Hi all, I'm fairly new to windbg, but I've got an issue where after a few days of work my windows 10 machine will usually have a few hundred thousand zombie processes on it and has to be rebooted to free the memory up.
I suspect that there is a kernel driver that's holding to handles, but I'm not sure how I would go about identifying which driver has the handles. Could someone help me with some steps I could take to try and track down the culprit?
Here is a quick example of a zombie process which is owned by "System"
lkd> !process 0 7 cgo.exe
SessionId: 1 Cid: 3f5c Peb: 00381000 ParentCid: 43e8
DirBase: 381102000 ObjectTable: 00000000 HandleCount: 0.
VadRoot 0000000000000000 Vads 0 Clone 0 Private 11. Modified 1. Locked 0.
Working Set Sizes (now,min,max) (12, 50, 345) (48KB, 200KB, 1380KB)
VirtualSize 0 Mb
PeakVirtualSize 4177 Mb
No active threads
Object: ffffb90d8255d580 Type: (ffffb90d77a7a740) Process
ObjectHeader: ffffb90d8255d550 (new version)
HandleCount: 2 PointerCount: 65536