← Event ID reference
1001

The computer has rebooted from a bugcheck (blue screen)

  • Log: System
  • Source: BugCheck
  • System & crashes
  • Critical

What it means

Windows crashed with a stop error. The event includes the stop code and where the memory dump was saved.

Why it matters

Repeated crashes with the same stop code usually point to one driver or failing hardware.

What to do

  • Note the bugcheck code (for example 0x0000007e).
  • Analyse the dump in C:\Windows\Minidump with WinDbg.
  • Update or roll back recently changed drivers.

Find it with PowerShell

Get-WinEvent -MaxEvents 20 -FilterHashtable @{
  LogName = 'System'; Id = 1001
} | Select-Object TimeCreated, ProviderName, Message

Add -ComputerName SERVER to query another machine. Other event sources can reuse the same ID number, so check the ProviderName column.

Seeing a lot of these? We can investigate, or alert you automatically through our monitoring.

Talk to us