Blue screen of death (BSOD)

3.1 Given a scenario, troubleshoot common Windows OS issues.

📘CompTIA A+ Core 2 (220-1202)

---

What is a BSOD?

• A Blue Screen of Death (BSOD) is a stop error in Windows.
• It happens when the operating system encounters a critical error it can’t recover from.
• When a BSOD occurs, Windows stops completely to prevent damage to the system or data.
• The screen turns blue and shows an error code and sometimes the file or driver that caused the problem.

---

Why does a BSOD happen?

BSODs are usually caused by issues at the hardware or driver level, or sometimes by system file corruption. Some common causes include:

1. Hardware failures
   • Faulty RAM, hard drives, or power supply problems can trigger BSODs.
2. Driver issues
   • Outdated, incompatible, or corrupted drivers for devices like graphics cards, network adapters, or storage controllers often cause BSODs.
3. Software or OS problems
   • A corrupted Windows system file or incompatible software can crash the OS.
4. Overheating
   • If hardware components get too hot, Windows may shut down to prevent damage, sometimes causing a BSOD.
5. Virus or malware infection
   • Certain malware can corrupt critical system files or memory, resulting in BSODs.

---

Common BSOD error codes

On the blue screen, Windows usually shows an error code that helps identify the problem. Examples:

• IRQL_NOT_LESS_OR_EQUAL → Often caused by a bad driver or memory issue.
• PAGE_FAULT_IN_NONPAGED_AREA → Usually a faulty RAM module or corrupted driver.
• SYSTEM_SERVICE_EXCEPTION → Typically driver conflicts or software problems.
• CRITICAL_PROCESS_DIED → A critical system process failed, often due to corruption.
• MEMORY_MANAGEMENT → Indicates RAM problems.

Tip for the exam: Recognizing a few common error codes and knowing what they generally mean is enough. You don’t need to memorize every single code.

---

Steps to troubleshoot a BSOD

When you see a BSOD, the goal is to identify the cause and fix it safely. Here’s the step-by-step approach:

1. Note the error code

• When the BSOD appears, write down the error code and any filename listed.
• This is your starting point to identify whether it’s a driver, hardware, or OS problem.

2. Boot into Safe Mode

• Safe Mode loads Windows with minimal drivers and services.
• This helps you check if the BSOD is caused by third-party drivers or software.
• How to boot into Safe Mode:
  1. Restart the computer.
  2. Press F8 (older Windows) or hold Shift + Restart (Windows 10/11) to get advanced boot options.
  3. Select Safe Mode.

3. Check recent changes

• Determine if the BSOD started after:
  • Installing new hardware.
  • Updating drivers.
  • Installing software or Windows updates.
• If yes, roll back the driver or uninstall the software.

4. Update drivers and Windows

• Use Device Manager to check for outdated drivers.
• Run Windows Update to ensure the OS is fully patched.

5. Test hardware

• RAM → Use Windows Memory Diagnostic or MemTest86.
• Hard drive → Use CHKDSK /F to check for errors.
• Replace faulty hardware if tests fail.

6. Check system files

• Run System File Checker (SFC) and DISM:
  • sfc /scannow → Repairs corrupted system files.
  • DISM /Online /Cleanup-Image /RestoreHealth → Fixes Windows image.

7. Check for malware

• Run a full antivirus scan to make sure malicious software isn’t causing the crash.

8. Restore or reset

• If the above steps don’t work:
  • Use System Restore to revert to a previous working state.
  • As a last resort, reset Windows or reinstall.

---

Tools for diagnosing BSODs

1. Event Viewer
   • Check Windows Logs → System for details about the crash.
2. BlueScreenView (NirSoft)
   • Free tool that shows a history of BSODs and the drivers causing them.
3. MiniDump files
   • Windows creates .dmp files in C:\Windows\Minidump.
   • These can be analyzed to pinpoint the exact cause.

---

Tips for the Exam

• Know that BSOD = critical Windows stop error.
• Understand common causes: hardware, drivers, OS corruption, malware.
• Be familiar with troubleshooting steps:
  1. Note error code.
  2. Boot into Safe Mode.
  3. Check recent changes.
  4. Update drivers and Windows.
  5. Test hardware.
  6. Check system files.
  7. Check for malware.
  8. Restore or reset Windows.
• Recognize a few common error codes and what they generally mean.

---

✅ Summary:
The BSOD is Windows’ way of safely stopping when something goes seriously wrong. By carefully noting the error code, checking drivers, hardware, and system files, and using safe mode or recovery tools, you can troubleshoot and resolve the issue.