Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.

CRITICAL_PROCESS_DIED is a Windows blue-screen stop error with bug-check code 0x000000EF. It means Windows detected that a process essential to system operation stopped or became corrupted—not that one particular file or component is definitely at fault.

The likely causes include damaged Windows files, a faulty driver, a failed update, file-system errors, malware, defective RAM, or a failing SSD or hard drive. If Windows still starts, back up important files first. If it will not boot, protect your data before running intensive disk repairs or resetting Windows.

What “Critical Process Died” means

Microsoft defines bug check 0xEF as a critical system process terminating or becoming corrupted so severely that Windows can no longer trust the operating system to continue safely.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Examples of processes Windows may treat as critical include csrss.exe, wininit.exe, logonui.exe, smss.exe, services.exe, conhost.exe, and winlogon.exe. Seeing one of these names in technical information does not mean you should delete it, replace it, or download a copy from the internet.

#1 Best Overall
Crucial 32GB DDR5 RAM Kit (2x16GB), 5600MHz (or 5200MHz or 4800MHz) Laptop Memory 262-Pin SODIMM, Compatible with Intel Core and AMD Ryzen 7000, Black - CT2K16G56C46S5
  • Boosts System Performance: 32GB DDR5 RAM laptop memory kit (2x16GB) that operates at 5600MHz, 5200MHz, or 4800MHz to improve multitasking and system responsiveness for smoother performance
  • Accelerated gaming performance: Every millisecond gained in fast-paced gameplay counts—power through heavy workloads and benefit from versatile downclocking and higher frame rates
  • Optimized DDR5 compatibility: Best for 12th Gen Intel Core and AMD Ryzen 7000 Series processors — Intel XMP 3.0 and AMD EXPO also supported on the same RAM module
  • Trusted Micron Quality: Backed by 42 years of memory expertise, this DDR5 RAM is rigorously tested at both component and module levels, ensuring top performance and reliability
  • ECC Type = Non-ECC, Form Factor = SODIMM, Pin Count = 262-Pin, PC Speed = PC5-44800, Voltage = 1.1V, Rank And Configuration = 1Rx8

The stop code describes the kind of failure, not its root cause. Microsoft’s general blue-screen guidance identifies hardware, drivers, and software as possible sources of stop errors.

Before troubleshooting: protect your files

If Windows can start, copy documents, photos, browser data, passwords, work files, and other irreplaceable data to an external drive or cloud storage. Do this before resetting Windows or repeatedly scanning a drive.

If Windows will not start, use Windows Recovery Environment (WinRE), a recovery drive, or Windows installation media to copy files from the affected disk. If files are disappearing, copying fails, the drive is unusually slow, or the drive makes clicking noises, minimize writes and consider professional data recovery. Repeated repair attempts may reduce the chance of recovering data from a physically failing drive.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Also record the exact message, 0x000000EF if displayed, any What failed filename, and what changed immediately beforehand. A displayed filename can be useful evidence, but it may be the module executing when the failure occurred rather than the original cause.

If Windows still boots normally

1. Disconnect recently added hardware

Shut down and disconnect hardware added shortly before the crashes, including USB devices, external drives, docks, printers, Wi-Fi or Bluetooth adapters, and expansion cards. Restart and test. If the crashes stop, reconnect devices one at a time to identify the likely trigger.

2. Test Safe Mode

In Windows 10, open Settings > Update & Security > Recovery. Under Advanced startup, select Restart now, then choose Troubleshoot > Advanced options > Startup Settings > Restart. Press 4 for Safe Mode or 5 for Safe Mode with Networking.

You can also hold Shift while selecting Power > Restart from the sign-in screen or Start menu. Microsoft’s Windows Recovery Environment guidance explains other ways to reach these tools.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

If Safe Mode is stable but normal Windows crashes, a third-party driver, startup service, security product, peripheral, or recently installed application becomes more likely. Safe Mode narrows the field; it does not prove which driver is defective.

Rank #2
TEAMGROUP T-Force Vulcan Z DDR4 DRAM 16GB Kit (2x8GB) 3200MHz Desktop Memory Module (PC4-25600) CL16 Ram (Gray) - TLZGD416G3200HC16FDC01
  • Simple design to perfectly protect the cooling module with high thermal conductive adhesive
  • Supports Intel & AMD motherboards
  • Selected high-quality IC
  • Supports XMP2.0
  • Energy saving with ultra-low working voltage

3. Undo recent changes

In Safe Mode or normal Windows, reverse the most recent change that matches the timing:

  • Roll back or uninstall a recently updated graphics, storage-controller, chipset, or peripheral driver.
  • Uninstall software installed immediately before the crashes, especially antivirus, disk-encryption, backup, virtualization, disk-management, or system-tuning software.
  • Uninstall a recent Windows update if the failures began directly afterward.
  • Remove the associated hardware while testing.

If a restore point exists, System Restore can return system files, drivers, and settings to an earlier state without intentionally removing personal files. It does not undo every type of change, so review the affected programs before confirming.

4. Repair Windows files with DISM and SFC

Open Command Prompt as administrator and run DISM first, followed by System File Checker:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
DISM.exe /Online /Cleanup-Image /RestoreHealth
sfc /scannow

/Online targets the Windows installation currently running. Microsoft documents DISM and SFC as built-in tools for repairing a damaged Windows component store and protected system files.

If SFC reports that it repaired files, restart and test. If it cannot perform the requested operation, retry in Safe Mode. If DISM or SFC repeatedly fails, do not assume the commands themselves are the solution; investigate storage health and use offline repair or recovery media.

5. Check the file system

After protecting your data, run:

chkdsk C: /f

Windows may schedule the check for the next restart because the system volume is in use. The /f option repairs logical file-system errors. Use the more intensive scan only when there is a reason to look for unreadable sectors:

chkdsk C: /f /r

/r searches for unreadable sectors and attempts to recover readable information. It can take much longer and places additional work on the drive. It cannot repair a physically failing SSD or hard drive. Microsoft includes CHKDSK in its Windows startup troubleshooting guidance.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

6. Check logs, dumps, RAM, and storage

Open Event Viewer > Windows Logs > System and inspect critical errors immediately before the crash. Also check C:WindowsMinidump and, if configured, C:WindowsMEMORY.DMP. Advanced users can inspect dumps with WinDbg, but ordinary users do not need dump analysis to begin troubleshooting.

Rank #3
Sale
CORSAIR Vengeance LPX DDR4 RAM 32GB (2x16GB) Up to 3200MHz CL16-20-20-38 1.35V Intel XMP AMD EXPO Computer Memory – Black (CMK32GX4M2E3200C16)
  • Disclaimer: Maximum Speed requires overclocking/PC BIOS adjustments. Maximum speed and performance depend on system components, including motherboard and CPU
  • Hand-sorted memory chips ensure high performance with generous overclocking headroom
  • VENGEANCE LPX is optimized for wide compatibility with the latest Intel and AMD DDR4 motherboards
  • A low-profile height of just 34mm ensures that VENGEANCE LPX even fits in most small-form-factor builds
  • A solid aluminum heatspreader efficiently dissipates heat from each module so that they consistently run at high clock speeds

Run Windows Memory Diagnostic or the computer manufacturer’s memory test. Check SSD or HDD health with the manufacturer’s diagnostic utility or the device’s firmware tools. A health warning, disappearing drive, repeated file corruption, or recurring disk errors should move data recovery ahead of further software repair.

If Windows is stuck in a restart loop

Enter Windows Recovery Environment

Windows may enter Automatic Repair after several failed starts. If you can reach the sign-in screen, hold Shift and select Power > Restart. Otherwise, boot from a recovery drive or Windows installation USB created on another computer.

In WinRE, select Troubleshoot > Advanced options. Use the options in this order, stopping when the problem is resolved:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  1. Startup Repair: Try this when Windows cannot start or repeatedly returns to recovery.
  2. System Restore: Use an available restore point if the issue followed a driver, application, update, or system-setting change.
  3. Uninstall Updates: Remove a recent quality or feature update when the timing matches.
  4. Startup Settings > Safe Mode: Use it to test whether third-party startup software or drivers are involved.
  5. Command Prompt: Run offline disk and Windows-image repairs.
  6. Reset this PC: Consider only after backing up data.
  7. Reinstall Windows: Use installation media if repair and restore options fail or severe corruption or malware is suspected.

Microsoft’s recovery-options table explains when Startup Repair, System Restore, Reset, and reinstalling are appropriate.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Offline repair commands in WinRE

First find the Windows partition

Drive letters often change in WinRE. The Windows installation may appear as D: or another letter instead of C:. Find it before running commands:

diskpart
list volume
exit

dir C:Windows
dir D:Windows
dir E:Windows

Use the letter containing the actual Windows directory. In the examples below, replace C: with that letter.

Check the offline disk

chkdsk C: /f

Use /f /r only when an unreadable-sector problem is plausible and your important data is protected:

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
chkdsk C: /f /r

Run offline SFC

sfc /scannow /offbootdir=C: /offwindir=C:Windows

The exact volume letter must match the offline Windows installation. Using the wrong letter is a common reason an offline command appears not to work.

Rank #4
Timetec 16GB KIT(2x8GB) DDR3L/DDR3 1600MHz(DDR3L-1600) PC3L-12800 Non-ECC Unbuffered 1.35V/1.5V CL11 2Rx8 Dual Rank 204 Pin SODIMM Laptop Notebook RAM
  • [Specs] DDR3L / DDR3 1600MHz PC3L-12800 / PC3-12800 204-Pin Unbuffered Non ECC 1.35V CL11 Dual Rank 2Rx8 based 512x8
  • [Size] Module Size: 16GB KIT(2x8GB Modules) Package: 2x8GB
  • [Voltage] JEDEC standard 1.35V, this is a dual voltage piece and can operate at 1.35V or 1.5V
  • [Compatibility] Compatible with DDR3 Laptop / Notebook PC, Mini PC, All in one Device
  • [Color] PCB Color is green

Repair the offline Windows image

DISM /Image:C: /Cleanup-Image /RestoreHealth

This targets the offline installation rather than the recovery environment. If the local component store is too damaged, DISM may require a matching Windows installation source; that is an advanced procedure and is not guaranteed to fix a failing disk.

Do not casually run format, DiskPart’s clean command, registry-hive deletion, indiscriminate boot-configuration rebuilds, or registry-cleaner utilities. Never download replacement copies of Windows system executables from random websites.

How to tell software trouble from hardware trouble

Evidence What it suggests
The issue began after an update, driver, or application change. Software or driver trouble is more likely.
Safe Mode works reliably or System Restore resolves the crash. A third-party driver, service, or recent system change is implicated.
Files are corrupted, copy operations fail, the drive disappears from BIOS/UEFI, or disk access becomes very slow. Prioritize backup and storage diagnostics.
Multiple unrelated stop codes occur, memory tests fail, or crashes continue in Safe Mode and after reinstalling Windows. RAM or broader hardware failure is more likely.
The computer crashes outside Windows or BIOS/UEFI behaves abnormally. Suspect hardware, overheating, power instability, or the motherboard.

A clean Windows installation can eliminate software corruption, but it cannot repair defective RAM, an unreliable motherboard, unstable power, or a physically failing drive. If the error returns immediately after reinstalling, stop repeating software repairs and test or replace the suspected hardware.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

When to reset or reinstall Windows

Reset this PC > Keep my files may preserve personal files, but it removes installed applications, drivers, and many settings. It is not a substitute for a backup, and recovery operations can still fail or result in data loss.

Choose a reinstall from installation media when recovery tools fail, Windows remains severely corrupted, or malware cannot be confidently removed. Back up first, and confirm that you have product-license information, application installers, and hardware drivers. If storage or RAM is defective, reinstalling Windows will not provide a lasting fix.

Windows 10 support status in 2026

Windows 10 Home and Pro version 22H2 reached the end of ordinary Microsoft support on October 14, 2025. As of September 2026, ordinary installations no longer receive regular security fixes, feature updates, or Microsoft technical support. Some LTSC editions and Extended Security Update arrangements have different terms.

This support change did not cause CRITICAL_PROCESS_DIED. After stabilizing the PC, check whether it meets Windows 11 requirements. If you must remain on Windows 10, review Microsoft’s applicable Consumer Extended Security Updates option, keep reliable backups, and plan for eventual replacement if the hardware is no longer suitable.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Quick Recap

Bestseller No. 2
TEAMGROUP T-Force Vulcan Z DDR4 DRAM 16GB Kit (2x8GB) 3200MHz Desktop Memory Module (PC4-25600) CL16 Ram (Gray) - TLZGD416G3200HC16FDC01
TEAMGROUP T-Force Vulcan Z DDR4 DRAM 16GB Kit (2x8GB) 3200MHz Desktop Memory Module (PC4-25600) CL16 Ram (Gray) - TLZGD416G3200HC16FDC01
Supports Intel & AMD motherboards; Selected high-quality IC; Supports XMP2.0; Energy saving with ultra-low working voltage
$129.99
SaleBestseller No. 3
Bestseller No. 4
Timetec 16GB KIT(2x8GB) DDR3L/DDR3 1600MHz(DDR3L-1600) PC3L-12800 Non-ECC Unbuffered 1.35V/1.5V CL11 2Rx8 Dual Rank 204 Pin SODIMM Laptop Notebook RAM
Timetec 16GB KIT(2x8GB) DDR3L/DDR3 1600MHz(DDR3L-1600) PC3L-12800 Non-ECC Unbuffered 1.35V/1.5V CL11 2Rx8 Dual Rank 204 Pin SODIMM Laptop Notebook RAM
[Size] Module Size: 16GB KIT(2x8GB Modules) Package: 2x8GB; [Compatibility] Compatible with DDR3 Laptop / Notebook PC, Mini PC, All in one Device
$38.99

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.