BugcheckCode > 0
Windows detected a bug check. Convert the decimal code to hexadecimal and inspect the dump or BugCheck event 1001.
Kernel-Power records an unclean ending. It does not name the killer.
The screen goes black in the middle of a game. The fans stop for a moment, the motherboard logo returns, and Windows starts as if someone pressed Reset. There was no blue screen and no useful message. Event Viewer shows one red critical entry: Kernel-Power, Event ID 41.
That entry looks like the answer because it is marked Critical. It is not. Windows writes Event 41 on the next startup when it discovers that the previous session did not shut down cleanly. The useful evidence is inside its fields, in a possible memory dump and in the seconds before the shutdown. Searching only for “fix Kernel-Power 41” starts the investigation at the end of the story.
The first job is to separate three different failures that can produce the same visible restart: a hidden Stop error, a hard hang that forced a reset, and a loss of power too abrupt for Windows to record the cause.
BugcheckCode > 0
Windows detected a bug check. Convert the decimal code to hexadecimal and inspect the dump or BugCheck event 1001.
PowerButtonTimestamp > 0
The long press interrupted shutdown. The unresolved question is what made the machine stop responding first.
both values = 0
Power may have vanished, the system may have hard-hung, or dump creation may have failed.
Event 41 says that Windows restarted without completing the normal shutdown sequence. It can follow a power interruption, a Stop error, a frozen machine switched off by the user or a reset performed by firmware. The common fact is the missing clean shutdown, not a common root cause.
This distinction prevents the most expensive diagnostic mistake: replacing the power supply because the event source contains the word “Power.” A faulty or undersized PSU remains a possible cause of an instant blackout, but software cannot prove PSU health from Event 41 or a motherboard voltage sensor. The separate PSU diagnosis guide explains what voltage readings can and cannot establish.
Open Event Viewer, go to Windows Logs → System, open Event ID 41, then use the Details tab and XML view. The following fields choose the next branch.
| Field or event | What it establishes | Next step |
|---|---|---|
| BugcheckCode is nonzero | Windows recorded a Stop error code, shown in decimal. | Convert it to hexadecimal, find BugCheck event 1001 and inspect the matching dump. |
| PowerButtonTimestamp is nonzero | A long power-button press interrupted the session. | Investigate the hang that made the forced shutdown necessary. |
| Both are zero | Windows did not save a Stop code or button timestamp. | Check for abrupt power loss, a hard hang and failed dump creation. |
| volmgr Event 46 | Crash dump initialization failed. | Check the page file and dump configuration before concluding there was no bug check. |
| BugCheck Event 1001 | A Stop error and dump path were recorded. | Use the specific stop code, not Event 41, for the next search. |
| Event 6008 | The previous shutdown was unexpected and supplies a reference time. | Inspect System and Application logs immediately before that timestamp. |
Microsoft documents an easy-to-miss detail: Event 41 stores BugcheckCode in decimal,
while most bug-check documentation uses hexadecimal. A decimal value of 159, for example, becomes
0x0000009F. Searching the decimal number as if it were the documented Stop code can send
the investigation in the wrong direction.
A blue screen can disappear instantly when automatic restart is enabled. In Advanced system settings, open Startup and Recovery and clear Automatically restart while diagnosing. Confirm that Windows is configured to write an automatic or kernel memory dump and that the system-managed page file on the OS volume has not been disabled.
This does not prevent a crash. It gives Windows a chance to preserve the Stop code and dump. It also cannot help when power vanishes before the operating system can write anything. A missing dump is therefore a clue to investigate, not proof that no software or driver failure occurred.
Event 41 is after the event. Work backwards from its timestamp. Check the System and Application
logs just before Event 6008, then open Reliability Monitor with perfmon /rel. Reliability
Monitor presents application failures, Windows failures, updates and driver installations on one
day-by-day timeline. It is easier to read than thousands of unrelated Event Viewer entries.
Look for a repeated neighbour, not any red line. The same WHEA event before three restarts matters. One DCOM warning that appears every day on a stable PC probably does not. Timestamp correlation is the start. Repetition under the same workload turns it into evidence.
| Pattern | Moves up the list | What it does not prove |
|---|---|---|
| Instant black screen and reboot under combined CPU/GPU load | Power delivery, PSU capacity or protection, GPU power path, heat | That the PSU is definitely faulty |
| Nonzero BugcheckCode or Event 1001 | The documented Stop-code branch and dump analysis | That every generic “Kernel 41 fix” applies |
| Stable at BIOS defaults, unstable with XMP/EXPO or undervolt | Lost tuning margin and memory or voltage stability | That the RAM module itself is defective |
| Restart only after temperatures and clocks deteriorate | Cooling, thermal or power limits | That a faster component will solve it |
| Display black, audio continues, PC stays powered | GPU driver reset, display path or GPU stability | That the whole system lost power |
| Random restart at idle and load | Memory, board, firmware, power, driver or background failure | That the gaming workload caused it |
PC Workman can preserve the system context around the event: CPU and GPU load, memory, temperatures, clocks, power-related readings exposed by supported sensors and the active processes. That history can show whether the restart followed rising heat, falling clocks, memory pressure or a repeatable workload.
PC Workman does not analyze Windows crash dumps, decode WHEA records or electrically test a power supply. Software voltage values are not a substitute for proper measurement under load. It also cannot save a final sample after power has already disappeared. Use its timeline as one layer beside Event Viewer, Reliability Monitor, memory testing and physical inspection.
No. It means the previous shutdown was not clean. A PSU fault is one possible cause of an abrupt blackout, but the event does not identify the failed component.
Power may have vanished, the system may have hard-hung, or automatic restart may have hidden a Stop screen. Read the Event 41 fields, check Event 1001 and verify dump creation.
Preserve the timestamp and fields, inspect the events immediately before the restart, check dumps, return tuning to default and log a small repeatable workload. Change one thing at a time.
If the machine remains on but the game only hitches, start with frame time and 1% lows →