What is 0x000000EF?
CRITICAL_PROCESS_DIED (0x000000EF) is a critical-severity fault affecting the Windows operating system. A critical system process (winlogon, csrss, lsass) has terminated. Typical causes include malware and bad update. See the troubleshooting steps below for the fix.
Common Causes
- Corrupted system files
- Malware
- Bad update
Step-by-Step Fix Guide
-
1
SFC and DISM
Begin with SFC and DISM; it's the step that resolves 0x000000EF for the largest share of reported cases.
-
2
System Restore
A recurrence usually points to a rarer windows instability cause, which is what the following steps are meant to catch.
-
3
Clean install of Windows
"Clean install of Windows" covers a less common but documented cause of 0x000000EF.
Commands & Diagnostics
sfc /scannow
DISM /Online /Cleanup-Image /RestoreHealth
Frequently Asked Questions
The leading cause of 0x000000EF is corrupted system files, though malware and bad update also show up in our reports.
Most 0x000000EF reports resolve after "SFC and DISM". The rest of the guide above is there for the cases that don't.
Treat 0x000000EF as urgent — it's flagged critical severity, meaning repeated occurrences risk data loss or hardware damage.
Usually. 0x000000EF is fixable with the steps above; a full Windows reinstall is rarely necessary unless everything else has failed.
Sometimes. Microsoft regularly releases patches that fix known BSOD triggers including 0x000000EF. Make sure Windows is fully up to date via Settings → Windows Update before attempting more advanced fixes.
Still Need Help?
Search our full database of 535+ documented PC errors for more solutions and step-by-step repair guides.
Search Error Database