Windows 10: win10频繁蓝屏，BUGCHECK，事件id1001，检测错误: 0xc0000244

win10升级后，电脑开机后经常蓝屏，有的时候使用过程中或是开机闲置一段时间后，也会蓝屏

BUGCHECK，事件id1001，检测错误: 0xc0000244
提取的dump文件，已经上传至下面的链接中：


https://caplugs-my.sharepoint.com/:f:/g/personal/eric_sun_caplugsllc_protectiveindustries_com/Eq-mPVrg4bBIrfk50NhIBJcBFKyGXuSlRkfafd6WDkCEyg?e=BRzIXf


用WinDbg分析结果如下：



Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64

Copyright (c) Microsoft Corporation. All rights reserved.





Loading Dump File [C:\Users\eric.sun\Desktop\022019-4843-01-Sky.dmp]

Mini Kernel Dump File: Only registers and stack trace are available



Symbol search path is: SRV*C:\Symbols*http://msdl.microsoft.com/download/symbols

Executable search path is:

Windows 7 Kernel Version 17763 MP (4 procs) Free x64

Product: WinNt, suite: TerminalServer SingleUserTS

Machine Name:

Kernel base = 0xfffff800`62e16000 PsLoadedModuleList = 0xfffff800`63231ad0

Debug session time: Wed Feb 20 08:13:59.837 2019 (UTC + 8:00)

System Uptime: 0 days 0:00:23.681

Loading Kernel Symbols

...............................................................

................................................................

..............................................

Loading User Symbols

Loading unloaded module list

.....

Cannot read PEB32 from WOW64 TEB32 0000ebfb - Win32 error 0n30

*******************************************************************************

* *

* Bugcheck Analysis *

* *

*******************************************************************************



Use !analyze -v to get detailed debugging information.



BugCheck C0000244, {ffffffffc0070005, 0, 0, 0}



Probably caused by : Unknown_Image ( PAGE_NOT_ZERO )



Followup: MachineOwner

---------



*** Memory manager detected 60411 instance(s) of page corruption, target is likely to have memory corruption.



1: kd> !analyze -v

*******************************************************************************

* *

* Bugcheck Analysis *

* *

*******************************************************************************



Unknown bugcheck code (c0000244)

Unknown bugcheck description

Arguments:

Arg1: ffffffffc0070005

Arg2: 0000000000000000

Arg3: 0000000000000000

Arg4: 0000000000000000



Debugging Details:

------------------





BUGCHECK_STR: 0xc0000244



ERROR_CODE: (NTSTATUS) 0xc0000244 - {Audit Failed} An attempt to generate a security audit failed.



EXCEPTION_CODE: (NTSTATUS) 0xc0000244 - {Audit Failed} An attempt to generate a security audit failed.



EXCEPTION_PARAMETER1: ffffffffc0070005



EXCEPTION_PARAMETER2: 0000000000000000



EXCEPTION_PARAMETER3: 0000000000000000



EXCEPTION_PARAMETER4: 0



DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT



PROCESS_NAME: lsass.exe



CURRENT_IRQL: 0



BAD_PAGES_DETECTED: ebfb



LAST_CONTROL_TRANSFER: from fffff8006339261a to fffff80062fc9440



STACK_TEXT:

fffff5****4e4 fffff581`fd2ca5c0 : nt!PopGracefulShutdown+0x29a

fffff581`fd2ca4e0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!PopTransitionSystemPowerStateEx+0xcc06





STACK_COMMAND: kb



SYMBOL_NAME: PAGE_NOT_ZERO



FOLLOWUP_NAME: MachineOwner



MODULE_NAME: Unknown_Module



IMAGE_NAME: Unknown_Image



DEBUG_FLR_IMAGE_TIMESTAMP: 0



BUCKET_ID: PAGE_NOT_ZERO



Followup: MachineOwner

---------



*** Memory manager detected 60411 instance(s) of page corruption, target is likely to have memory corruption.



1: kd> lmvm Unknown_Module

start end module name

1: kd> !process

PROCESS ffffb58e22142440

SessionId: none Cid: 032c Peb: ada3706000 ParentCid: 028c

DirBase: 103200002 ObjectTable: ffffc78e877769c0 HandleCount: <Data Not Accessible>

Image: lsass.exe

VadRoot ffffb58e22187390 Vads 1 Clone 0 Private 1837. Modified 255. Locked 15.

DeviceMap ffffc78e85c13960

Token ffffc78e87ef06c0

ReadMemory error: Cannot get nt!KeMaximumIncrement value.

fffff78000000000: Unable to get shared data

ElapsedTime 00:00:00.000

UserTime 00:00:00.000

KernelTime 00:00:00.000

QuotaPoolUsage[PagedPool] 0

QuotaPoolUsage[NonPagedPool] 0

Working Set Sizes (now,min,max) (0, 0, 0) (0KB, 0KB, 0KB)

PeakWorkingSetSize 0

VirtualSize 2101347 Mb

PeakVirtualSize 2101348 Mb

PageFaultCount 0

MemoryPriority BACKGROUND

BasePriority 9

CommitCharge 2041



*** Error in reading nt!_ETHREAD @ ffffb58e2211c080

:)

 

Win10: windows update stuck at never ending loop ?

When in win10:

• Update&security -> Windows update -> Finding update... .... .... ....

Planning to download the latest Win10.ISO (vers.1803) and manually update:
- Then wait that my ordered new SSD arrives and clone the old HDD to it.

 

"The computer has rebooted from a bugcheck. The bugcheck was: 0x00000124 " BSOD on Windows 10.

Hi Jayan,



Please reply to a few questions asked below:

• Since when are you facing the above issue? Did you make any recent changes to the computer?
• Did you try booting the computer in Safe mode and check if the issue persists?

We are not able to access the link shared in the above post. If haven’t tried, please follow the steps suggested above and check if similar issue occurs on the computer.



Write to us with the answers to the above questions and the status of bugcheck error code received on the computer for further assistance.
Your reply is most important for us to ensure we assist you accordingly.



Thank you.

 

Issues with Win10 Media Creation Tool

Got it working in the end, not sure what happened but now have bootable usb with Win10 on it.