    Deferred                                       SRV*C:\Symbols*http://msdl.microsoft.com/download/symbols

    Symbol search path is: SRV*C:\Symbols*http://msdl.microsoft.com/download/symbols

    Executable search path is:

    Windows 10 Kernel Version 18362 MP (4 procs) Free x64

    Product: WinNt, suite: TerminalServer SingleUserTS

    Built by: 18362.1.amd64fre.19h1_release.190318-1202

    Machine Name:

    Kernel base = 0xfffff804`4f000000 PsLoadedModuleList = 0xfffff804`4f446490

    Debug session time: Thu Aug 29 17:52:24.913 2019 (UTC + 8:00)

    System Uptime: 0 days 0:04:57.681

    Loading Kernel Symbols

    .....................................Page 20015015e too large to be in the dump file.

    Page 2001fd55d too large to be in the dump file.

    ..........................

    ................................................................

    ................................................................

    ...............

    Loading User Symbols

    ................................................................

    ...................................

    Loading unloaded module list

    ...............

    For analysis of this file, run !analyze -v

    3: kd> !analyze -v

    *******************************************************************************

    *                                                                             *

    *                        Bugcheck Analysis                                    *

    *                                                                             *

    *******************************************************************************

     

    CRITICAL_PROCESS_DIED (ef)

            A critical system process died

    Arguments:

    Arg1: ffffa78f50ece080, Process object or thread object

    Arg2: 0000000000000000, If this is 0, a process died. If this is 1, a thread died.

    Arg3: 0000000000000000

    Arg4: 0000000000000000

     

    Debugging Details:

    ------------------

     

    Page 20015015e too large to be in the dump file.

    Page 2001fd55d too large to be in the dump file.

     

    KEY_VALUES_STRING: 1

     

     

    PROCESSES_ANALYSIS: 1

     

    SERVICE_ANALYSIS: 1

     

    STACKHASH_ANALYSIS: 1

     

    TIMELINE_ANALYSIS: 1

     

     

    DUMP_CLASS: 1

     

    DUMP_QUALIFIER: 401

     

    BUILD_VERSION_STRING:  18362.1.amd64fre.19h1_release.190318-1202

     

    SYSTEM_MANUFACTURER:  SAMSUNG ELECTRONICS CO., LTD.

     

    SYSTEM_PRODUCT_NAME:  900X3L

     

    SYSTEM_SKU:  ATIV A5A5-A5A5-A5A5-A5A5-A5A5-PAFN

     

    SYSTEM_VERSION:  P10AFN

     

    BIOS_VENDOR:  American Megatrends Inc.

     

    BIOS_VERSION:  P10AFN.046.180605.KS

     

    BIOS_DATE:  06/05/2018

     

    BASEBOARD_MANUFACTURER:  SAMSUNG ELECTRONICS CO., LTD.

     

    BASEBOARD_PRODUCT:  NP900X3L-EG1CN

     

    BASEBOARD_VERSION:  SGL8830A0H-C01-G001-S0002+10.0.14393

     

    DUMP_TYPE:  1

     

    BUGCHECK_P1: ffffa78f50ece080

     

    BUGCHECK_P2: 0

     

    BUGCHECK_P3: 0

     

    BUGCHECK_P4: 0

     

    PROCESS_NAME:  svchost.exe

     

    CRITICAL_PROCESS:  svchost.exe

     

    EXCEPTION_RECORD:  ffffa78f50ece640 -- (.exr 0xffffa78f50ece640)

    ExceptionAddress: 0000000000000000

       ExceptionCode: 00000000

      ExceptionFlags: 00000000

    NumberParameters: 0

     

    EXCEPTION_CODE: (NTSTATUS) 0x54e5b080 - <Unable to get error code text>

     

    ERROR_CODE: (NTSTATUS) 0x54e5b080 - <Unable to get error code text>

     

    CPU_COUNT: 4

     

    CPU_MHZ: a20

     

    CPU_VENDOR:  GenuineIntel

     

    CPU_FAMILY: 6

     

    CPU_MODEL: 4e

     

    CPU_STEPPING: 3

     

    CPU_MICROCODE: 6,4e,3,0 (F,M,S,R)  SIG: C6'00000000 (cache) C6'00000000 (init)

     

    BLACKBOXBSD: 1 (!blackboxbsd)

     

     

    BLACKBOXNTFS: 1 (!blackboxntfs)

     

     

    BLACKBOXPNP: 1 (!blackboxpnp)

     

     

    BLACKBOXWINLOGON: 1

     

    DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT

     

    BUGCHECK_STR:  0xEF

     

    CURRENT_IRQL:  0

     

    ANALYSIS_SESSION_HOST:  CN31LCLI

     

    ANALYSIS_SESSION_TIME:  09-11-2019 11:09:14.0935

     

    ANALYSIS_VERSION: 10.0.18362.1 x86fre

     

    LAST_CONTROL_TRANSFER:  from fffff8044f8c9b99 to fffff8044f1bfcc0

     

    THREAD_SHA1_HASH_MOD_FUNC:  06aab4c21fb1981b10bcb51fdea16d51dac0db36

     

    THREAD_SHA1_HASH_MOD_FUNC_OFFSET:  e275b956c879ffc910b0a64023ce631a0decae24

     

    THREAD_SHA1_HASH_MOD:  560a0dc4c571037edf944f23e2b5cb3a54ebf676

     

    FOLLOWUP_IP:

    ntdll!RtlLookupFunctionEntry+82

    00007ffc`8449e322 448b1c87        mov     r11d,dword ptr [rdi+rax*4]

     

    FAULT_INSTR_CODE:  871c8b44

     

    SYMBOL_STACK_INDEX:  a

     

    SYMBOL_NAME:  ntdll!RtlLookupFunctionEntry+82

     

    FOLLOWUP_NAME:  MachineOwner

     

    MODULE_NAME: ntdll

     

    IMAGE_NAME:  ntdll.dll

     

    DEBUG_FLR_IMAGE_TIMESTAMP:  0

     

    STACK_COMMAND:  .thread ; .cxr ; kb

     

    BUCKET_ID_FUNC_OFFSET:  82

     

    FAILURE_BUCKET_ID:  0xEF_svchost.exe_BUGCHECK_CRITICAL_PROCESS_54e5b080_ntdll!RtlLookupFunctionEntry

     

    BUCKET_ID:  0xEF_svchost.exe_BUGCHECK_CRITICAL_PROCESS_54e5b080_ntdll!RtlLookupFunctionEntry

     

    PRIMARY_PROBLEM_CLASS:  0xEF_svchost.exe_BUGCHECK_CRITICAL_PROCESS_54e5b080_ntdll!RtlLookupFunctionEntry

     

    TARGET_TIME:  2019-08-29T09:52:24.000Z

     

    OSBUILD:  18362

     

    OSSERVICEPACK:  0

     

    SERVICEPACK_NUMBER: 0

     

    OS_REVISION: 0

     

    SUITE_MASK:  272

     

    PRODUCT_TYPE:  1

     

    OSPLATFORM_TYPE:  x64

     

    OSNAME:  Windows 10

     

    OSEDITION:  Windows 10 WinNt TerminalServer SingleUserTS

     

    OS_LOCALE:  

     

    USER_LCID:  0

     

    OSBUILD_TIMESTAMP:  1998-05-31 05:12:57

     

    BUILDDATESTAMP_STR:  190318-1202

     

    BUILDLAB_STR:  19h1_release

     

    BUILDOSVER_STR:  10.0.18362.1.amd64fre.19h1_release.190318-1202

     

    ANALYSIS_SESSION_ELAPSED_TIME:  988b

     

    ANALYSIS_SOURCE:  KM

     

    FAILURE_ID_HASH_STRING:  km:0xef_svchost.exe_bugcheck_critical_process_54e5b080_ntdll!rtllookupfunctionentry

     

    FAILURE_ID_HASH:  {0748a5d3-45e5-7c4c-71dd-dd5f4328a3ec}

     

    Followup:     MachineOwner

    ---------

     

    3: kd>

    ExceptionAddress: 0000000000000000

       ExceptionCode: 00000000

      ExceptionFlags: 00000000

    NumberParameters: 0

    3: kd> !process

    PROCESS ffffa78f50ece080

        SessionId: 0  Cid: 037c    Peb: f936fa2000  ParentCid: 02c4

        DirBase: 218add002  ObjectTable: ffffd68257f7c380  HandleCount: 1173.

        Image: svchost.exe

        VadRoot ffffa78f50e93f10 Vads 182 Clone 0 Private 4318. Modified 196. Locked 1.

        DeviceMap ffffd68253a138a0

        Token                             ffffd68257ea7560

        ElapsedTime                       00:04:52.249

        UserTime                          00:00:00.062

        KernelTime                        00:00:00.093

        QuotaPoolUsage[PagedPool]         785912

        QuotaPoolUsage[NonPagedPool]      27880

        Working Set Sizes (now,min,max)  (9267, 50, 345) (37068KB, 200KB, 1380KB)

        PeakWorkingSetSize                9129

        VirtualSize                       2101410 Mb

        PeakVirtualSize                   2101410 Mb

        PageFaultCount                    11018

        MemoryPriority                    BACKGROUND

        BasePriority                      8

        CommitCharge                      4992

     

            THREAD ffffa78f50ecf080  Cid 037c.0380  Teb: 000000f936fa3000 Win32Thread: 0000000000000000 WAIT: (UserRequest) UserMode Non-Alertable

                ffffa78f50e6d460  SynchronizationEvent

     

            THREAD ffffa78f50f0d080  Cid 037c.03c0  Teb: 000000f936faf000 Win32Thread: 0000000000000000 WAIT: (WrAlertByThreadId) UserMode Non-Alertable

                00007ffc7f351440  Unknown

     

            THREAD ffffa78f50f0e040  Cid 037c.03c4  Teb: 000000f936fb1000 Win32Thread: ffffa78f52e72760 WAIT: (WrAlertByThreadId) UserMode Non-Alertable

                00007ffc7f351440  Unknown

     

            THREAD ffffa78f50f11080  Cid 037c.03d4  Teb: 000000f936fb5000 Win32Thread: 0000000000000000 WAIT: (WrQueue) UserMode Alertable

                ffffa78f50f1a640  QueueObject

     

            THREAD ffffa78f526cd080  Cid 037c.04bc  Teb: 000000f936fc1000 Win32Thread: 0000000000000000 WAIT: (UserRequest) UserMode Non-Alertable

                ffffa78f52650e60  SynchronizationEvent

                ffffa78f5264fb60  SynchronizationEvent

     

            THREAD ffffa78f52713080  Cid 037c.04d0  Teb: 000000f936fc5000 Win32Thread: 0000000000000000 WAIT: (WrQueue) UserMode Alertable

                ffffa78f526db580  QueueObject

     

            THREAD ffffa78f5270d080  Cid 037c.04ec  Teb: 000000f936fc7000 Win32Thread: 0000000000000000 WAIT: (UserRequest) UserMode Non-Alertable

                ffffa78f492a46a0  NotificationEvent

                ffffa78f52663be0  SynchronizationEvent

                ffffa78f52661560  SynchronizationEvent

     

            THREAD ffffa78f5270c080  Cid 037c.04f0  Teb: 000000f936fc9000 Win32Thread: 0000000000000000 WAIT: (WrAlertByThreadId) UserMode Non-Alertable

                0000026b70e299b8  Unknown

     

            THREAD ffffa78f52782080  Cid 037c.0648  Teb: 000000f936fcd000 Win32Thread: 0000000000000000 WAIT: (Executive) UserMode Non-Alertable

                ffffa78f492a40a0  NotificationEvent

     

            THREAD ffffa78f52b82080  Cid 037c.1970  Teb: 000000f936fd7000 Win32Thread: 0000000000000000 WAIT: (WrQueue) UserMode Alertable

                ffffa78f50eef700  QueueObject

     

            THREAD ffffa78f52ba0080  Cid 037c.1a90  Teb: 000000f936fd9000 Win32Thread: 0000000000000000 WAIT: (WrQueue) UserMode Alertable

                ffffa78f50eef700  QueueObject

     

            THREAD ffffa78f52e30080  Cid 037c.1ad4  Teb: 000000f936fdb000 Win32Thread: 0000000000000000 WAIT: (WrQueue) UserMode Alertable

                ffffa78f50eef700  QueueObject

     

            THREAD ffffa78f52f8d080  Cid 037c.1a0c  Teb: 000000f936fdd000 Win32Thread: 0000000000000000 WAIT: (UserRequest) UserMode Non-Alertable

                ffffa78f492a4520  NotificationEvent

                ffffa78f53cf0130  NotificationEvent

     

            THREAD ffffa78f53c3c080  Cid 037c.0600  Teb: 000000f936fdf000 Win32Thread: 0000000000000000 WAIT: (UserRequest) UserMode Non-Alertable

                ffffa78f55310260  NotificationEvent

     

            THREAD ffffa78f53493300  Cid 037c.0d54  Teb: 000000f936fe1000 Win32Thread: 0000000000000000 WAIT: (Executive) UserMode Non-Alertable

                ffffa78f492a40a0  NotificationEvent

     

            THREAD ffffa78f53b64080  Cid 037c.1210  Teb: 000000f936fe3000 Win32Thread: 0000000000000000 WAIT: (UserRequest) UserMode Non-Alertable

                ffffa78f536fa0d0  SynchronizationTimer

     

            THREAD ffffa78f543ca080  Cid 037c.1238  Teb: 000000f936fe5000 Win32Thread: 0000000000000000 WAIT: (WrQueue) UserMode Alertable

                ffffa78f528e2b80  QueueObject

     

            THREAD ffffa78f54690040  Cid 037c.0190  Teb: 000000f936fe7000 Win32Thread: 0000000000000000 WAIT: (Executive) UserMode Non-Alertable

                ffffa78f492a40a0  NotificationEvent

     

            THREAD ffffa78f53e94080  Cid 037c.1eb8  Teb: 000000f936fe9000 Win32Thread: 0000000000000000 WAIT: (WrQueue) UserMode Alertable

                ffffa78f54c54540  QueueObject

     

            THREAD ffffa78f54e5b080  Cid 037c.1f24  Teb: 000000f936feb000 Win32Thread: 0000000000000000 RUNNING on processor 3

            THREAD ffffa78f54e4d080  Cid 037c.1f6c  Teb: 000000f936fed000 Win32Thread: 0000000000000000 WAIT: (WrQueue) UserMode Alertable

                ffffa78f54c5ae40  QueueObject

     

            THREAD ffffa78f54f36080  Cid 037c.1554  Teb: 000000f936fef000 Win32Thread: 0000000000000000 WAIT: (WrAlertByThreadId) UserMode Non-Alertable

                00007ffc7f351440  Unknown

     

            THREAD ffffa78f55098080  Cid 037c.20cc  Teb: 000000f936ff1000 Win32Thread: 0000000000000000 WAIT: (WrQueue) UserMode Alertable

                ffffa78f526db580  QueueObject

     

            THREAD ffffa78f5523e080  Cid 037c.2298  Teb: 000000f936ff3000 Win32Thread: 0000000000000000 WAIT: (Executive) UserMode Non-Alertable

                ffffa78f492a40a0  NotificationEvent

     

            THREAD ffffa78f5521e080  Cid 037c.2374  Teb: 000000f936ff5000 Win32Thread: 0000000000000000 WAIT: (WrQueue) UserMode Alertable

                ffffa78f526db580  QueueObject

     

            THREAD ffffa78f4eeb2080  Cid 037c.1f84  Teb: 000000f936ff7000 Win32Thread: 0000000000000000 WAIT: (WrQueue) UserMode Alertable

                ffffa78f526db580  QueueObject

     

            THREAD ffffa78f5488f080  Cid 037c.2284  Teb: 000000f936ff9000 Win32Thread: 0000000000000000 WAIT: (WrAlertByThreadId) UserMode Non-Alertable

                0000026b70e299b8  Unknown

     

            THREAD ffffa78f5488e080  Cid 037c.15bc  Teb: 000000f936ffb000 Win32Thread: 0000000000000000 WAIT: (UserRequest) UserMode Non-Alertable

                ffffa78f55302760  NotificationEvent

     

            THREAD ffffa78f54def040  Cid 037c.2334  Teb: 000000f936ffd000 Win32Thread: 0000000000000000 WAIT: (Executive) UserMode Non-Alertable

                ffffa78f492a40a0  NotificationEvent

     

            THREAD ffffa78f50fee080  Cid 037c.0234  Teb: 000000f936e00000 Win32Thread: 0000000000000000 WAIT: (UserRequest) UserMode Non-Alertable

                ffffa78f553028e0  NotificationEvent

     

            THREAD ffffa78f52860080  Cid 037c.18cc  Teb: 000000f936e02000 Win32Thread: 0000000000000000 WAIT: (WrAlertByThreadId) UserMode Non-Alertable

                00007ffc7f351440  Unknown

     

            THREAD ffffa78f52908080  Cid 037c.2120  Teb: 000000f936e04000 Win32Thread: 0000000000000000 WAIT: (WrAlertByThreadId) UserMode Non-Alertable

                0000026b70e299b8  Unknown

     

            THREAD ffffa78f550fa040  Cid 037c.1e50  Teb: 000000f936e06000 Win32Thread: 0000000000000000 WAIT: (WrQueue) UserMode Alertable

                ffffa78f50e91e00  QueueObject

     

            THREAD ffffa78f55231080  Cid 037c.170c  Teb: 000000f936e08000 Win32Thread: 0000000000000000 WAIT: (WrQueue) UserMode Alertable

                ffffa78f50e91e00  QueueObject

     

            THREAD ffffa78f550d3080  Cid 037c.1354  Teb: 000000f936e0a000 Win32Thread: 0000000000000000 WAIT: (WrQueue) UserMode Alertable

                ffffa78f50e91e00  QueueObject

     

            THREAD ffffa78f550d4080  Cid 037c.06c4  Teb: 000000f936e0c000 Win32Thread: 0000000000000000 WAIT: (WrQueue) UserMode Alertable

                ffffa78f50e91e00  QueueObject

    2019年9月11日 3:13

全部回复

  • 新装的三星笔记本,是厂家装的还是自己装的,从提示信息上看像该笔记本电脑的处理器有问题,或有安装问题。
    2019年9月11日 5:41
  • 新装的三星笔记本,是厂家装的还是自己装的,从提示信息上看像该笔记本电脑的处理器有问题,或有安装问题。
    谢谢您的回复,是公司部署的系统,统一镜像统一软件,没有安装特别的软件,另外还有两台差不多型号的三星笔记本没有这个问题。
    2019年9月11日 6:34
  • 根据您反应的情况,贵公司部署的系统出现蓝屏问题,应与操作系统软件无关,与三星笔记本的硬件配置相关。
    2019年9月11日 7:35