Skip to main content

Troubleshooting · BSOD

Blue Screen of Death.

— Read the code. Find the driver. Fix it in 10 minutes.

  • 10 min read
  • Updated May 2026
  • Reviewed by Evetech Service Bench
By the end of this guide, you'll know how to read the stop code, extract the minidump, identify whether it's driver or hardware, and execute the right fix — without paying for a workshop visit.
caused by drivers
70%
to diagnose with minidump
10 min
to fix most cases
R0

What BSOD actually is

A Blue Screen of Death is a kernel panic — Windows discovering an error severe enough that continuing would corrupt data, so the OS halts the entire system as a protective measure. The blue screen isn't punishment; it's Windows pointing precisely at what failed.

Modern BSODs (Windows 8 through Windows 11) show four useful things on screen:

  • The sad emoticon — purely cosmetic.
  • The error description — plain English summary, e.g. "Your PC ran into a problem".
  • The stop code — the actual diagnostic, e.g. DRIVER_IRQL_NOT_LESS_OR_EQUAL. This is the line that matters.
  • The QR code — links to Microsoft's documentation page for that specific stop code.

The first move when you see a BSOD is to photograph the screen with your phone. Windows reboots automatically after 30-60 seconds and the stop code disappears. Without that photo, you're guessing.

The blue screen isn't the problem. It's the system trying to tell you what the problem is.

Why the stop code matters more than the colour

Common stop codes and what they actually mean

There are over 500 documented BSOD stop codes. In real-world tickets, ten codes account for roughly 80% of all BSODs we see. Knowing these by sight saves you hours of diagnostic guesswork.

Stop codeUsual causeFirst fix
DRIVER_IRQL_NOT_LESS_OR_EQUALDriver bug or outdated driverRead minidump, update that driver
PAGE_FAULT_IN_NONPAGED_AREABad RAM or driver writing wrong addressMemTest86 + minidump
MEMORY_MANAGEMENTBad RAM, unstable XMP/EXPO, undervoltDisable XMP, test, run MemTest86
CRITICAL_PROCESS_DIEDCorrupted Windows system filessfc /scannow + DISM repair
SYSTEM_SERVICE_EXCEPTIONDriver issue (often graphics)Update or rollback GPU driver
KERNEL_SECURITY_CHECK_FAILUREDriver corruption or RAM issueMemTest86, then driver scan
IRQL_NOT_LESS_OR_EQUALDriver or hardware faultRead minidump first
WHEA_UNCORRECTABLE_ERRORCPU error — overheating, overclock, hardwareDisable OC, check temps
VIDEO_TDR_FAILUREGPU driver timeoutClean GPU driver reinstall (DDU)
NTFS_FILE_SYSTEMDrive corruption or failing SSD/HDDchkdsk + SMART check
UNEXPECTED_KERNEL_MODE_TRAPOverheating or unstable overclockCheck temps, disable OC
BAD_POOL_HEADERDriver issue, occasionally RAMDriver investigation via minidump

Notice the pattern: most stop codes point at drivers first. The minidump tells you which one.

Reading the minidump — your single most useful tool

Every time Windows BSODs, it writes a small crash dump to C:\Windows\Minidump\. The file is named by date — e.g. 052026-12468-01.dmp. You don't need WinDbg or kernel debugging expertise; a free tool does it for you.

Method 1: WhoCrashed (the easy way)

Download WhoCrashed (free version, Resplendence software). Run it. It opens every minidump on your system, identifies the offending driver in plain English, and tells you which company makes it. Total time: 90 seconds.

A typical WhoCrashed report looks like:

  • "This was probably caused by the following module: nvlddmkm.sys (NVIDIA Windows Kernel Mode Driver)"
  • "This was probably caused by the following module: Realtek HD Audio Driver (RTKVHD64.sys)"
  • "This was probably caused by the following module: ntoskrnl.exe" (means Windows itself — usually RAM or storage)

Method 2: BlueScreenView (NirSoft)

If you want more control, BlueScreenView shows every minidump in a list with the offending driver, stop code, parameters and call stack. Free, portable, no install.

Method 3: Event Viewer

Open Event Viewer → Custom Views → Administrative Events. Filter by date. Look for "BugCheck" events. These contain the stop code and parameters, even if you didn't see the BSOD screen directly (it can happen during sleep or unattended).

Driver vs hardware — the critical first decision

Before you spend money on parts or time on a reinstall, you need to know: is this software (driver, Windows) or hardware (RAM, storage, GPU, CPU)? The minidump pattern usually tells you.

Pointing at a driver

  • The minidump consistently names the same .sys file across multiple crashes.
  • The crashes are correlated with specific activities (gaming, watching video, plugging in USB devices).
  • Updating or rolling back a recent driver coincides with the BSODs starting.

Fix path: Update the driver from the manufacturer's site (not Windows Update — it's often months behind). For GPU drivers, use DDU (Display Driver Uninstaller) in safe mode, then install the latest stable driver clean.

Pointing at hardware

  • The minidump names ntoskrnl.exe or memory_corruption without a specific driver.
  • Stop codes are MEMORY_MANAGEMENT, PAGE_FAULT_IN_NONPAGED_AREA or WHEA_UNCORRECTABLE_ERROR.
  • Crashes happen at random — no pattern.
  • The system also has secondary symptoms: random reboots without BSOD, file corruption, failed Windows updates.

Fix path: Diagnostic tests for each subsystem (see next section).

RAM, GPU and storage diagnostic flow

RAM test (the most common hardware culprit)

Use MemTest86 (free, bootable USB). Download from memtest86.com, write to USB with their imaging tool, boot from it. Let it run at least 4 full passes — that's typically 6-10 hours. Any error means the stick (or one stick) is bad.

If MemTest finds errors:

  • Test each stick individually to identify the bad one.
  • Test in different DIMM slots — sometimes the slot is the problem, not the RAM.
  • Try with XMP/EXPO disabled — if errors disappear, the kit is unstable at rated speed.

GPU test

If BSODs are video-related (VIDEO_TDR_FAILURE, crashes during gaming or 3D apps), test the GPU specifically:

  • Run FurMark or 3DMark Time Spy stress test for 20+ minutes. Watch for artifacts or crashes.
  • If you have a spare GPU, swap it in. Crashes gone = old GPU faulty.
  • Check HWiNFO64 for GPU temperatures hitting 90°C+ under load — that's thermal failure, not the chip itself.

Storage test

If BSODs cluster around NTFS_FILE_SYSTEM or you've seen disk errors:

  • Run chkdsk /f /r from an admin command prompt — schedules a check on next reboot.
  • Open CrystalDiskInfo — it reads SMART data. Anything other than "Good" on your boot drive needs investigation.
  • For NVMe SSDs, check the manufacturer's tool (Samsung Magician, WD Dashboard, Crucial Storage Executive) for firmware updates and health.

The diagnostic flow — what to do, in order

  1. 01

    Photograph the stop code

    Before the screen disappears. This is the single most important diagnostic data point.
  2. 02

    Boot, install WhoCrashed

    Run it. Read the report. Note the offending .sys driver if there is one.
  3. 03

    Search "stop_code + driver_name"

    e.g. "DRIVER_IRQL nvlddmkm.sys" — almost every BSOD has a documented community fix.
  4. 04

    Update or roll back the named driver

    Get the driver from the manufacturer (NVIDIA, AMD, Realtek, Intel) — not Windows Update. Use DDU for GPU drivers.
  5. 05

    If no driver named — disable XMP/EXPO & overclocks

    Reboot into BIOS, turn off any RAM XMP/EXPO profile and any CPU overclock or undervolt. Use the system on stock settings for 24-48 hours.
  6. 06

    Run MemTest86 overnight

    4+ passes minimum. Any error = bad RAM stick or slot.
  7. 07

    Check storage and temperatures

    CrystalDiskInfo for SMART, HWiNFO64 for CPU/GPU temps. Anything over 90°C under load is a problem.
  8. 08

    Repair Windows files

    Open admin Command Prompt. Run sfc /scannow, then DISM /Online /Cleanup-Image /RestoreHealth. Reboot.
  9. 09

    In-place repair install

    If still crashing, download the Windows ISO, mount it, run setup.exe, choose "Keep personal files and apps". Fixes most lingering system file issues without losing data.
  10. 10

    Clean install or RMA

    Last resort. Full clean Windows install, then RMA if BSODs persist on fresh OS.

When to RMA and when to reinstall

Clean install Windows when:

  • You've eliminated driver and hardware as causes through the steps above.
  • The PC was passed down or bought second-hand with an existing Windows install — start fresh.
  • A Windows update or major driver install corrupted the OS beyond sfc repair.
  • BSODs persist across multiple replacement components — Windows is the only constant.

RMA the hardware when:

  • MemTest86 reports any error — RMA the RAM kit (most have lifetime warranty).
  • SMART reports failures or wear levels on storage — RMA the SSD/HDD.
  • The GPU produces artifacts in FurMark or fails 3DMark consistently.
  • Clean Windows install on fresh hardware still BSODs — likely motherboard or PSU. Take the system to a workshop with parts swap capability.

Key takeaways

  1. Photograph the stop code immediately. Without it, you're blind.
  2. WhoCrashed on the minidump tells you the offending driver in 90 seconds.
  3. 70% of BSODs are driver issues — GPU, audio, network, storage drivers most often.
  4. MEMORY_MANAGEMENT and PAGE_FAULT codes usually mean RAM — disable XMP and run MemTest86 4+ passes.
  5. Reinstall Windows last, not first. sfc /scannow and an in-place repair fix more than people expect.

Frequently asked questions

  • What does Blue Screen of Death actually mean?
    A kernel-level error so serious Windows halts the system to prevent data corruption. The stop code on screen tells you which subsystem failed.
  • What is the most common cause of BSOD?
    Drivers — about 70% of cases. GPU, storage, network and audio drivers in that order. Bad RAM is the next biggest cause, then storage faults.
  • How do I find out what caused my BSOD?
    Read the minidump in C:\Windows\Minidump using WhoCrashed (free) or BlueScreenView. The .sys file named is your culprit. Cross-reference with the stop code for a fix.
  • What does DRIVER_IRQL_NOT_LESS_OR_EQUAL mean?
    A driver tried to access memory at the wrong interrupt level — almost always a driver bug. Read the minidump to identify which one, then update or rollback.
  • What does PAGE_FAULT_IN_NONPAGED_AREA mean?
    Windows read corrupt data from RAM. Run MemTest86 first. If RAM is clean, treat as a driver issue using the minidump.
  • What does MEMORY_MANAGEMENT mean?
    RAM issue or unstable XMP/EXPO/overclock. Disable XMP first, test stability, then run MemTest86 4+ passes if still crashing.
  • What does CRITICAL_PROCESS_DIED mean?
    Core Windows file corrupted. Run sfc /scannow and DISM /Online /Cleanup-Image /RestoreHealth in admin command prompt. If that fails, in-place repair install.
  • Should I reinstall Windows after a BSOD?
    Not first. Most BSODs are fixed by updating a driver. Reinstall only after driver, RAM, storage and sfc/DISM repair have all been ruled out.
EvetechYou Dream It, We Build It

Elevating your gaming experience with premium hardware and cutting-edge technology since 2007.

Stay updated

Get the latest deals and tech news

Hours

Mon–Fri: 9am – 4pm

Sat: 9am – 12pm

Copyright © 2007 - 2026 - All rights reserved by EVETECH (Pty) Ltd

All images appearing on this website are copyright Evetech.co.za. Any unauthorized use of its logos and other graphics is forbidden. Prices and specifications are subject to change without notice. EVETECH IS NOT RESPONSIBLE FOR ANY TYPO, PHOTOGRAPH, OR PROGRAM ERRORS, AND RESERVES THE RIGHT TO CANCEL ANY INCORRECT ORDERS. Please Note: Product images are for illustrative purposes only and may differ from the actual product.