spoolsv服务一直自动停止

h3cke

这是日志，网上其他的文法都试过了没用

错误应用程序名称: spoolsv.exe，版本: 10.0.17763.4644，时间戳: 0xacbcf874
错误模块名称: ntdll.dll，版本: 10.0.17763.4974，时间戳: 0xfb111856
异常代码: 0xc0000374
错误偏移量: 0x00000000000fb209
错误进程 ID: 0x750
错误应用程序启动时间: 0x01da1606a6b3e8a6
错误应用程序路径: C:\WINDOWS\System32\spoolsv.exe
错误模块路径: C:\WINDOWS\SYSTEM32\ntdll.dll
报告 ID: 8ed6978a-b81e-421a-8d90-fc36c05d33af
错误程序包全名:

h3cke

以解决，把这人代码保存成REG文件然后合并，然后重新安装驱动就可以了

[Asm] 纯文本查看 复制代码

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Spooler]
"DisplayName"="@%systemroot%\\system32\\spoolsv.exe,-1"
"Group"="SpoolerGroup"
"ImagePath"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,\
  74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,\
  00,70,00,6f,00,6f,00,6c,00,73,00,76,00,2e,00,65,00,78,00,65,00,00,00
"Description"="@%systemroot%\\system32\\spoolsv.exe,-2"
"ObjectName"="LocalSystem"
"ErrorControl"=dword:00000001
"Start"=dword:00000002
"Type"=dword:00000110
"DependOnService"=hex(7):52,00,50,00,43,00,53,00,53,00,00,00,68,00,74,00,74,00,\
  70,00,00,00,00,00
"ServiceSidType"=dword:00000001
"RequiredPrivileges"=hex(7):53,00,65,00,54,00,63,00,62,00,50,00,72,00,69,00,76,\
  00,69,00,6c,00,65,00,67,00,65,00,00,00,53,00,65,00,49,00,6d,00,70,00,65,00,\
  72,00,73,00,6f,00,6e,00,61,00,74,00,65,00,50,00,72,00,69,00,76,00,69,00,6c,\
  00,65,00,67,00,65,00,00,00,53,00,65,00,41,00,75,00,64,00,69,00,74,00,50,00,\
  72,00,69,00,76,00,69,00,6c,00,65,00,67,00,65,00,00,00,53,00,65,00,43,00,68,\
  00,61,00,6e,00,67,00,65,00,4e,00,6f,00,74,00,69,00,66,00,79,00,50,00,72,00,\
  69,00,76,00,69,00,6c,00,65,00,67,00,65,00,00,00,53,00,65,00,41,00,73,00,73,\
  00,69,00,67,00,6e,00,50,00,72,00,69,00,6d,00,61,00,72,00,79,00,54,00,6f,00,\
  6b,00,65,00,6e,00,50,00,72,00,69,00,76,00,69,00,6c,00,65,00,67,00,65,00,00,\
  00,53,00,65,00,4c,00,6f,00,61,00,64,00,44,00,72,00,69,00,76,00,65,00,72,00,\
  50,00,72,00,69,00,76,00,69,00,6c,00,65,00,67,00,65,00,00,00,00,00
"FailureActions"=hex:80,51,01,00,00,00,00,00,00,00,00,00,03,00,00,00,14,00,00,\
  00,01,00,00,00,60,ea,00,00,01,00,00,00,60,ea,00,00,00,00,00,00,00,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Spooler\Performance]
"Close"="PerfClose"
"Collect"="PerfCollect"
"Collect Timeout"=dword:000007d0
"Library"="winspool.drv"
"Object List"="1450"
"Open"="PerfOpen"
"Open Timeout"=dword:00000fa0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Spooler\Security]
"Security"=hex:01,00,14,80,78,00,00,00,84,00,00,00,14,00,00,00,30,00,00,00,02,\
  00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
  00,00,02,00,48,00,03,00,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,\
  05,0b,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\
  20,02,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,05,12,00,00,00,01,\
  01,00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00

jyjjf

看看是不是某些软件冲突了，查一下有问题时都装了什么软件，试试卸载那些软件

wyl0205

查下hash值，再去系统包里找一下这个程序，比对一下看看是不是一致。打印机的服务按说一般不会出问题的。

h3cke

jyjjf 发表于 2023-11-14 08:42
看看是不是某些软件冲突了，查一下有问题时都装了什么软件，试试卸载那些软件

就安装了一个局域网共享打印机

h3cke

wyl0205 发表于 2023-11-14 08:48
查下hash值，再去系统包里找一下这个程序，比对一下看看是不是一致。打印机的服务按说一般不会出问题的。

从同系统版本里提取Spoolsv.exe和ntdll.dll替换过  问题依旧

go4399

STATUS_HEAP_CORRUPTION---异常代码0xC0000374，堆内存异常。
怀疑打印机驱动有问题，不要用第三方软件安装驱动，用官方网站上的驱动

janny82

我估计你更换过打印机的某些dll，往上那种替换dll的，然后不匹配造成的把

h3cke

go4399 发表于 2023-11-14 09:15
STATUS_HEAP_CORRUPTION---异常代码0xC0000374，堆内存异常。
怀疑打印机驱动有问题，不要用第三方软件安 ...

佳能官网上下载的驱动

h3cke

janny82 发表于 2023-11-14 09:26
我估计你更换过打印机的某些dll，往上那种替换dll的，然后不匹配造成的把

并没有换过打印机只是安装了一个局域网共享打印机

go4399

h3cke 发表于 2023-11-14 09:37
佳能官网上下载的驱动

把所有打印机驱动完全删除，是否还会出现打印服务不能启动的问题