Interactive Troubleshooter

Published: Sep 26, 2026

Interactive: Blue Screen - Which Driver Caused It? Use Driver Verifier

Time: 15 mins Level: Beginner

By StepDiag Engineering Team

Reviewed by Ibraheem Taofeeq Opeyemi

Isolate rogue third-party drivers triggering kernel panics and Blue Screen of Death (BSOD) crashes in Windows. This interactive diagnostic flow guides technical administrators through activating Windows Driver Verifier, analyzing memory dumps with WinDbg, and resolving crash loops safely.

Full Diagnostic Tree & Step-by-Step Overview

What is the primary symptom or current state of your system regarding the BSOD crashes?

System crashes randomly or under load, but boots into Windows normally.
Driver Verifier was enabled and the system is now trapped in a BSOD boot loop.
Driver Verifier was configured, but no BSOD or crash dump file is generated.
System crashes, but Driver Verifier reports generic kernel files (e.g., ntoskrnl.exe) instead of specific drivers.

How do you intend to run or analyze Driver Verifier for these intermittent crashes?

I need to set up Driver Verifier for the first time to catch the failing driver.
Driver Verifier triggered a BSOD (DRIVER_VERIFIER_DETECTED_VIOLATION), and I need to analyze the crash dump.
The crash occurs specifically during system sleep, hibernation, or power state transitions.
The system crashes immediately on startup after installing a recent Windows update or driver package.

Initial Configuration of Windows Driver Verifier

Solution:

Root Cause: Unidentified Driver Memory Corruption or Kernel API Misuse

Intermittent Blue Screen of Death (BSOD) crashes (such as SYSTEM_SERVICE_EXCEPTION, KMODE_EXCEPTION_NOT_HANDLED, or IRQL_NOT_LESS_OR_EQUAL) occur when a kernel-mode driver accesses invalid memory addresses, corrupts the system pool, or violates Windows I/O Request Packet (IRP) protocols. Driver Verifier stress-tests kernel drivers by placing non-paged memory pools into invalid pages, enforcing strict memory checks, and immediately faulting the system when invalid calls occur.

# Diagnostic Verification:

1. Verify kernel memory dump creation settings:

Press Win + R, type sysdm.cpl, hit Enter.

Navigate to Advanced tab > Startup and Recovery > Settings.

Ensure Write debugging information is set to Automatic Memory Dump or Small memory dump (256 KB).

Confirm the dump path is %SystemRoot%\Minidump or %SystemRoot%\MEMORY.DMP.

# Step-by-Step Fix:

1. Open Elevated Command Prompt:

Press Win + X, select Terminal (Admin) or Command Prompt (Admin).

2. Launch Driver Verifier Manager:

cmd
   verifier.exe

3. Select Custom Verification Settings:

Choose Create custom settings (for code developers) and click Next.

Choose Select individual settings from a full list and click Next.

Enable the following standard flags:

Special Pool

Force IRQL Checking

Pool Tracking

Deadlock Detection

Security Checks

Miscellaneous Checks

DDI compliance checking

DO NOT select *Randomized low resources simulation* as it causes artificial system instability.

4. Select Drivers to Monitor:

Choose Select driver names from a list and click Next.

Click on the Provider column header to sort drivers by publisher.

Select ALL non-Microsoft drivers (e.g., NVIDIA, Realtek, Corsair, Intel, ASUS).

DO NOT select drivers where the provider is strictly "Microsoft Corporation".

5. Save and Reboot:

Click Finish, then restart the computer to initiate stress testing.

Use the system normally until a BSOD occurs. Refer to official Microsoft Driver Verifier Documentation for detailed flag definitions.

# Prevention & Long-Term Monitoring:

Once testing is complete or the faulting driver is identified, reset Driver Verifier via command line:

cmd
  verifier /reset

Never run Driver Verifier continuously on production machines, as it introduces severe CPU overhead and performance degradation.

Analyzing Memory Dumps Created by Driver Verifier

Solution:

Root Cause: DRIVER_VERIFIER_DETECTED_VIOLATION (Bug Check 0xC4) or Driver Memory Mismanagement

Driver Verifier has successfully caught a rogue kernel driver committing an illegal operation (e.g., buffer overrun, invalid page release, or illegal IRQL escalation). Windows generated a Bug Check 0xC4 or specific bug code and wrote the crash details to a memory dump.

# Diagnostic Verification:

1. Locate the dump files under C:\Windows\Minidump\ or C:\Windows\MEMORY.DMP.
2. Install WinDbg from the Microsoft Store or Windows SDK.

# Step-by-Step Fix:

1. Open WinDbg with Administrative Privileges.
2. Load the Dump File:

Click File > Open dump file (Ctrl + D).

Navigate to C:\Windows\Minidump and select the newest .dmp file.

3. Configure Microsoft Symbol Server:

Set symbol path in command bar:

text
     srv*C:\Symbols*[https://msdl.microsoft.com/download/symbols](https://msdl.microsoft.com/download/symbols)

4. Execute Automated Bug Check Analysis:

In the WinDbg command line, execute:

text
     !analyze -v

5. Identify the Faulting Module:

Scroll down to the MODULE_NAME and IMAGE_NAME lines.

Example output:

text
     MODULE_NAME: myfaultydevice
     IMAGE_NAME: myfaultydevice.sys
     FAILURE_BUCKET_ID: 0xC4_DRIVER_VERIFIER_DETECTED_VIOLATION_myfaultydevice.sys

6. Perform Driver Remediation:

Search C:\Windows\System32\drivers\ for the .sys filename.

Inspect file properties to identify the hardware vendor (e.g., sound card, network card, anti-cheat driver).

Uninstall or completely clean-reinstall the associated software suite.

Use Device Manager or Command Prompt to remove the driver:

cmd
     pnputil /delete-driver oemXX.inf /uninstall /force

7. Disable Driver Verifier:

cmd
   verifier /reset

# Prevention & Long-Term Monitoring:

Keep third-party system monitoring software, RGB utilities, and legacy antivirus drivers up to date.

Always disable Driver Verifier (verifier /reset) after retrieving dump data.

Power State Transition Crashes (DRIVER_POWER_STATE_FAILURE)

Solution:

Root Cause: Power IRP Timeout during Sleep/Wake Cycles (Bug Check 0x9F)

When Windows transitions into Sleep (S3/S4) or wakes up, the kernel sends Power I/O Request Packets (IRPs) to drivers. A driver that fails to complete or forward the power IRP within the timeout period causes a DRIVER_POWER_STATE_FAILURE (0x0000009F) panic.

# Diagnostic Verification:

Inspect Event Viewer: Windows Logs > System for Event ID 1001 (BugCheck).

In WinDbg, analyze the dump with:

text
  !analyze -v
  !poaction

# Step-by-Step Fix:

1. Configure Driver Verifier for Power Testing:

cmd
   verifier /flags 0x00000200 /all

*(Enables Power Framework Verification / Low Resource Simulation for Power).* Or via GUI: check Power framework delay fuzzing.
2. Force Power State Cycle:

Run the following command in PowerShell to trigger rapid sleep/wake states:

powershell
     pwrtest.exe /sleep /c:5 /d:10 /s:3

3. Analyze Power IRPs in WinDbg:

Open dump file in WinDbg.

Run command to list pending power IRPs:

text
     !devstack <DeviceObjectAddress>
     !analyze -v

Look for blocked threads stuck in pci.sys or specific vendor storage/Wi-Fi drivers.

4. Update/Disable Problematic Components:

Disable Fast Startup via powercfg.cpl > Choose what the power buttons do > Uncheck Turn on fast startup.

Update Wi-Fi card (e.g., Intel/Realtek) and NVMe storage controller drivers.

# Prevention & Long-Term Monitoring:

Disable PCIe Link State Power Management in Power Options if NVMe/PCIe drivers continuously fail transitions.

Driver Crashes Immediate After Windows Update / Patching

Solution:

Root Cause: Kernel API Incompatibility or Incomplete Driver Staging

A recent Windows Cumulative Update updated core kernel binaries (ntoskrnl.exe, hal.dll) while an older third-party kernel driver relies on deprecated APIs or unexported kernel symbols, causing immediate memory access violations (PAGE_FAULT_IN_NONPAGED_AREA).

# Diagnostic Verification:

Check Windows Update History in Settings > Windows Update > Update History.

Check Setup logs under C:\Windows\Panther\ or Event Viewer under System.

# Step-by-Step Fix:

1. Roll Back Driver via Device Manager:

Press Win + X > Device Manager.

Right-click the affected device > Properties > Driver tab.

Click Roll Back Driver if available.

2. Roll Back via Driver Store Explorer (pnputil):

Open Command Prompt (Admin).

Enumerate third-party drivers:

cmd
     dism /online /get-drivers /format:table

Remove driver package from staging store:

cmd
     pnputil /delete-driver oemXX.inf /uninstall /force

3. Pause Windows Updates Temporarily:

Navigate to Settings > Windows Update > Pause updates.

4. Install Certified Vendor Driver:

Download driver executable directly from official OEM vendor site (e.g., ASUS, Dell, HP, Lenovo support).

# Prevention & Long-Term Monitoring:

Block automatic driver updates via Group Policy: Computer Configuration > Administrative Templates > Windows Components > Windows Update > Do not include drivers with Windows Updates.

What diagnostic state or safe environment are you currently able to access?

I can access Windows Automatic Repair / WinRE Command Prompt.
I can boot into Safe Mode, but normal Windows boot still BSODs.
I cannot access WinRE or Safe Mode; system crashes during POST/Early Boot.
Driver Verifier is causing a crash loop specifically tied to anti-cheat or security drivers.

Disabling Driver Verifier via Windows Recovery Environment (WinRE)

Solution:

Root Cause: Persistent Boot-Start Driver Faulting under Verifier Enforcement

Driver Verifier settings are stored in system registry keys (HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management). If a boot-start driver (such as a storage controller or filter driver) violates kernel rules, Driver Verifier crashes the machine before Windows boots, causing a boot loop.

# Diagnostic Verification:

Windows fails to boot twice and automatically triggers Preparing Automatic Repair screen.

Select Advanced Options > Troubleshoot > Advanced Options > Command Prompt.

# Step-by-Step Fix:

1. Disable Verifier via Command Prompt in WinRE:

cmd
   verifier /bootmode resetonbootfail

*If verifier command is not recognized or fails in WinRE environment, edit the system registry directly:*
2. Load System Registry Hive:

cmd
   reg load HKLM\OFFLINE_SYS C:\Windows\System32\config\SYSTEM

*(Note: Verify your system drive letter; in WinRE it might be D: or E: using dir D:).*
3. Delete Driver Verifier Registry Keys:

Run regedit or execute the following reg commands:

cmd
     reg delete "HKLM\OFFLINE_SYS\ControlSet001\Control\Session Manager\Memory Management" /v VerifyDrivers /f
     reg delete "HKLM\OFFLINE_SYS\ControlSet001\Control\Session Manager\Memory Management" /v VerifyDriverLevel /f

4. Unload Hive and Exit:

cmd
   reg unload HKLM\OFFLINE_SYS
   exit

5. Reboot Computer:

Click Continue to Windows 11/10.

# Prevention & Long-Term Monitoring:

Before activating Driver Verifier, always establish a System Restore Point or run verifier /bootmode resetonbootfail prior to rebooting.

Disabling Driver Verifier from Safe Mode

Solution:

Root Cause: Non-Essential Service/Driver Instability in Normal Boot Mode

Safe Mode loads a minimal driver set, bypassing third-party drivers. Driver Verifier remains configured in the registry, but Safe Mode prevents the faulty third-party driver from initializing and crashing the kernel.

# Diagnostic Verification:

1. Boot into Safe Mode:

From WinRE: Startup Settings > Restart > Press 4 or F4 for Safe Mode.

2. Verify Windows boots successfully into Safe Mode desktop.

# Step-by-Step Fix:

1. Open Command Prompt as Administrator in Safe Mode:

Press Win + R, type cmd, press Ctrl + Shift + Enter.

2. Reset Driver Verifier:

cmd
   verifier /reset

3. Confirm Reset:

Run command to verify active settings:

cmd
     verifier /query

Output should state: "No drivers are currently being verified."

4. Reboot to Normal Mode:

cmd
   shutdown /r /t 0

5. Retrieve and Analyze Crash Dumps:

Navigate to C:\Windows\Minidump to inspect the .dmp created during the crash loop.

# Prevention & Long-Term Monitoring:

Never enable verification flags for core OS binaries (e.g., hal.dll, ntoskrnl.exe, pci.sys) as this guarantees boot issues.

Early Boot Failure / Unrecoverable BSOD Loop

Solution:

Root Cause: Boot-Critical Disk / Storage Driver Corruption

Driver Verifier is targeting a driver required during the early boot phase (e.g., NVMe/AHCI drivers, RAID volume filters, or hypervisor drivers), causing instant bug checks before Windows Recovery can load.

# Diagnostic Verification:

Screen shows INACCESSIBLE_BOOT_DEVICE or instant reset right after motherboard OEM splash screen.

# Step-by-Step Fix:

1. Create Windows Installation Media on a working PC using the official Microsoft Creation Tool.
2. Boot target machine from USB installation media.
3. Click Next > Repair your computer (bottom left corner).
4. Select Troubleshoot > Command Prompt.
5. Identify System Partition:

cmd
   diskpart
   list volume

Note the drive letter assigned to the Windows OS partition (e.g., C: or D:).

Exit diskpart:

cmd
     exit

6. Reset Verifier via Registry Offline Hive Modification:

cmd
   reg load HKLM\TEMP_SYS D:\Windows\System32\config\SYSTEM
   reg delete "HKLM\TEMP_SYS\ControlSet001\Control\Session Manager\Memory Management" /v VerifyDrivers /f
   reg delete "HKLM\TEMP_SYS\ControlSet001\Control\Session Manager\Memory Management" /v VerifyDriverLevel /f
   reg unload HKLM\TEMP_SYS

7. Restart system natively.

# Prevention & Long-Term Monitoring:

When enabling Driver Verifier, explicitly select Select driver names from a list and exclude storage controller drivers (storahci.sys, stornvme.sys, volsnap.sys).

Anti-Cheat / Kernel Security Module Crash Loop

Solution:

Root Cause: Hypervisor Protected Code Integrity (HVCI) and Anti-Cheat Driver Conflict

Kernel-level anti-cheat solutions (e.g., Easy Anti-Cheat, BattEye, Vanguard) or DRM systems use obfuscation techniques and non-standard memory allocation routines that intentionally trigger Driver Verifier's strict memory integrity checks, leading to PAGE_FAULT_IN_NONPAGED_AREA or KMODE_EXCEPTION_NOT_HANDLED.

# Diagnostic Verification:

Crash dump references drivers such as EasyAntiCheat.sys, vgk.sys, or BEDaisy.sys under IMAGE_NAME.

# Step-by-Step Fix:

1. Boot into Safe Mode.
2. Open Command Prompt (Admin) and reset Driver Verifier:

cmd
   verifier /reset

3. Uninstall the Associated Game / Anti-Cheat Utility:

Navigate to Settings > Apps > Installed Apps.

Locate and uninstall the anti-cheat service.

4. Clean Residual Kernel Drivers:

cmd
   sc delete EasyAntiCheat
   sc delete vgk

5. Reinstall the Latest Version of the Anti-Cheat Engine directly from the official game launcher.

# Prevention & Long-Term Monitoring:

Always exclude anti-cheat drivers (.sys) when configuring custom Driver Verifier rules.

What is occurring when you attempt to trigger a crash dump under Driver Verifier?

System reboots abruptly without producing a BSOD screen or saving a dump file.
BSOD screen appears, but dump file generation hangs at 0% or fails to save.
System runs indefinitely without crashing, even though crashes occurred previously.
The system runs out of physical memory (RAM) or disk space while Verifier is running.

Abrupt System Reboots / Instant Power Loss (No Dump File)

Solution:

Root Cause: Hardware-Level Power Interruption or Disabled Crash Dump Writing

When a system hard-resets or powers off instantly without displaying a BSOD, the kernel is either prevented from writing to disk by a sudden loss of hardware power (PSU/VRM failure), or Automatic Restart is enabled in Windows recovery settings.

# Diagnostic Verification:

1. Open Event Viewer (eventvwr.msc).
2. Navigate to Windows Logs > System.
3. Filter for Event ID 41 (Kernel-Power) and Event ID 6008.

# Step-by-Step Fix:

1. Disable Automatic Restart on System Failure:

Press Win + R, type sysdm.cpl, press Enter.

Click Advanced tab > Startup and Recovery > Settings.

Uncheck Automatically restart.

2. Configure Page File Size (Required for Crash Dumps):

Crash dumps require an adequate system paging file on the primary boot drive (C:).

In sysdm.cpl, go to Advanced > Performance Settings > Advanced > Virtual Memory Change.

Ensure Automatically manage paging file size for all drives is checked, or set a custom size on C: at least equal to physical RAM.

3. Stress Test Hardware Stability:

Run OCCP or Prime95 to check for Power Supply Unit (PSU) rail drops or CPU/GPU thermal throttling.

# Prevention & Long-Term Monitoring:

Replace failing power supply units or degraded motherboard capacitors if hard resets persist under synthetic load.

Dump File Generation Hangs at 0% or Writes Fail

Solution:

Root Cause: Storage Controller Fault or Inadequate Paging File Configuration

When a BSOD occurs, the Windows kernel halts all standard operations and uses a minimal disk driver (dump_storahci.sys or dump_stornvme.sys) to write RAM contents to pagefile.sys. If the faulting driver corrupts the storage stack, or if the drive controller loses communication, disk write operations fail.

# Diagnostic Verification:

BSOD screen is visible, but the progress indicator stays frozen at 0% Complete indefinitely.

Event Log displays Event ID 161 (volmgr): "Dump file creation failed due to error during dump creation."

# Step-by-Step Fix:

1. Disable Third-Party NVMe/RAID Drivers:

Revert storage controller drivers to native Microsoft drivers (stornvme.sys / storahci.sys).

2. Verify CrashDump Enabled in Registry:

Open PowerShell (Admin) and run:

powershell
     Get-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\CrashControl'

Ensure CrashDumpEnabled value is set to 1 (Complete dump) or 3 (Small dump).

3. Relocate Dump Directory or Repair File System:

Run System File Checker and Disk Check:

cmd
     sfc /scannow
     chkdsk C: /f /r

4. Remove Storage Filters from Driver Verifier:

Run verifier.exe, ensure no disk filter drivers or encryption drivers (e.g., BitLocker/Veracrypt hooks) are selected for verification.

# Prevention & Long-Term Monitoring:

Ensure C: has at least 25 GB of free unallocated space to guarantee complete dumps under heavy memory usage.

System Fails to BSOD Despite Intermittent Native Crashes

Solution:

Root Cause: Unverified Driver Scope or Hardware-Specific Trigger Absence

Driver Verifier only stress-tests the specific drivers selected during setup. If the offending driver was skipped (e.g., misidentified as a Microsoft driver or running in user-mode), Driver Verifier will not trigger a crash.

# Diagnostic Verification:

Run verifier /query in Command Prompt to inspect the list of currently monitored drivers.

# Step-by-Step Fix:

1. Expand Verification Scope:

Open Elevated Command Prompt.

Enable Driver Verifier for ALL installed drivers (including Microsoft drivers temporarily for a short test duration):

cmd
     verifier /standard /all

Alternatively, targeted command:

cmd
     verifier /flags 0x209BB /driver *

2. Replicate Faulting Workload:

Run peripheral-heavy tasks (e.g., plug/unplug USB devices, initiate heavy network transfer, run 3D graphics benchmarks).

3. Check User-Mode Application Crashes:

If Driver Verifier yields no crash, the issue may be a user-mode service crash. Check Reliability Monitor by running perfmon /rel in Windows.

# Prevention & Long-Term Monitoring:

Keep Driver Verifier enabled for a maximum of 24–48 hours to capture low-frequency intermittent faults.

Excessive Resource Overhead and Memory Pool Exhaustion

Solution:

Root Cause: Extreme Special Pool Allocation Overhead

The Special Pool option in Driver Verifier allocates a dedicated memory page for every allocation made by monitored drivers. If all system drivers are selected simultaneously on systems with low RAM, non-paged pool memory exhausts rapidly, causing system freezing.

# Diagnostic Verification:

Open Task Manager > Performance tab > Memory.

Observe Non-paged pool expanding to fill physical RAM.

# Step-by-Step Fix:

1. Reduce Driver Verifier Flags:

Open Command Prompt (Admin).

Configure Verifier without Special Pool allocation:

cmd
     verifier /flags 0x2002B /all

2. Target Specific Drivers Incrementally:

Do not monitor all drivers at once. Select drivers in batches of 5–10 third-party binaries.

cmd
   verifier /selectdriver driver1.sys driver2.sys driver3.sys

3. Restore Default Memory Management Settings:

cmd
   verifier /reset

# Prevention & Long-Term Monitoring:

Ensure systems undergoing Driver Verifier testing have at least 16 GB of physical RAM installed.

What specific output or behavior occurs when analyzing crash dumps in WinDbg?

!analyze -v points to ntoskrnl.exe, hal.dll, or ntkrnlmp.exe.
WinDbg displays bug codes: MEMORY_MANAGEMENT (0x1A) or PAGE_FAULT_IN_NONPAGED_AREA.
WinDbg displays bug code: WHEA_UNCORRECTABLE_ERROR (0x124).
Dump analysis reports missing symbols or unable to download PDB files.

WinDbg Points Exclusively to Windows Core Kernel Files

Solution:

Root Cause: Indirect Kernel Memory Corruption by Third-Party Drivers

Windows kernel executables (ntoskrnl.exe, hal.dll) are responsible for managing thread schedules and memory mapping. When a third-party driver corrupts memory allocated to the kernel, ntoskrnl.exe crashes when it later attempts to access that corrupted address. The kernel executable is the *victim*, not the cause.

# Diagnostic Verification:

In WinDbg, running !analyze -v reports PROCESS_NAME: System and MODULE_NAME: ntoskrnl.

# Step-by-Step Fix:

1. Inspect Stack Backtrace in WinDbg:

Run command in WinDbg:

text
     k

text
     kn

Examine the stack frame calls listed prior to ntoskrnl.exe crash routines (kiTrap, KeBugCheckEx).

Look for third-party driver calls (.sys files) embedded in the call stack.

2. Run Driver Verifier with Force IRQL and Pool Tracking Flags:

Enable rigorous pool tracking to trap memory corruption at the exact moment of execution:

cmd
     verifier /flags 0x3 /all

3. Perform RAM Diagnostic Check:

If stack traces show inconsistent routines across multiple dumps, physical RAM corruption may be passing invalid data to kernel routines. Run Windows Memory Diagnostic:

cmd
     mdsched.exe

# Prevention & Long-Term Monitoring:

Never replace system core DLLs/EXEs manually; use DISM /Online /Cleanup-Image /RestoreHealth to repair system components.

Hardware RAM Failure / Physical Memory Instability

Solution:

Root Cause: Physical Memory Bit-Flips or Timings Misconfiguration

Repeated bug checks such as MEMORY_MANAGEMENT (0x0000001A), PFN_LIST_CORRUPT (0x0000004E), or random fault addresses across different .sys drivers indicate physical hardware degradation in RAM modules or incorrect XMP/EXPO memory profiles.

# Diagnostic Verification:

Crash dump analysis reveals varying failure bucket IDs and multiple unrelated process crashes.

# Step-by-Step Fix:

1. Test RAM with MemTest86:

Download MemTest86, flash to USB drive, and boot from USB.

Run a minimum of 4 complete passes.

Any reported error (>0 errors) indicates physical hardware fault or timing instability.

2. Reset BIOS/UEFI Settings:

Enter motherboard BIOS/UEFI setup.

Disable XMP / EXPO / DOCP memory overclocking profiles (run memory at stock JEDEC frequencies).

3. Isolate Faulty RAM Stick:

Remove all RAM sticks except one.

Boot and run stress tests on each stick individually to identify the failed module.

# Prevention & Long-Term Monitoring:

Ensure RAM modules are listed on your motherboard manufacturer’s Qualified Vendors List (QVL).

Hardware Architecture Errors (WHEA_UNCORRECTABLE_ERROR)

Solution:

Root Cause: Bus Failure, CPU Degradation, or PCIe Link Drop (Bug Check 0x124)

WHEA_UNCORRECTABLE_ERROR (0x00000124) is triggered directly by the Windows Hardware Error Architecture when a hardware component (CPU, PCIe Bus, NVMe SSD, or GPU) reports an uncorrectable hardware error via CPU Machine Check Architecture (MCA).

# Diagnostic Verification:

1. Open crash dump in WinDbg.
2. Execute WHEA extension command:

text
   !errrec <Address_of_Error_Record>

3. Look for Section Type and Error Type in the output (e.g., Cache Error, BUS Error, or PCIe Express Error).

# Step-by-Step Fix:

1. Check CPU Overclocks and Undervolts:

Revert any CPU undervolting, Precision Boost Overdrive (PBO), or manual multiplier overclocks in BIOS.

2. Inspect Thermal Throttling & Hardware Contacts:

Verify CPU and GPU temperatures using HWiNFO64.

Re-seat GPU, PCIe expansion cards, and NVMe drives in their slots.

3. Update Motherboard Firmware:

Flash motherboard to the latest AGESA / Intel Microcode BIOS revision to fix PCIe bus stability bugs.

# Prevention & Long-Term Monitoring:

Maintain operating temperatures below 85°C under maximum synthetic load.

WinDbg Symbol Loading Errors (Missing PDB Files)

Solution:

Root Cause: Unresolved Debugging Symbols or Firewall Network Block

WinDbg requires Program Database (.pdb) symbol files from Microsoft and third-party vendors to resolve memory offset addresses to human-readable function names and driver filenames.

# Diagnostic Verification:

WinDbg output displays: Symbol search path is: * Invalid * or Failed to resolve symbols.

# Step-by-Step Fix:

1. Force Reload Symbol Path in WinDbg:

Execute the following commands in the WinDbg command bar:

text
     .sympath srv*C:\Symbols*[https://msdl.microsoft.com/download/symbols](https://msdl.microsoft.com/download/symbols)
     .reload /f

2. Verify Local Symbol Directory:

Ensure C:\Symbols directory is created and accessible with full read/write permissions.

3. Execute Analysis with Forced Symbol Downloader:

text
   !analyze -v -f

# Prevention & Long-Term Monitoring:

Ensure WinDbg isn't blocked by corporate firewalls or proxy settings when reaching msdl.microsoft.com.

Related Diagnostic Guides

SharePoint Online Access Denied Even as Owner

Interactive: Game Crashes - Overheating, Driver, or Corrupted Files?

Intune Device Compliance Failed: Conditional Access Fix

Entra ID Sync Error: Duplicate Proxy Address

Power Automate Flow Failed: Connector Timeout Diagnostic

Subscribe to StepDiag

Embed Guide on Your Website