Здравствуйте. Требуется помощь специалиста. У меня произошло отключение электроэнергии в доме. До этого момента система работала отлично. Сейчас зависает в играх на стопкадре с завидной периодичностью. Я добрался до минидампа файлов, виноват ntoskrnl.exe. Но куда копать дальше, я не знаю. Ссылку на файлы дампов не могу прислать. Файлы не загружаются.
************* Preparing the environment for Debugger Extensions Gallery repositories **************
ExtensionRepository : Implicit
UseExperimentalFeatureForNugetShare : false
AllowNugetExeUpdate : false
AllowNugetMSCredentialProviderInstall : false
AllowParallelInitializationOfLocalRepositories : true
-- Configuring repositories
----> Repository : LocalInstalled, Enabled: true
----> Repository : UserExtensions, Enabled: true
>>>>>>>>>>>>> Preparing the environment for Debugger Extensions Gallery repositories completed, duration 0.000 seconds
************* Waiting for Debugger Extensions Gallery to Initialize **************
>>>>>>>>>>>>> Waiting for Debugger Extensions Gallery to Initialize completed, duration 0.047 seconds
----> Repository : UserExtensions, Enabled: true, Packages count: 0
----> Repository : LocalInstalled, Enabled: true, Packages count: 36
Microsoft (R) Windows Debugger Version 10.0.25877.1004 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Windows\Minidump\062123-12390-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
************* Path validation summary **************
Response Time (ms) Location
Deferred srv*
Symbol search path is: srv*
Executable search path is:
Windows 10 Kernel Version 19041 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Edition build lab: 19041.1.amd64fre.vb_release.191206-1406
Kernel base = 0xfffff800`6da00000 PsLoadedModuleList = 0xfffff800`6e62a2b0
Debug session time: Wed Jun 21 23:12:11.836 2023 (UTC + 4:00)
System Uptime: 0 days 0:00:09.574
Loading Kernel Symbols
...............................................................
.........................................
Loading User Symbols
Unable to read LDR_DATA_TABLE_ENTRY at 00000214`36202ae0 - Win32 error 0n30
Loading unloaded module list
......
WARNING: .reload failed, module list may be incomplete
For analysis of this file, run !analyze -v
nt!KeBugCheckEx:
fffff800`6ddfbca0 48894c2408 mov qword ptr [rsp+8],rcx ss:0018:ffffce85`48dcb940=00000000000000ef
2: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
CRITICAL_PROCESS_DIED (ef)
A critical system process died
Arguments:
Arg1: ffffd2013ad85040, Process object or thread object
Arg2: 0000000000000000, If this is 0, a process died. If this is 1, a thread died.
Arg3: 0000000000000000, The process object that initiated the termination.
Arg4: 0000000000000000
Debugging Details:
------------------
*** WARNING: Check Image - Checksum mismatch - Dump: 0x1fc84, File: 0x24657 - C:\ProgramData\Dbg\sym\crashdmp.sys\985DE65D1e000\crashdmp.sys
KEY_VALUES_STRING: 1
Key : Analysis.CPU.mSec
Value: 7546
Key : Analysis.Elapsed.mSec
Value: 8203
Key : Analysis.IO.Other.Mb
Value: 0
Key : Analysis.IO.Read.Mb
Value: 0
Key : Analysis.IO.Write.Mb
Value: 0
Key : Analysis.Init.CPU.mSec
Value: 655
Key : Analysis.Init.Elapsed.mSec
Value: 73618
Key : Analysis.Memory.CommitPeak.Mb
Value: 80
Key : Bugcheck.Code.LegacyAPI
Value: 0xef
Key : CriticalProcessDied.ExceptionCode
Value: 3ad11040
Key : CriticalProcessDied.Process
Value: smss.exe
Key : Failure.Bucket
Value: 0xEF_smss.exe_BUGCHECK_CRITICAL_PROCESS_3ad11040_nt!PspCatchCriticalBreak
Key : Failure.Hash
Value: {7a7889ef-bead-bbad-8870-2fdd2431d397}
Key : WER.OS.Branch
Value: vb_release
Key : WER.OS.Version
Value: 10.0.19041.1
BUGCHECK_CODE: ef
BUGCHECK_P1: ffffd2013ad85040
BUGCHECK_P2: 0
BUGCHECK_P3: 0
BUGCHECK_P4: 0
FILE_IN_CAB: 062123-12390-01.dmp
PROCESS_NAME: smss.exe
CRITICAL_PROCESS: smss.exe
ERROR_CODE: (NTSTATUS) 0x3ad11040 - <Unable to get error code text>
BLACKBOXNTFS: 1 (!blackboxntfs)
CUSTOMER_CRASH_COUNT: 1
STACK_TEXT:
ffffce85`48dcb938 fffff800`6e30d842 : 00000000`000000ef ffffd201`3ad85040 00000000`00000000 00000000`00000000 : nt!KeBugCheckEx
ffffce85`48dcb940 fffff800`6e20cbb7 : 00000000`00000000 fffff800`6dd13a19 00000000`00000002 fffff800`6dceb06b : nt!PspCatchCriticalBreak+0x10e
ffffce85`48dcb9e0 fffff800`6e099698 : ffffd201`00000000 00000000`00000000 ffffd201`3ad85040 ffffd201`3ad85478 : nt!PspTerminateAllThreads+0x17291b
ffffce85`48dcba50 fffff800`6e09926c : ffffd201`3ad85040 00000000`00000000 000000a5`4c9cf960 00000000`00000018 : nt!PspTerminateProcess+0xe0
ffffce85`48dcba90 fffff800`6de0f4f8 : ffffd201`3ad85040 ffffd201`3ad11040 ffffce85`48dcbb80 00007ff6`00000000 : nt!NtTerminateProcess+0x9c
ffffce85`48dcbb00 00007fff`0d1cd634 : 00007ff6`a6445684 00000000`00000004 000000a5`4c9cf960 00000000`00000001 : nt!KiSystemServiceCopyEnd+0x28
000000a5`4c9cf818 00007ff6`a6445684 : 00000000`00000004 000000a5`4c9cf960 00000000`00000001 00000000`00000000 : 0x00007fff`0d1cd634
000000a5`4c9cf820 00000000`00000004 : 000000a5`4c9cf960 00000000`00000001 00000000`00000000 00000000`00000006 : 0x00007ff6`a6445684
000000a5`4c9cf828 000000a5`4c9cf960 : 00000000`00000001 00000000`00000000 00000000`00000006 000000a5`4c9cf850 : 0x4
000000a5`4c9cf830 00000000`00000001 : 00000000`00000000 00000000`00000006 000000a5`4c9cf850 00009807`b27cce5b : 0x000000a5`4c9cf960
000000a5`4c9cf838 00000000`00000000 : 00000000`00000006 000000a5`4c9cf850 00009807`b27cce5b 00000214`362033d0 : 0x1
SYMBOL_NAME: nt!PspCatchCriticalBreak+10e
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
IMAGE_VERSION: 10.0.19041.2965
STACK_COMMAND: .cxr; .ecxr ; kb
BUCKET_ID_FUNC_OFFSET: 10e
FAILURE_BUCKET_ID: 0xEF_smss.exe_BUGCHECK_CRITICAL_PROCESS_3ad11040_nt!PspCatchCriticalBreak
OS_VERSION: 10.0.19041.1
BUILDLAB_STR: vb_release
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {7a7889ef-bead-bbad-8870-2fdd2431d397}
Followup: MachineOwner
---------
2: kd> lmvm nt
Browse full module list
start end module name
fffff800`6da00000 fffff800`6ea46000 nt (pdb symbols) C:\ProgramData\Dbg\sym\ntkrnlmp.pdb\89284D0CA6ACC8274B9A44BD5AF9290B1\ntkrnlmp.pdb
Loaded symbol image file: ntkrnlmp.exe
Mapped memory image file: C:\ProgramData\Dbg\sym\ntkrnlmp.exe\F71F414A1046000\ntkrnlmp.exe
Image path: ntkrnlmp.exe
Image name: ntkrnlmp.exe
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: F71F414A (This is a reproducible build file hash, not a timestamp)
CheckSum: 00A6A325
ImageSize: 01046000
File version: 10.0.19041.2965
Product version: 10.0.19041.2965
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 1.0 App
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ntkrnlmp.exe
OriginalFilename: ntkrnlmp.exe
ProductVersion: 10.0.19041.2965
FileVersion: 10.0.19041.2965 (WinBuild.160101.0800)
FileDescription: NT Kernel & System
LegalCopyright: © Microsoft Corporation. All rights reserved.
2: kd> lmvm nt
Browse full module list
start end module name
fffff800`6da00000 fffff800`6ea46000 nt (pdb symbols) C:\ProgramData\Dbg\sym\ntkrnlmp.pdb\89284D0CA6ACC8274B9A44BD5AF9290B1\ntkrnlmp.pdb
Loaded symbol image file: ntkrnlmp.exe
Mapped memory image file: C:\ProgramData\Dbg\sym\ntkrnlmp.exe\F71F414A1046000\ntkrnlmp.exe
Image path: ntkrnlmp.exe
Image name: ntkrnlmp.exe
Browse all global symbols functions data
Image was built with /Brepro flag.
Timestamp: F71F414A (This is a reproducible build file hash, not a timestamp)
CheckSum: 00A6A325
ImageSize: 01046000
File version: 10.0.19041.2965
Product version: 10.0.19041.2965
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 1.0 App
File date: 00000000.00000000
Translations: 0409.04b0
Information from resource tables:
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ntkrnlmp.exe
OriginalFilename: ntkrnlmp.exe
ProductVersion: 10.0.19041.2965
FileVersion: 10.0.19041.2965 (WinBuild.160101.0800)
FileDescription: NT Kernel & System
LegalCopyright: © Microsoft Corporation. All rights reserved.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(204.8, 84%, 29%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAS%3C/text%3E%3C/svg%3E)