Solved Critical service died again.

Morph000 · Jan 21, 2026

OK, I've had endless issues with 24H2 (w10 on standby

) and now I've uninstalled Kaspersky thinking it was responsible. 2 days on now, running on Win Defender only.
Today - critical process died. Groan. No fix.
No minidump created as usual.
I did a repair install yesterday after removing Kaspersky to be sure. SFC - nothing, DISM - nothing, Chkdsk - nothing.
I ran Passmark's Memtest Pro last week - 25 passes overnight, 15 hours straight - no issues and no other observable issues like black screens or instability of any kind.
No BIOS update available. LG's latest drivers installed.
All I have is the V2 zip for today.
Haven't run Driver Verifier as yet.
Can someone help before I go to Win 10!

zbook · Jan 22, 2026

Morph000 said:
All I have is the V2 zip for today.

When available please post a V2 share link.

Morph000 · Jan 22, 2026

I did attach....err...maybe not.
Hit "attach Files" really hard!

Also, SSD is fine, temperatures normal in system, Driver verifier says all drivers signed.

zbook · Jan 22, 2026

The logs reported a one day installation with one BSOD.

1) Was Kaspersky AV uninstalled with its uninstall tool?

If not, please run the tool:

Removal tool for Kaspersky applications on Windows (kavremover)

Overview of settings and features available in a Kaspersky application and guides on how to use them.

support.kaspersky.com

2) Add WMIC:

DISM /Online /Add-Capability /CapabilityName:WMIC~~~~

Add or Remove WMIC command Feature in Windows 11

This tutorial will show you how to add or remove the WMIC command as an optional feature for all users in Windows 11. The WMI command-line (WMIC) utility provides a command-line interface for Windows Management Instrumentation (WMI). WMIC is compatible with existing shells and utility commands...

www.elevenforum.com

3) Run Tuneup plus > post a share link

https://www.tenforums.com/attachments/bsod-crashes-debugging/360139d1645183596-batch-files-use-bsod-debugging-tuneup_plus_log.zip

Batch files for use in BSOD debugging - Windows 10 Help Forums

Information This thread is for use by the BSOD team to store batch files that can be used to collect additional data, fix settings or anything else that is useful in debugging BSOD problems in Windows 10. The way I see it working is the first

www.tenforums.com

Batch files for use in BSOD debugging - Windows 10 Help Forums

Information This thread is for use by the BSOD team to store batch files that can be used to collect additional data, fix settings or anything else that is useful in debugging BSOD problems in Windows 10. The way I see it working is the first

www.tenforums.com

4) Enable regback:

Enable Automatic Backup of System Registry when Restart in Windows 11

This tutorial will show you how to enable automatic backup of the system registry to the RegBack folder when the computer restarts in Windows 10 and Windows 11. Starting with Windows 10, version 1803, Windows no longer automatically backs up the system registry to the RegBack folder when the...

www.elevenforum.com

5) Create a new restore point:

Create System Restore Point in Windows 11

This tutorial will show you how to manually create a restore point in Windows 11. Turning on system protection for a drive allows System Restore to include the drive when restore points are created so you can undo undesired system changes by reverting to a previous point in time. System...

www.elevenforum.com

6) Monitor using: reliability-history

View Reliability History in Windows 11

This tutorial will show you how to view reliability history for your Windows 11 device. The Reliability Monitor provides a system stability overview and details about events that impact reliability. It calculates the Stability Index shown in the System Stability Chart. Reliability Monitor...

www.elevenforum.com

7) For any new BSOD > post a new V2 share link into the newest post

8) See the multiple active threads for upgrading secure boot:

Frequently asked questions about the Secure Boot update process - Microsoft Support
https://techcommunity.microsoft.com...ook-for-certificates-expiring-in-2026/4469235
https://learn.microsoft.com/en-us/w...=windows-11#14-signature-databases-db-and-dbx
https://support.microsoft.com/en-us...-updates-a7be69c9-4634-42e1-9ca1-df06f43f360d
Updating Microsoft Secure Boot keys before expiration in June 2026 | Windows 11 Forum
Secure boot update HowTo | Windows 11 Forum

How to check if your Secure Boot certs are updated. (three methods)

Method One Download cjee21's files, attached to the bottom of this post. 1. Save the file to your desktop. 2. Extract the contents to your desktop. 3. Open: Check-UEFISecureBootVariables-main 4. Right click: Check UEFI PK, KEK, DB and DBX.cmd ...and choose: Run as administrator. Your...

www.elevenforum.com

garlin's PowerShell scripts for updating Secure Boot CA 2023

INTRO For the last two months, I've been working on new PowerShell scripts to automate the Secure Boot CA 2023 update process. A number of contributed scripts or guides presented on various ElevenForum threads (including a few of my earlier scripts) are lacking in clarity. There's simply too...

www.elevenforum.com

Code:

Event[1135]
  Log Name: System
  Source: EventLog
  Date: 2026-01-22T14:27:33.9000000Z
  Event ID: 6008
  Task: None
  Level: Error
  Opcode: N/A
  Keyword: Classic,
  User: N/A
  User Name: N/A
  Computer: Gram17
  Description:
The previous system shutdown at 2:24:06 PM on ?1/?22/?2026 was unexpected.

Code:

Event[1147]
  Log Name: System
  Source: volmgr
  Date: 2026-01-22T14:27:08.5400000Z
  Event ID: 161
  Task: None
  Level: Error
  Opcode: N/A
  Keyword: Classic,
  User: N/A
  User Name: N/A
  Computer: Gram17
  Description:
Dump file creation failed due to error during dump creation. BugCheckProgress was: 0x00040049

Code:

Event[1154]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2026-01-22T14:27:09.1340000Z
  Event ID: 41
  Task: N/A
  Level: Critical
  Opcode: Info 
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: Gram17
  Description:
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.

Code:

Event[1316]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2026-01-22T14:32:40.6940000Z
  Event ID: 1801
  Task: N/A
  Level: Error
  Opcode: Info 
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: Gram17
  Description:
Updated Secure Boot certificates are available on this device but have not yet been applied to the firmware. Review the published guidance to complete the update and maintain full protection. This device signature information is included here.
DeviceAttributes: OEMModelNumber:17Z90S-G.AP78A;OEMModelSystemFamily:gram PC;OEMManufacturerName:LG Electronics;OEMModelSKU:EVO;FirmwareVersion:M1ZI0365 X64;OSArchitecture:amd64;
BucketId: c2a3168906844f78f81536ea33ed569eb14e4111a4e7fe89d4ae84906551096a
BucketConfidenceLevel:
UpdateType:
For more information, please see https://go.microsoft.com/fwlink/?linkid=2301018.

Morph000 · Jan 22, 2026

1. KRemover is for when the install has serious issues , but I ran it anyway.
2. WMIC is already installed and working.
3. Restore point and registry backup created.
4. Reliability report attached.
5. Tuneup plus links require a tenforum account...even the non member link doesn't work.
6. Boot cert screencap attached, but I'd prefer for it to rollout via Win updates.

zbook · Jan 22, 2026

Please post images or share links displaying commands with results including any messages and codes for

WMIC and Tuneup plus.

For secure boot please post in the active threads as needed.

Morph000 · Jan 23, 2026

Joined tenforums to get tuneup...

zbook · Jan 23, 2026

Please create a new restore point.

Settings are now configured so that if BSOD occur they are less likely to be missed and more likely to create the optimal files for debugging.

If BSOD reoccur then post a new V2 share link into the newest post.

If there are no BSOD after monitoring for one week then plan to complete the thread.

Morph000 · Jan 23, 2026

And now we wait...

Meanwhile I installed Win 10 on the 2nd NVMe and adding apps. Got True Launch Bar back ! Woo hoo!

Morph000 · Jan 28, 2026

So... someone explain something for me. What does tuneup plus do that running chkdsk/sfc/dism doesn't ?
I'm not wading through that batch file code!

I note in passing that some of the LG apps have been disabled/removed as though they may be problematic.
It's also interesting to note in passing that as per Britec09's recent video on youtube, wiping the system fixed update issues that SFC/DISM can't.
Begs the question - what are SFC and DISM missing or not doing to fix problems.
As per the recent OOB utter fiasco, Microsludge have MAJOR problems with W11, excluding those ultra-rare individuals that claim their system are error free of course.

zbook · Jan 28, 2026

Commands can be typed to run one at a time.

Sometimes multiple commands can be typed then copied and pasted.

Scripts can be written that run in the background.

Each command of interest can be checked with an internet search.

V2 and BSOD scripts were written years ago.

Each script writer may have their preferred layout for results.

So you can run each command manually or with a script.

Many of the frequently used commands have EF and TF tutorials.

Morph000 · Jan 29, 2026

So... a week on and another BSOD...
Done the usual fluff - chkdsk,sfc,dism, memtest, disable 3rd parties, remove AV. drive health, temperatures, repair install...
Could be a dodgy NVMe, but probably not.
Just how 24H2 is I guess.
I can go back to 23H2 as shipped or W10 which has been working perfectly for a week.
In the absence of a dump file (which W10 DOES do), these issues won't be resolved, and as no-one can explain why dump files aren't being created, that's it.
It's up to MIcrosludge to fix their product.

zbook · Jan 29, 2026

Please see post #4:

Today is 01/29/2026. Your latest reply was post in an old thread: Sep 15, 2025

From this thread post #4:
For any new BSOD > post a new V2 share link into the newest post

and post #7
If BSOD reoccur then post a new V2 share link into the newest post.

Copied from your Sep 15, 2025 thread:

https://www.elevenforum.com/attachments/gram17-2026-01-30_14-49-31-zip.161592/

https://www.elevenforum.com/attachments/events-zip.161594/

1) Indicate whether Memory integrity is on or off.

If off > turn on > post any error messages or codes.

Enable or Disable Core Isolation Memory Integrity in Windows 11

This tutorial will show you how to turn on or off core isolation memory integrity in Windows 11. Core isolation is a security feature of Microsoft Windows that protects important core processes of Windows from malicious software by isolating them in memory. It does this by running those core...

www.elevenforum.com

2) Run Memtest86+ for 8 or more passes > take pictures > post images or share links

Memtest86+ | The Open-Source Memory Testing Tool
Indicate

Just 1 error is a test fail and testing can be aborted.

The more the passes the better the testing conditions.

It sometimes takes passes into the 20's to detect malfunctioning RAM.

The RAM can be tested all at one time or one at a time in the same DIMM.

Memtest86+ | The Open-Source Memory Testing Tool

MemTest86+ - Test RAM

Please make sure that this very large drive is tested: WD Elements 25A3 USB Device

3) Run Sea Tools Long generic test (all drives) > post images or share links

SeaTools | Seagate US

SeaTools - Quick diagnostic tool that checks the health of your drive.

www.seagate.com

4) Run HD Tune (all drives) (old version) > post images or share links

HD Tune website

HD Tune

www.hdtune.com

https://www.hdtune.com/files/hdtune_255.exe

a) Health

b) Full error scan

5) Open administrative command prompt and copy and paste:

chkdsk /b /v

Run these chkdsk switches on all drives using the syntax: chkdsk /b /v C: or chkdsk /b /v D: or chkdsk /b /v E: etc.

Make sure that the windows drive runs overnight while sleeping.

C:\WINDOWS\system32>chkdsk /b /v
The type of the file system is NTFS.
Cannot lock current drive.
Chkdsk cannot run because the volume is in use by another
process. Would you like to schedule this volume to be
checked the next time the system restarts? (Y/N)

Type: Y

Reboot as needed.

6) After completing all chkdsk /b /v run:

https://www.tenforums.com/attachmen...-files-use-bsod-debugging-chkdskfromevent.bat

Batch files for use in BSOD debugging - Windows 10 Help Forums

Batch files for use in BSOD debugging - Windows 10 Help Forums

Make sure that this runs only after the prior three steps for each drive.

7) Run HD Sentinel (all drives) > post images or share links (do not run until posting results for each steps 3, 4, 5 and 6)

Hard Disk Sentinel - HDD health and temperature monitoring
a) Overview
b) Temperature
c) SMART

8) Please make sure that all drive testing steps are performed in sequence

These steps / tests can be performed overnight while sleeping:
a) Memtest86+
b) Sea Tools Long generic test
c) HD Tune Full error scan
d) Chkdsk /b /v

Code:

------------------------
Disk & DVD/CD-ROM Drives
------------------------
      Drive: C:
 Free Space: 783.4 GB
Total Space: 951.8 GB
File System: NTFS
      Model: SAMSUNG MZVL41T0HBLB-00B07

      Drive: G:
 Free Space: 5089.8 GB
Total Space: 9537.5 GB
File System: NTFS
      Model: WD Elements 25A3 USB Device

Code:

Location     : Controller0-ChannelA
BankLabel    : BANK 0
Manufacturer : Samsung
MemoryType   : LPDDR5
FormFactor   : Unknown
Capacity     : 2GB
Speed        : 7467
Serial       : 00000000
PartNumber   : K3KL8L80CM-MGCT
ECC          : False
TypeDetail   : {Synchronous}

Location     : Controller0-ChannelB
BankLabel    : BANK 1
Manufacturer : Samsung
MemoryType   : LPDDR5
FormFactor   : Unknown
Capacity     : 2GB
Speed        : 7467
Serial       : 00000000
PartNumber   : K3KL8L80CM-MGCT
ECC          : False
TypeDetail   : {Synchronous}

Location     : Controller0-ChannelC
BankLabel    : BANK 2
Manufacturer : Samsung
MemoryType   : LPDDR5
FormFactor   : Unknown
Capacity     : 2GB
Speed        : 7467
Serial       : 00000000
PartNumber   : K3KL8L80CM-MGCT
ECC          : False
TypeDetail   : {Synchronous}

Location     : Controller0-ChannelD
BankLabel    : BANK 3
Manufacturer : Samsung
MemoryType   : LPDDR5
FormFactor   : Unknown
Capacity     : 2GB
Speed        : 7467
Serial       : 00000000
PartNumber   : K3KL8L80CM-MGCT
ECC          : False
TypeDetail   : {Synchronous}

Location     : Controller1-ChannelA
BankLabel    : BANK 0
Manufacturer : Samsung
MemoryType   : LPDDR5
FormFactor   : Unknown
Capacity     : 2GB
Speed        : 7467
Serial       : 00000000
PartNumber   : K3KL8L80CM-MGCT
ECC          : False
TypeDetail   : {Synchronous}

Location     : Controller1-ChannelB
BankLabel    : BANK 1
Manufacturer : Samsung
MemoryType   : LPDDR5
FormFactor   : Unknown
Capacity     : 2GB
Speed        : 7467
Serial       : 00000000
PartNumber   : K3KL8L80CM-MGCT
ECC          : False
TypeDetail   : {Synchronous}

Location     : Controller1-ChannelC
BankLabel    : BANK 2
Manufacturer : Samsung
MemoryType   : LPDDR5
FormFactor   : Unknown
Capacity     : 2GB
Speed        : 7467
Serial       : 00000000
PartNumber   : K3KL8L80CM-MGCT
ECC          : False
TypeDetail   : {Synchronous}

Location     : Controller1-ChannelD
BankLabel    : BANK 3
Manufacturer : Samsung
MemoryType   : LPDDR5
FormFactor   : Unknown
Capacity     : 2GB
Speed        : 7467
Serial       : 00000000
PartNumber   : K3KL8L80CM-MGCT
ECC          : False
TypeDetail   : {Synchronous}

Morph000 · Feb 19, 2026

Copied to this thread.

ctually downloaded the Feb update today too and looked good.

But shortly after... BSOD - Critical Process Died (0xEF) again.
No dump file...
Ran V2 log collector. All the other usual fluff (SFC, HD Tune etc etc) run over and over before. No issues. No more time wasting with them!)
Maybe someone can see something in the V2 logs...

Anyone here with actual diagnostic skills, like pc forensics or Windows OS development (since the software parts cannon mindset isn't the way forward)?

zbook · Feb 19, 2026

Today is 02/19/26.

The V2 was 6 days old and dated 02/13.

No share link results from post #13 were posted.

Why not post new results?

Why not follow steps to rule in and rule out problems?

Why not use one thread?

Why not use one forum?

To receive help in this forum and other forums please post share links with results.

No dump file being created

For the past few weeks I've been getting BSOD's, mainly unexpected_store_exception (0x154). CrystalDiskInfo says SSD 100% fine, external HDD fine too. No memory issues, SFC fine, DISM fine etc. But before we look at that, a more basic issue rears it's head - no DMP files are being created...

www.elevenforum.com

Morph000 · Apr 10, 2026

Marked as solved as it's been a month of solid use and not a single BSOD, or issue of any kind.
The parts-cannon software approach didn't show anything wrong, but I replaced the NVMe drive with a Samsung 990 and it's been perfect since.
The original drive passed every test thrown at it so I suspect an incompatibility with 24H2 as W10 and 23H2 worked fine...
That's 3 too-hard-basket problems I've fixed.

Solved Critical service died again.

Well-known member

My Computer

Well-known member

My Computer

Well-known member

Attachments

My Computer

Well-known member

My Computer

Well-known member

Attachments

My Computer

Well-known member

My Computer

Well-known member

Attachments

My Computer

Well-known member

My Computer

Well-known member

My Computer

Well-known member

My Computer

Well-known member

My Computer

Well-known member

My Computer

Well-known member

My Computer

Well-known member

Attachments

My Computer

Well-known member

My Computer

Well-known member

My Computer

Similar threads