Sysinternals question

esebm · Jun 23, 2025

Clean install would mean all my apps have to be reinstalled and set up from scratch, right?

esebm · Jun 23, 2025

TraderGary: I noticed that you have the Sysinternals suite installed. Are there any of the dozens .exe files that would show what's wrong with my PC?

pseymour · Jun 23, 2025

You can try the free version of WhoCrashed if you want.

Resplendence Software - Free Downloads

Resplendence Free Downloads

www.resplendence.com

Marcus Vinicus · Jun 23, 2025

Sysinternals is very good as an in-depth diagnostic tool but it has a decent learning curve to go with it. There is a very good tutorial from the guy who helped create it.

More tutorials here for anyone who is interested.

Sysinternals

Get to know Microsoft Sysinternals, a collection of advanced system utilities that you can use to manage, troubleshoot, and diagnose Windows systems and appl...

www.youtube.com

esebm · Jun 24, 2025

I tried that WhoCrash app and it tells me there is no minidump, so no dice.

Catnip · Jun 25, 2025

My suggestion is to run a memory test with Memtest386+. That way, you can rule out the RAM as a problem. When Windows is running in normal (not safe) mode, it may be accessing a bad memory location and kaboom. It can happen that the memory location is being written or read to during normal operation, but is not written to using safe mode.

Here is the place to get Memtest386+:

MemTest86 - Download now!

Download your free copy of MemTest86 here for USB.

www.memtest86.com

Another useful utility is Prime95. It will stress test your computer. Be careful though. You have to monitor your temps while you run this utility, and you have to shut down if the CPU gets too hot (above TJMax). The TJMax rating for your CPU is 95C. Don't let Prime95 exceed that temp. I don't know what you are using for cooling, but if you are using a small cooler or a stock cooler, it is very important to monitor your temps. When I do this, I have Prime95 open and running, with HWMonitor running along side it.

Here is where to get Prime95:

Prime95 v 30.19 Build 20 - Download

Download Prime95 - a software application designed to stress-test computer systems to identify weaknesses in system stability.

prime95.net

And HWMonitor:

HWMONITOR | Softwares | CPUID

HWMonitor for Windows® x86/x64 is a hardware monitoring program that reads PC systems main health sensors : voltages, temperatures, powers, currents, fans speed, utilizations, clock speeds ... The program handles : CPU and GPU-level hardware monitoring...

www.cpuid.com

esebm · Jun 27, 2025

As to "accessing a bad memory location", that should not come into play when the PC just sits there, no application is even open, just the desktop, no keystroke, no mouse movement and, boom!

esebm · Jun 28, 2025

Just for fun, I replaced the memory sticks, same result.
I also ran the stress test until the CPU temp got up to 85 degrees, no problem at all.
Stopped it, temps got back to normal and 2 minutes later the PC shut off. Drives me nuts!

Catnip · Jun 29, 2025

This might sound like a stupid question, but do you have access to a FLIR temperature probe? You can use one to look for really hot spots on the motherboard. This sounds like either a FET getting hot on your mobo, or something in the power supply might be getting too hot. And no, good cooling won't help in this situation.

esebm · Jun 29, 2025

No, I don't have one of those probes.
Power supply is new.
PC runs for days in safe mode without a problem, so i does not seem like a hardware problem. right?

esebm · Jul 21, 2025

Guys, update: the PC has been running for a good week now in normal mode withot a hitch, go figure.
I'm ready to do a repair install for good measure but I find different approches suggested.
What would be the best surefire method?
Thanks for all the help so far.

pseymour · Jul 21, 2025

Repair Install Windows 11 with an In-place Upgrade

This tutorial will show you how to do a repair install of Windows 11 by performing an in-place upgrade without losing anything. If you need to repair or create a new recovery partition or having problems with the Windows 11 operating system on your PC, and the usual solutions will not fix it...

www.elevenforum.com

I've always used the ISO myself. Windows Update method sounds good, but I've never had occasion to use it; I don't need to repair much, thankfully.

zbook · Jul 21, 2025

1) Open the event viewer > system and application > post share links

How to share event logs in case of a computer issue

This article explains how to share Event Logs from the event viewer in case if you have a Windows problem as investigation would help.

www.yourwindowsguide.com

2) The share link in post #38 had:

a) the tuneup plus zip instead of the script results

Please run the script then view the completion pop up:

https://www.tenforums.com/attachments/bsod-crashes-debugging/360139d1645183596-batch-files-use-bsod-debugging-tuneup_plus_log.zip

b) the V2 findings were typical of a malfunctioning PSU

Please swap test or replace the PSU.

3) The BIOS Version/Date American Megatrends International, LLC. H.90, 7/25/2022

Upgrade the BIOS: H.9 > HE

https://www.msi.com/Motherboard/B450-TOMAHAWK-MAX-II/support

(wait until the PSU is swap tested)

Dark Knight · Jul 21, 2025

Just out of curiosity , do you have fast boot enabled in the bios?
I recently did a new pc build and my pc was doing sort of the same thing , driving me nuts , I disabled fast boot in the bios and it stopped.

Sheikh · Jul 21, 2025

esebm said:
No, I don't have one of those probes.
Power supply is new.
PC runs for days in safe mode without a problem, so i does not seem like a hardware problem. right?

I recommend you boot from a live Linux and put your system under pressure. there are some apps for benchmarking, stress testing and stability monitoring.
run as many as you can. also, I recommend memtest x86. disconnect all of your internal storages before running Linux from your USB drive.

zbook · Jul 21, 2025

The prior V2 ran while the computer was in safe mode with networking.

If possible, run the V2 log collector when in normal or clean boot:

Perform a Clean Boot in Windows 11 to Troubleshoot Software Conflicts

This tutorial will show you how to perform a clean boot to start Windows 10 or Windows 11 using a minimal set of drivers and startup programs for troubleshooting application conflicts. Troubleshooting Windows can be a complex process due to the many different drivers, settings, and programs...

www.elevenforum.com

esebm · Jul 21, 2025

Guys, thanks for all the suggestions.
I am at a loss, what could be gained from the event viewer and log collector after the PC has run flawlessly for over a week now?
BIOS has been updated to the 2025 version.
Power supply has been replaced with a high quality unit.
As to fast boot, I've checked the BIOS but find no mention of fast boot anywhere.
As to Linux, I know nothing about it, so it's out of the question.

kstev99 · Jul 21, 2025

Have you considered checking whether or not it could be shutting down because of overheating?
I would definitely check my fans and CPU cooler. Check for dust buildup or fan failure.
Maybe use a resident monitoring program like HWinfo or cpuid

Your processor will shut the computer down if the temp is excessive to prevent damage

esebm · Jul 21, 2025

Yes, checking the temps has been one of the first things I did, using cpuid and hwinfo, resetting the CPU with fresh thermal paste, no dust whatsoever.

zbook · Jul 21, 2025

The V2 log collector from 06/18/2025 with a 30 day look back had reported greater than 100 unexpected shutdowns and restarts.

When was the PSU replaced?

Please post a new V2 share link into the newest post with event viewer system and application if you want the stability / instability checked.

Code:

Event[33181]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2025-06-18T13:50:54.8110000Z
  Event ID: 41
  Task: N/A
  Level: Critical
  Opcode: Info 
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: Edgar
  Description:
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.

Code:

Event[33154]
  Log Name: System
  Source: EventLog
  Date: 2025-06-18T13:50:57.1740000Z
  Event ID: 6008
  Task: None
  Level: Error
  Opcode: N/A
  Keyword: Classic,
  User: N/A
  User Name: N/A
  Computer: Edgar
  Description:
The previous system shutdown at 1:46:20 PM on ?6/?18/?2025 was unexpected.

Sysinternals question

Well-known member

My Computer

Well-known member

My Computer

putting the mental back in experimental

My Computer

Semper paratus

My Computers

Well-known member

My Computer

Forum Nitwit

My Computer

Well-known member

My Computer

Well-known member

My Computer

Forum Nitwit

My Computer

Well-known member

My Computer

Well-known member

My Computer

putting the mental back in experimental

My Computer

Well-known member

My Computer

Well-known member

My Computer

Software Developer

My Computers

Well-known member

My Computer

Well-known member

My Computer

Active member

My Computer

Well-known member

My Computer

Well-known member

My Computer

Similar threads