| Symptom | Common Causes & Solutions |
|---|---|
| Blue Screen of Death (BSOD) | Hardware failure, driver issues, RAM problems; check error code, update drivers, run memory diagnostic, check Event Viewer |
| Slow Performance | Insufficient RAM, malware, too many startup programs, fragmented HDD; disable startup items, run malware scan, add RAM, defragment drive |
| Boot Failure | Corrupt boot files, missing BOOTMGR, disk errors; use bootrec /fixmbr, /fixboot, /rebuildbcd commands from Recovery Environment |
| Frequent Crashes | Overheating, bad drivers, malware, failing hardware; check temperatures, update drivers, scan for malware, test RAM/HDD |
| Application Crashes | Incompatible software, corrupt installation, insufficient resources; reinstall application, check compatibility mode, update software |
| Low Memory Warnings | Too many programs running, memory leak, insufficient RAM; close unnecessary programs, restart system, add RAM |
| USB Controller Resource Warnings | Too many USB devices, power issues; use powered USB hub, reduce connected devices, update USB drivers |
| System Instability | Corrupt system files, bad updates, malware; run sfc /scannow, DISM, uninstall recent updates, malware scan |
| No OS Found | Boot order incorrect, failed HDD, corrupt boot sector; check BIOS boot order, test HDD health, repair boot files |
| Sluggish Response | High disk usage, background processes, insufficient resources; check Task Manager, disable unnecessary services, upgrade hardware |
| Boots to Safe Mode | Startup setting changed, corrupt drivers, system protection; use msconfig to change boot options, fix driver issues |
| Tool | Purpose & Usage |
|---|---|
| System Restore | Reverts system to previous restore point; preserves personal files, removes recent software/driver changes |
| Startup Repair | Fixes boot problems automatically; accessed from Recovery Environment, repairs boot configuration |
| System File Checker (sfc /scannow) | Scans and repairs corrupt system files; run from elevated command prompt, requires Windows installation media for repairs |
| DISM (Deployment Image Servicing) | Repairs Windows component store; use DISM /Online /Cleanup-Image /RestoreHealth before sfc /scannow |
| chkdsk | Checks and repairs disk errors; use chkdsk /f (fixes errors), /r (locates bad sectors), requires reboot for system drive |
| bootrec | Repairs boot configuration; /fixmbr (repairs MBR), /fixboot (writes boot sector), /rebuildbcd (rebuilds BCD) |
| System Image Recovery | Restores full system backup; requires previously created system image, replaces entire system |
| Reset This PC | Reinstalls Windows; Keep My Files (preserves data) or Remove Everything (clean install) |
| Utility | Function |
|---|---|
| msconfig | System Configuration; manage startup programs, boot options, services, diagnostic startup |
| Task Manager | Monitor performance, end tasks, manage startup programs, view processes and services |
| Event Viewer | View system logs; Application, Security, System logs; filter by error level, find event IDs |
| Performance Monitor | Track system performance metrics; CPU, memory, disk, network counters |
| Resource Monitor | Real-time detailed resource usage; CPU, memory, disk, network activity per process |
| Device Manager | Manage hardware devices; update/rollback drivers, disable devices, view conflicts (yellow exclamation) |
| Disk Management | Manage partitions, format drives, assign drive letters, extend/shrink volumes |
| Services | Manage Windows services; start/stop services, set startup type (Automatic, Manual, Disabled) |
| Registry Editor (regedit) | Edit Windows registry; backup before changes, HKLM and HKCU are main hives |
| Malware Type | Characteristics |
|---|---|
| Virus | Attaches to files, replicates when host executes, requires user action to spread |
| Worm | Self-replicating, spreads without user intervention, exploits network vulnerabilities |
| Trojan | Disguised as legitimate software, does not self-replicate, provides backdoor access |
| Ransomware | Encrypts files, demands payment for decryption key, spreads via email/exploit kits |
| Spyware | Monitors user activity, collects information without consent, tracks browsing/keystrokes |
| Rootkit | Hides malware presence, operates at kernel level, difficult to detect and remove |
| Adware | Displays unwanted advertisements, tracks browsing, may redirect searches |
| Keylogger | Records keystrokes, captures passwords and sensitive data, hardware or software-based |
| Botnet | Network of infected computers, controlled remotely, used for DDoS attacks or spam |
| Cryptominer | Uses system resources to mine cryptocurrency, causes high CPU usage and slow performance |
| Symptom | Troubleshooting Steps |
|---|---|
| Slow Performance | Close background apps, clear cache, uninstall unused apps, restart device, check storage space, update OS |
| Battery Drain | Check battery usage stats, disable location services when not needed, reduce screen brightness, close background apps, disable push notifications |
| Overheating | Remove case, close intensive apps, avoid charging while using, check for malware, update apps and OS |
| Cannot Broadcast to External Monitor | Verify adapter compatibility, check cable connections, enable screen mirroring in settings, restart both devices |
| No Sound from Speakers | Check volume level, disable Bluetooth (may be connected to external device), restart device, check headphone jack for debris |
| GPS Not Functioning | Enable location services, check app permissions, ensure GPS is enabled in settings, restart device, update maps data |
| Touchscreen Non-responsive | Clean screen, remove screen protector, restart device, boot to safe mode, factory reset if persistent |
| Apps Not Loading | Force stop app, clear app cache and data, check for updates, reinstall app, verify storage space |
| App Crashes | Update app, clear cache, reinstall app, check OS compatibility, verify sufficient RAM |
| Unable to Decrypt Email | Verify certificates installed, check S/MIME settings, ensure private key present, verify sender's public key |
| Short Battery Life | Calibrate battery, enable battery saver mode, reduce sync frequency, disable vibration, replace aging battery |
| Connectivity Issues | Toggle airplane mode, forget and reconnect to network, reset network settings, update carrier settings |
| Issue | Resolution |
|---|---|
| Device Won't Boot | Force restart, charge for 30 minutes, boot to recovery mode, factory reset, flash firmware |
| Frozen Screen | Force restart (hold power + volume down for 10 seconds), remove battery if removable, boot to safe mode |
| Random Reboots | Update OS, uninstall recently added apps, check for overheating, factory reset, hardware fault |
| Storage Full | Delete unused apps, clear cache, move photos/videos to cloud, use SD card, delete large files |
| OS Update Failed | Ensure sufficient storage, connect to stable Wi-Fi, charge to 50%+, clear cache partition, manual update via computer |
| Problem | Solution |
|---|---|
| Application Will Not Install | Check system requirements, verify sufficient disk space, run as administrator, disable antivirus temporarily, use compatibility mode |
| Application Crashes on Startup | Update application, reinstall, check Event Viewer for errors, run in compatibility mode, verify .NET Framework installed |
| Application Fails to Uninstall | Use Programs and Features, run uninstaller as admin, use vendor removal tool, edit registry to remove entries, use third-party uninstaller |
| Missing DLL Files | Reinstall application, download DLL from legitimate source, run sfc /scannow, install Visual C++ Redistributables |
| Compatibility Issues | Right-click > Properties > Compatibility tab, select previous Windows version, run as administrator, disable display scaling |
| Cannot Open File Type | Set default program (Settings > Apps > Default apps), install required application, repair file association in registry |
| Issue | Resolution |
|---|---|
| Updates Fail to Install | Run Windows Update Troubleshooter, clear SoftwareDistribution folder, run DISM and sfc, manually download update |
| Updates Cause System Issues | Uninstall recent updates (Settings > Update & Security > View update history), use System Restore, defer feature updates |
| Windows Update Service Not Running | Services.msc > Windows Update > set to Automatic, restart service, check dependencies (BITS, Cryptographic Services) |
| Stuck Downloading or Installing | Restart Windows Update service, delete SoftwareDistribution folder contents, run update troubleshooter, reset Windows Update components |
| Issue | Solution |
|---|---|
| Browser Crashes | Clear cache and cookies, disable extensions, reset browser settings, reinstall browser, scan for malware |
| Slow Loading Pages | Clear browsing data, disable unnecessary extensions, check DNS settings, flush DNS cache (ipconfig /flushdns) |
| Pop-ups and Redirects | Enable pop-up blocker, scan for adware/malware, remove suspicious extensions, reset browser to defaults |
| Certificate Errors | Check system date/time, clear SSL cache, update browser, disable antivirus SSL scanning, import root certificates |
| Cannot Connect to Websites | Check internet connection, flush DNS, reset TCP/IP stack, disable proxy settings, check firewall rules |
| Symptom | Indication & Action |
|---|---|
| Pop-up Windows | Adware or browser hijacker; scan for malware, reset browser settings, remove unwanted extensions |
| Browser Redirection | Hijacked DNS or hosts file; check DNS settings, scan hosts file (C:\Windows\System32\drivers\etc), reset browser |
| Security Alerts | Verify legitimacy (may be fake); check from trusted security software only, investigate in Event Viewer |
| False Alerts | Rogue antivirus software; do not click, boot to safe mode, remove fake AV, run legitimate malware scan |
| Altered System Files | Malware infection or corruption; run sfc /scannow, check file signatures, restore from backup |
| Missing/Renamed Files | Ransomware or malware; isolate system, identify infection, restore from backup, do not pay ransom |
| Unwanted Notifications | Adware or PUP; review notification settings, uninstall suspicious programs, scan for malware |
| OS Update Failures | Malware preventing updates; scan system, run update troubleshooter, manually install updates |
| Issue | Resolution |
|---|---|
| Access Denied Errors | Check NTFS permissions, take ownership of file/folder, run as administrator, verify user group membership |
| Cannot Delete File | Close programs using file, boot to safe mode, use command prompt (del command), check file permissions |
| Shared Folder Not Accessible | Verify network connectivity, check share permissions, ensure file sharing enabled, verify credentials |
| Invalid Certificate Warnings | Check system date/time, verify certificate validity period, install root CA certificate, renew expired certificate |
| Problem | Troubleshooting |
|---|---|
| Printer Not Found | Check physical connections, verify printer powered on, restart print spooler service, reinstall printer driver |
| Print Jobs Stuck in Queue | Clear print queue, restart print spooler (services.msc > Print Spooler), delete files in C:\Windows\System32\spool\PRINTERS |
| Garbled or Incorrect Output | Update printer driver, check document formatting, verify correct printer language (PCL/PostScript), reinstall driver |
| Access Denied to Printer | Check printer permissions, verify user in correct group, ensure printer shared properly, run as administrator |
| Slow Printing | Reduce print quality, update driver, check network connection, add printer memory, simplify graphics |
| Driver Unavailable | Download driver from manufacturer, use Windows Update for drivers, install compatible driver for OS version |
| Problem | Troubleshooting |
|---|---|
| No Internet Connection | Check physical connections, restart modem/router, verify IP configuration (ipconfig), renew IP (ipconfig /renew), check DNS |
| Limited Connectivity | Indicates DHCP failure or invalid IP; release/renew IP, check DHCP server, assign static IP, restart network adapter |
| Intermittent Connection | Check cable quality, update network drivers, scan for interference, verify router firmware, check for IP conflicts |
| Cannot Connect to Network Share | Verify credentials, check network path, ensure File and Printer Sharing enabled, ping server by IP and name |
| Slow Network Speed | Check bandwidth usage, scan for malware, update network drivers, check for interference, test with wired connection |
| DNS Resolution Failure | Flush DNS (ipconfig /flushdns), change DNS servers, check hosts file, restart DNS client service |
| IP Address Conflict | Release and renew IP, use static IP outside DHCP range, restart router, identify conflicting device |
| Command | Purpose |
|---|---|
| ipconfig | Display IP configuration; /all (detailed), /release (release IP), /renew (obtain new IP), /flushdns (clear DNS cache) |
| ping | Test connectivity to host; ping 8.8.8.8 (test internet), ping hostname (test DNS), -t (continuous ping) |
| tracert | Trace route to destination; shows each hop, identifies where connection fails |
| nslookup | Query DNS records; test DNS resolution, verify A records, check mail servers |
| netstat | Display network connections; -a (all connections), -n (numeric), -b (executable), -o (process ID) |
| net use | Map network drives; net use Z: \\server\share, disconnect with /delete |
| netsh | Network shell utility; reset TCP/IP (netsh int ip reset), reset Winsock (netsh winsock reset) |
| pathping | Combines ping and tracert; shows packet loss per hop, identifies problematic routers |
| Problem | Diagnosis & Solution |
|---|---|
| High CPU Usage | Check Task Manager for process, end unnecessary tasks, scan for malware, update drivers, add cooling |
| High Memory Usage | Identify memory-heavy processes, close unused programs, add RAM, check for memory leaks, disable startup programs |
| High Disk Usage | Check for Windows Search indexing, disable Superfetch/Prefetch, run disk cleanup, check for failing drive, scan for malware |
| Disk Thrashing | Indicates insufficient RAM; add memory, close programs, disable virtual memory paging, upgrade to SSD |
| Long Boot Time | Disable startup programs (msconfig), check for malware, defragment HDD, clean temp files, verify fast startup enabled |
| Application Freezing | Check resource usage, update application, verify sufficient RAM, scan for conflicts, reinstall application |
| Step | Actions |
|---|---|
| 1. Identify the Problem | Gather information, question user, identify symptoms, determine recent changes, duplicate problem if possible |
| 2. Establish Theory | Create list of probable causes, consider obvious first, question the obvious, start with easy fixes |
| 3. Test Theory | Test most probable cause, if confirmed move to next step, if not confirmed establish new theory or escalate |
| 4. Establish Plan of Action | Create action plan, identify potential effects, get approval if major change, consider corporate policies |
| 5. Implement Solution | Apply fix, verify access and permissions, implement preventive measures, follow best practices |
| 6. Verify Functionality | Confirm full system functionality, verify user satisfaction, test related systems, implement preventive measures |
| 7. Document Findings | Record problem description, solution implemented, lessons learned, add to knowledge base |
| Stop Code | Meaning & Solution |
|---|---|
| IRQL_NOT_LESS_OR_EQUAL | Driver accessing improper memory; update/rollback drivers, check for hardware conflicts, test RAM |
| PAGE_FAULT_IN_NONPAGED_AREA | Bad RAM or driver issue; run memory diagnostic, update drivers, check disk errors |
| SYSTEM_SERVICE_EXCEPTION | Driver or system service error; update drivers, run sfc /scannow, check Event Viewer |
| KMODE_EXCEPTION_NOT_HANDLED | Kernel-mode driver error; update drivers, especially graphics and network, check for malware |
| BAD_POOL_HEADER | Memory allocation error; test RAM, update drivers, scan for malware, check disk |
| CRITICAL_PROCESS_DIED | Essential system process terminated; run sfc /scannow, check for corrupt system files, restore system |
| DPC_WATCHDOG_VIOLATION | Driver timeout; update firmware and drivers, check for hardware conflicts, disable fast startup |
| DRIVER_POWER_STATE_FAILURE | Driver power management issue; update drivers, disable fast startup, check power settings |
| Issue | Resolution |
|---|---|
| Windows Not Activated | Enter valid product key, use activation troubleshooter, verify internet connection, reactivate after hardware change |
| Activation Error 0xC004F074 | KMS server not found; check DNS, verify network connectivity, ensure KMS server running |
| Hardware Change Deactivation | Use activation troubleshooter, link Microsoft account to license, select "I changed hardware recently" |
| Invalid Product Key | Verify key matches Windows edition, check for typos, ensure key not already used on maximum devices |
| Activation Server Unavailable | Check internet connection, wait and retry, activate by phone, verify firewall not blocking activation |
| Command | Usage |
|---|---|
| sfc /scannow | Scan and repair system files; requires elevated command prompt, may need installation media |
| DISM | Repair Windows image; /Online /Cleanup-Image /RestoreHealth (repairs component store) |
| chkdsk /f /r | Check disk for errors; /f (fixes errors), /r (recovers bad sectors), requires reboot for system drive |
| bootrec | Repair boot configuration; /fixmbr, /fixboot, /scanos, /rebuildbcd (from Recovery Environment) |
| diskpart | Disk partition utility; list disk, select disk, clean, create partition, format, assign letter |
| gpupdate /force | Force Group Policy update; immediately applies new policies without waiting |
| shutdown | Shutdown or restart; /s (shutdown), /r (restart), /t XX (delay seconds), /f (force close apps) |
| taskkill | Terminate process; /IM name.exe (by image name), /PID #### (by process ID), /F (force) |
| tasklist | List running processes; /svc (shows services), /v (verbose) |
| systeminfo | Display system information; OS version, install date, hardware details, patches installed |
| Command | Function |
|---|---|
| dir | List directory contents; /a (show hidden), /s (include subdirectories), /p (page by page) |
| cd | Change directory; cd\ (root), cd.. (parent), cd foldername (navigate to folder) |
| copy | Copy files; copy source destination, /y (suppress overwrite prompt) |
| xcopy | Advanced copy; /s (copy directories), /e (include empty), /h (copy hidden/system files) |
| robocopy | Robust file copy; /mir (mirror), /e (include empty dirs), /mt (multi-threaded), /log (create log) |
| del | Delete files; /f (force), /s (subdirectories), /q (quiet mode) |
| attrib | Change file attributes; +r (read-only), +h (hidden), +s (system), -attribute (remove) |
| md/mkdir | Make directory; creates new folder at specified path |
| rd/rmdir | Remove directory; /s (remove all), /q (quiet mode) |