New Asus build randomly crashes -help

niglyn

niglyn

niglyn

Associate
Joined
7 Feb 2010
Posts
15
Hi, after emptying a coffee into my old pc, I had to quickly order another & had little time to choose before the 4pm deadline for next day delivery.

I chose
MOT-ASU-03432 Asus TUF Gaming Z890-Pro WIFI (LGA 1851) DDR5 ATX Motherboard 1 208.29 208.29 GBP
PRO-INT-03111 Intel Core Ultra 7 265K (Arrow Lake) Socket LGA 1851 Processor - Retail 1 224.16 224.16 GBP
MY-29M-KS Kingston FURY Beast 16GB (2x8GB) DDR5 PC5-44800C40 5600MHz Dual 1 166.66 166.66 GBP
STO-GIG-05731 Gigabyte Aorus 7300 1TB SSD M.2 2280 NVME PCI-E Gen4 Solid State Drive 1 166.66 166.66 GBP
(using on-board graphics)

I put it altogether, adding a new twin radiator & 2 fan heatsink and my exiting case and psu.


A fresh windows boot usb stick was made & Windows 11 installed.

Computer works for a while, but then crashes and recovers.
The crashes become more frequent, the longer the pc is on.
CPU temperature is low, in the 20s, only ever hitting a max of 36 degrees. Motherboard also shows temperature in low 20s.

I have updated the bios to the latest 3002 version.

I have started again, reinstalling windows and formatting the drive on the early install screen, and installing all of the drivers individually.

Still the same crashes.

After repeated crashes, I get a blue screen & it says Winload.efi is damaged and cannot be recovered.

Next thing I tried, was to install windows to a spare Crucial SATA solid state hard drive.
Powered off the machine, booted from UEFI USB and installed on this drive.

Everything now seems stable. As part of the final installation, Asus installs a driver update program, so I let this run & it installed all of the drivers & pc is running fine.

So this all points to the M2 hdd being the issue?
I installed the M2 hdd into a different slot on the motherboard (M2 is pcie4 and the original slot it was installed into was pcie5 capable) and again reinstalled windows.
Again pc was unstable and keeps randomly crashing.

Went back to the Crucial Sata hdd and everything is stable again.

So this seems to confrim the M2 hdd is faulty?

What are Overclockers like on returns? Will they accept my description above & take the return? I will exchange for a different brand.

Is there anything I have overlooked?

Tia.
 
niglyn said:
Went back to the Crucial Sata hdd and everything is stable again.

So this seems to confrim the M2 hdd is faulty?
Click to expand...
Seems like a reasonable conclusion to me.

niglyn said:
What are Overclockers like on returns? Will they accept my description above & take the return? I will exchange for a different brand.
Click to expand...
I should think so. Can you check the SMART data with the M.2 installed? A screenshot of an obviously bad SSD from something like CrystalDiskInfo may be helpful.
 
Hi, I have taken the ssd out now & don't really want to put it back.

I notice the price of this ssd has jumped £40 since I ordered it on Wednesday.

I can order a pcie-5 Crucial for £170 on amazon (same one is £200 on overclockers) & will arrive tomorrow, but don't want to do this if overclockers won't take the return for refund & insist I have to get another from them.

They might be fine, I don't know. Have ordered my last three new-build pc components from them, but never needed to return anything, so no idea what they are like.

I'm sure they must get many issues with pc-builds not working. Lucky I had a spare ssd to use & it has solved the issue.

If it had not, what does one do? Could have been cpu, motherboard or software/drivers.
 
niglyn said:
I can order a pcie-5 Crucial (same one is £200 on overclockers) & will arrive tomorrow, but don't want to do this if overclockers won't take the return for refund & insist I have to get another from them.
Click to expand...
You can ask for a refund of something faulty within 30 days of delivery, so that shouldn't be a problem if they agree there's a fault.

You can always return the item you ordered, if not required.
 
well, the latest update, overclockers accepted the return of the M2 ssd but say they test the product using manufacturer tools before issuing a refund.

So I thought I would put the M2 ssd back in the pc to look at it as was suggested above and booted windows from my working sata ssd.

I gave it a full format in windows 11 (it formats during win 11 install, but it is really quick) and doing it from windows 11 took far longer (quick format unticked).

All looked ok.

So I turned off my pc and removed the sata ssd that was running windows without issue.

Rebooted from USB and re-installed windows onto the new ssd and it worked fine, without crashing.

Have slowly been loading up the programs, Office, Nord, Visual Code Studio etc

and it has run all day without issue.

All very strange.

Seems the full re-format within windows 11, rather than the format from windows install USB has solved the issue.
 
niglyn said:
Seems the full re-format within windows 11, rather than the format from windows install USB has solved the issue.
Click to expand...
I never format a drive before installing Windows.

If it's a new drive, just let the install USB create what partitions it needs.

If it's a reinstallation, from the install wizard remove every partition so it is all unallocated space and do the same as above.
 
Philtor said:
I imagine the full format has caused the SSD’s controller to retire any bad blocks and remap them to spare ones.
Click to expand...
Hi, is there any way to prove or see this? Or prove the ssd is still faulty?

I have an RMA open to return the ssd, but now it is working, no doubt overclockers will test it & say it is ok.

@freddie64 Yes, during the installation from USB windows selects the drive & I just let it pick the correct one.
After numerous crashes, I tried a re-install thinking it may have been the Asus drivers that get loaded later on & used the options to delete the partitions it had created and reformat the drive.

The format was very fast, unlike when doing it within windows 11.

@mattyfez I always build my own pc, but as it is every 5-7 years things move on and one has to learn all over again, like these M2 drives for example.

Another issue I had was XMP not working & so my ram sitting at 4000 instead of 5600.
Not mentioned in the motherboard documentation, XMP only works with RAM in A2 and B2. not A1 & B1, where logically one would put the RAM.

I don't know what will happen if I add another 16Gb in A1 & B1, whether XMP will stop functioning again.
 
niglyn said:
Another issue I had was XMP not working & so my ram sitting at 4000 instead of 5600.
Not mentioned in the motherboard documentation, XMP only works with RAM in A2 and B2. not A1 & B1, where logically one would put the RAM.

I don't know what will happen if I add another 16Gb in A1 & B1, whether XMP will stop functioning again.
Click to expand...
it does say in the manual to use slots A2 and B2 first, but they could have said this is needed for XMP.

Should imagine it should be ok with 4 sticks of RAM as the above slots are populated.

niglyn said:
I tried a re-install thinking it may have been the Asus drivers that get loaded later on & used the options to delete the partitions it had created and reformat the drive.
Click to expand...
Sorry, i should have said after deleting every partition to just click the install button and not to format the drive first.

Not sure if it makes much difference, but it's how i have always done it and it's never failed me.

niglyn said:
I have an RMA open to return the ssd, but now it is working, no doubt overclockers will test it & say it is ok.
Click to expand...
You may have to pay postage to and from OCUK if it's found to be not faulty, so bear that in mind.


Tetras said:
Can you check the SMART data with the M.2 installed? A screenshot of an obviously bad SSD from something like CrystalDiskInfo may be helpful.
Click to expand...
 
Hi, I have installed CrystalDiskInfo, but can find no way to post the screenshot?
The 'Insert Media' icon requests a web link?

CDI shows health status at 99% Good.

No critical warnings.
Unsafe shutdowns 304
Power cycles 330
Number of Error Information Log entries 3A2
 
NetMan said:
If you haven't already you might want to try installing Gigabytes SSD tool, I presume it will tell you if there are any firmware updates etc for your SSD:

I'm not surprised windows got its knickers in a twist if there have been 305 unsafe shutdowns in 66 hours of use but nothing else stands out to me.
Click to expand...
Hi, thanks for your help.

I'm guessing the 305 shutdowns were from the original win 11 install and the constant crashing. Hovewever, I can't believe it crashed that many times.

SSD was in a sealed box with manufacturer seals, so unless overclockers can repack returns, the ssd is factory fresh.

Spoke with overclockers (did not ask about re-packaging) they said they would not charge for return postage if ssd proved ok.

They suggested a manufacturers (not gigabyte) support sw, but I thought to check Gigabyte & have downloaded both Gigabyte control centre and Gigabyte SSD tool.

They show the ssd as ok, temperature fine, but show less detail than crystalDiskInfo.

So, who knows what happened. One crash this morning, after boot & just when windows had started & I had logged in (worrying), but other than that, since formatting the ssd in windows 11 and reinstalling on the ssd from a USB drive, all is working fine.

The one good thing I have found, is how good microsoft onedrive is & what-ever one's google account does.
Rather than having to copy over all my documents, search for pst files (I prefer microsoft classic) etc, or reload from backup (I use nova backup), everything just comes up like the old pc.

One just has to reinstall the programs one wants.
 
I would have thought any returns that had been opened would be sold via their B grade section after they had checked it or sent back to supplier if it was faulty.

Did the event logs show anything after todays crash?
 
hi, I have saved todays event log, but again this forum does not make it easy to post the file. Cannot see any way to add a .txt or .evtx file


looks like the crash & re-boot was at 10:56



Level Date and Time Source Event ID Task Category
Warning 20/03/2026 14:01:32 Microsoft-Windows-WHEA-Logger 17 None "A corrected hardware error has occurred.

Component: PCI Express Root Port
Error Source: Advanced Error Reporting (PCI Express)

Primary Bus:Device:Function: 0x0:0x6:0x1
Secondary Bus:Device:Function: 0x0:0x0:0x0
Primary Device Name:PCI\VEN_8086&DEV_7ECA&SUBSYS_88EF1043&REV_10
Secondary Device Name:"

Warning 20/03/2026 13:34:16 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
and APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
to the user DESKTOP-0389VNU\nigly SID (S-1-5-21-1468837314-983977799-104142696-1001) from address LocalHost (Using LRPC) running in the application container MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy SID (Unavailable). This security permission can be modified using the Component Services administrative tool."

Warning 20/03/2026 12:11:03 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
and APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
to the user DESKTOP-0389VNU\nigly SID (S-1-5-21-1468837314-983977799-104142696-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool."

Warning 20/03/2026 11:27:09 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
and APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
to the user DESKTOP-0389VNU\nigly SID (S-1-5-21-1468837314-983977799-104142696-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool."

Error 20/03/2026 11:02:09 Microsoft-Windows-TPM-WMI 1801 None "Updated Secure Boot certificates are available on this device but have not yet been applied to the firmware. Review the published guidance to complete the update and maintain full protection. This device signature information is included here.
DeviceAttributes: BaseBoardManufacturer:ASUSTeK COMPUTER INC.;FirmwareManufacturer:American Megatrends Inc.;FirmwareVersion:3002;OEMModelBaseBoard:TUF GAMING Z890-PRO WIFI;OEMManufacturerName:ASUS;OSArchitecture:amd64;
BucketId: 938f001692627627e466d721bcf1d0bd631336c5f2bee01dd526503c5917bc95
BucketConfidenceLevel: Under Observation - More Data Needed
UpdateType:
For more information, please see https://go.microsoft.com/fwlink/?linkid=2301018."

Warning 20/03/2026 10:59:18 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID
Windows.SecurityCenter.WscDataProtection
and APPID
Unavailable
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool."
Warning 20/03/2026 10:59:18 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID
Windows.SecurityCenter.WscBrokerManager
and APPID
Unavailable
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool."

Warning 20/03/2026 10:59:18 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID
Windows.SecurityCenter.SecurityAppBroker
and APPID
Unavailable
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool."

Warning 20/03/2026 10:58:13 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID
Windows.SecurityCenter.WscCloudBackupProvider
and APPID
Unavailable
to the user DESKTOP-0389VNU\nigly SID (S-1-5-21-1468837314-983977799-104142696-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool."

Warning 20/03/2026 10:58:11 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID
Windows.SecurityCenter.WscCloudBackupProvider
and APPID
Unavailable
to the user DESKTOP-0389VNU\nigly SID (S-1-5-21-1468837314-983977799-104142696-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool."
Warning 20/03/2026 10:58:07 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID
Windows.SecurityCenter.WscCloudBackupProvider
and APPID
Unavailable
to the user DESKTOP-0389VNU\nigly SID (S-1-5-21-1468837314-983977799-104142696-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool."

Error 20/03/2026 10:58:07 Microsoft-Windows-Kernel-EventTracing 2 Session "Session ""Cloud Files Diagnostic Event Listener"" failed to start with the following error: 0xC0000022"

Warning 20/03/2026 10:57:17 Microsoft-Windows-User Device Registration 360 None "Windows Hello for Business provisioning will not be launched.
Device is Microsoft Entra joined (or hybrid joined): Not Tested
User has logged on with Microsoft Entra credentials: No
Windows Hello for Business policy is enabled: Not Tested
Windows Hello for Business post-logon provisioning is enabled: Not Tested
Local computer meets Windows hello for business hardware requirements: Not Tested
User is not connected to the machine via Remote Desktop: Yes
User certificate for on premise auth policy is enabled: Not Tested
Machine is governed by none policy.
Cloud trust for on premise auth policy is enabled: Not Tested
User account has Cloud to OnPrem TGT: Not Tested
See https://go.microsoft.com/fwlink/?linkid=832647 for more details."

Warning 20/03/2026 10:57:16 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
and APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool."

Warning 20/03/2026 10:57:16 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
and APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool."

Warning 20/03/2026 10:57:10 Microsoft-Windows-WMI 63 None A provider, IntelMEProv, has been registered in the Windows Management Instrumentation namespace root\Intel_ME to use the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests.

Warning 20/03/2026 10:57:10 Microsoft-Windows-WMI 63 None A provider, IntelMEProv, has been registered in the Windows Management Instrumentation namespace root\Intel_ME to use the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests.

Warning 20/03/2026 10:57:10 Microsoft-Windows-WMI 63 None A provider, IntelMEProv, has been registered in the Windows Management Instrumentation namespace root\Intel_ME to use the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests.

Error 20/03/2026 10:57:09 Service Control Manager 7009 None A timeout was reached (45000 milliseconds) while waiting for the Intel(R) Platform License Manager Service service to connect.

Warning 20/03/2026 10:57:01 e2fnexpress 27 None "Intel(R) Ethernet Controller I226-V
Network link is disconnected.
"
Warning 20/03/2026 10:57:00 Microsoft-Windows-Kernel-PnP 219 (212) "The driver \Driver\WUDFRd failed to load.
Device: PCI\VEN_8086&DEV_AD03&SUBSYS_88EF1043&REV_01\3&11583659&0&20
Status: 0xC0000365"

Error 20/03/2026 10:57:08 Microsoft-Windows-Eventlog 1101 Event processing Audit events have been dropped by the transport. 0

Critical 20/03/2026 10:56:59 Microsoft-Windows-Kernel-Power 41 (63) The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.

Error 20/03/2026 10:56:59 volmgr 161 None Dump file creation failed due to error during dump creation. BugCheckProgress was: 0x00040049

Error 20/03/2026 10:57:08 EventLog 6008 None The previous system shutdown at 21:35:22 on ‎19/‎03/‎2026 was unexpected.

Error 20/03/2026 10:55:54 Intel.GraphicsSoftware.Service 11 (63736) "{""category"":""RequestWorker"",""level"":""Error"",""message"":""Client connection failed."",""exception"":{""type"":""OperationCanceledException"",""message"":""The operation was canceled.""},""parameters"":{""caller"":""ExecuteAsync"",""pipeName"":""Intel.GraphicsSoftware.Pipe.Admin""}}"

Warning 20/03/2026 10:55:24 Microsoft-Windows-User Device Registration 360 None "Windows Hello for Business provisioning will not be launched.
Device is Microsoft Entra joined (or hybrid joined): Not Tested
User has logged on with Microsoft Entra credentials: No
Windows Hello for Business policy is enabled: Not Tested
Windows Hello for Business post-logon provisioning is enabled: Not Tested
Local computer meets Windows hello for business hardware requirements: Not Tested
User is not connected to the machine via Remote Desktop: Yes
User certificate for on premise auth policy is enabled: Not Tested
Machine is governed by none policy.
Cloud trust for on premise auth policy is enabled: Not Tested
User account has Cloud to OnPrem TGT: Not Tested
See https://go.microsoft.com/fwlink/?linkid=832647 for more details."

Warning 20/03/2026 10:55:23 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
and APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool."

Warning 20/03/2026 10:55:23 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
and APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool."

Warning 20/03/2026 10:55:21 e2fnexpress 27 None "Intel(R) Ethernet Controller I226-V
Network link is disconnected.
"
 
You must log in or register to reply here.
Back
Top Bottom