Unexpected Error after WLAN Upgrade?

After checking and double-checking to make sure my comp is virus free (See: The thread I just closed on the subject ), the following happened today:

When I made a 2011 Atheros Wireless LAN Driver Upgrade via a windows update, I started getting knocked off every few minutes until I reset my surfboard and wireless adapter, so I figured that was the issue. Seemed to be fine again, but as I was running TFC before logging off my computer crashed, telling me Windows had encountered a critical error and I had a minute to save my files before it rebooted. Error logs list the following error:

Log Name: System
Source: USER32
Date: 11/16/2010 6:33:22 PM
Event ID: 1074
Task Category: None
Level: Information
Keywords: Classic
User: SYSTEM
Computer: ashandsheila
Description:
The process wininit.exe has initiated the restart of computer ASHANDSHEILA on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found
Reason Code: 0x50006
Shutdown Type: restart
Comment: The system process 'C:\Windows\system32\services.exe' terminated unexpectedly with status code 0. The system will now shut down and restart.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="USER32" />
<EventID Qualifiers="32768">1074</EventID>
<Level>4</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2010-11-16T23:33:22.000000000Z" />
<EventRecordID>1388300</EventRecordID>
<Channel>System</Channel>
<Computer>ashandsheila</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data>wininit.exe</Data>
<Data>ASHANDSHEILA</Data>
<Data>No title for this reason could be found</Data>
<Data>0x50006</Data>
<Data>restart</Data>

The system process 'C:\Windows\system32\services.exe' terminated unexpectedly with status code 0. The system will now shut down and restart.

NT AUTHORITY\SYSTEM
06000500000000000000000000000000000000000000000000000000000000000000000000000000

It rebooted and all of my invisible files were suddenly visible - possibly because it crashed while I was running TFC?

Just want to double-check make sure the comp's healthy! Just ran successful Adobe and Norton updates, and can check for Windows updates.

Specs are: Hewlett-Packard Presario
CQ62 Notebook PC
AMD V120 Processor 2.20 GHZ
2.00 GB (1.74 GB Usable)
64 Bits

Have been having intermittent connectivity errors, but was running smoothly before this.

Edited by MML, 16 November 2010 - 07:15 PM.

When I made a 2011 Atheros Wireless LAN Driver Upgrade via a windows update

That's pretty common mistake.
Unfortunately, MS has a long history of messing up non-MS drivers.
Never do this.
All non-MS drivers should be updated (IF NEEDED) either through your computer maker site, or device manufacturer site.
Roll it back.

Bleah, I should've guessed it was the driver update.

You have to wonder why HP's Support Assistant nags and nags you to update your drivers through them if they're gonna roll out stuff that sends the rest of the system into a tizzy.

Thanks for the advice, and I'll do so!

ETA: My computer crashed, but not in a similar way on the same day (16th) of the month previous, in the morning but not at the exact same time. The errors that led to that:

Critical:


Log Name: System
Source: Microsoft-Windows-Kernel-Power
Date: 10/16/2010 7:18:27 AM
Event ID: 41
Task Category: (63)
Level: Critical
Keywords: (2)
User: SYSTEM
Computer: ashandsheila
Description:
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
<EventID>41</EventID>
<Version>2</Version>
<Level>1</Level>
<Task>63</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000002</Keywords>
<TimeCreated SystemTime="2010-10-16T11:18:27.402438200Z" />
<EventRecordID>1367422</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="8" />
<Channel>System</Channel>
<Computer>ashandsheila</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="BugcheckCode">0</Data>
<Data Name="BugcheckParameter1">0x0</Data>
<Data Name="BugcheckParameter2">0x0</Data>
<Data Name="BugcheckParameter3">0x0</Data>
<Data Name="BugcheckParameter4">0x0</Data>
<Data Name="SleepInProgress">true</Data>
<Data Name="PowerButtonTimestamp">0</Data>
</EventData>
</Event>

The error that seemingly led to the last crash:

Log Name: Application
Source: Application Virtualization Client
Date: 11/16/2010 6:33:24 PM
Event ID: 3219
Task Category: (3)
Level: Warning
Keywords: Classic
User: N/A
Computer: ashandsheila
Description:
{tid=46C}
Failed unregistering callback tracking connected process termination (error: 997).
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Application Virtualization Client" />
<EventID Qualifiers="16384">3219</EventID>
<Level>3</Level>
<Task>3</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2010-11-16T23:33:24.000000000Z" />
<EventRecordID>11460</EventRecordID>
<Channel>Application</Channel>
<Computer>ashandsheila</Computer>
<Security />
</System>
<EventData>
<Data>{tid=46C}
</Data>
<Data>997</Data>
</EventData>
</Event>

I don't have any critical errors which led to yesterday's crash. I also have error logs from March and April, months before I bought this computer.

Something to be concerned about?

Edited by MML, 17 November 2010 - 06:25 PM.

You have to wonder why HP's Support Assistant nags and nags you to update your drivers

You can safely uninstall it.
In general, drivers should be updated only, if any of them gives you some problems. If everything is running fine, leave drivers alone.

Regarding your crash...

Download BlueScreenView (in Zip file)
No installation required.
Unzip downloaded file and double click on BlueScreenView.exe file to run the program.
When scanning is done, go Edit>Select All.
Go File>Save Selected Items, and save the report as BSOD.txt.
Open BSOD.txt in Notepad, copy all content, and paste it into your next reply.

Huh, it keeps saying it found zero crashes. I still have the evidence of them in the event viewer, though. They were never bluescreens when they crashed, though; the first happened while it was in sleep mode and caused a restart, the second was a warning with an exclamation point that it would restart in a minute.

Please download VEW and save it to your Desktop: http://images.malwareremoval.com/vino/VEW.exe

Double-click VEW.exe then under Select log to query, select:
Application
System

Under Select type to list, select:
Critical (Vista only)
Error

Click the radio button for Number of events
Type 20 in the 1 to 20 box
Then click the Run button.
Notepad will open with the output log.

In Notepad, click Edit > Select all then Edit > Copy
Reply to this post, click in the reply window and press Ctrl+V on your keyboard to paste the log.

My Norton Sonar sees it as a threat and quarantines it every time I try to run it o_o

Create an exception, or disable Norton temporarily.

Did just that a couple of seconds ago


Vino's Event Viewer v01c run on Windows XP in English
Report run at 18/11/2010 11:25:30 PM

Note: All dates below are in the format dd/mm/yyyy

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - error Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'Application' Date/Time: 16/11/2010 2:28:19 PM
Type: error Category: 1
Event: 0 Source: Hewlett-Packard
Event:
AAProcessExited() C:\ProgramData\Hewlett-Packard\HP Support Framework\Telemetry\111016022811.xml File not created by asset agent


Log: 'Application' Date/Time: 16/11/2010 11:12:41 PM
Type: error Category: 1
Event: 0 Source: Hewlett-Packard
Event:
AAProcessExited() C:\ProgramData\Hewlett-Packard\HP Support Framework\Telemetry\10101281111112.xml


Context: Application, SystemIndex Catalog

Details:
File not created by asset agent {AAProcessExited}


Log: 'Application' Date/Time: 13/11/2010 5:27:55 PM
Type: error Category: 3
Event: 7040 Source: Windows Search Service
The search service has detected corrupted data files in the index. The service will attempt to automatically correct this problem by rebuilding the index.

Context: Application, SystemIndex Catalog

Details:
File not created by asset agent {AAProcessExited}


Log: 'Application' Date/Time: 18/11/2010 5:27:42 PM
Type: error Category: 0
Event: 1006 Source: Microsoft-Windows-DHCPv6 Client Events/Admin
Details:
Router Advertisement settings have been changed on the network adapter 14. The current M - Managed Address Configuration flag is false and the O - Other Stateful Configuration flag is false. User Action: If you are seeing this event frequently, then it could be due to frequent change in M and O flag settings on the router in the network. Please contact your network administrator to have it resolved.


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - error Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 18/11/2010 10:08:03 PM
Type: error Category: 0
Event: 10010 Source: DistributedCOM
The server {995C996E-D918-4A8C-A302-45719A6F4EA7} did not register with DCOM within the required timeout

Did the crash happen just once?
Also, what exactly do you mean by crash?
What were you doing at that moment?

Well, it's happened twice so far - the first time, I'd left my computer idle to do go attend to something else, and it went into sleep mode. When I came back and tried to wake it from sleep mode, it rebooted itself and gave the errors that came about on October 16th in the event viewer.

The second happened on the 16th of this month - I got a small icon down in my taskbar with an exclamation point, and when I clicked on it it said that Windows had encountered an error and would restart in a minute, and to save my work. It rebooted with the errors it listed for November 16th.

So I guess it's less crashing than failing and restarting.

I've recently been getting a user account control requests/prompts asking if I want HP Advisor or HP Health Check to make changes to the computer; should I click yes?

This might be the root of the problem? I found this in my error - and I've had it ever since I installed Microsoft Word 2010:

Log Name: Application
Source: VSS
Date: 11/19/2010 6:12:14 PM
Event ID: 12348
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: ashandsheila
Description:
Volume Shadow Copy Service warning: VSS was denied access to the root of volume \\?\Volume{3106c431-cdac-11df-9a37-c80aa996553e}\. Denying administrators from accessing volume roots can cause many unexpected failures, and will prevent VSS from functioning properly. Check security on the volume, and try the operation again.

Operation:
Removing auto-release shadow copies
Loading provider

Context:
Execution Context: System Provider
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="VSS" />
<EventID Qualifiers="0">12348</EventID>
<Level>3</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2010-11-19T23:12:14.000000000Z" />
<EventRecordID>11757</EventRecordID>
<Channel>Application</Channel>
<Computer>ashandsheila</Computer>
<Security />
</System>
<EventData>
<Data>\\?\Volume{3106c431-cdac-11df-9a37-c80aa996553e}\</Data>
<Data>

Operation:
Removing auto-release shadow copies
Loading provider

Context:
Execution Context: System Provider</Data>
<Binary>2D20436F64653A2053505250524F564330303030323333312D2043616C6C3A2053505250524F564330303030323237332D205049443A202030303030353632302D205449443A202030303030353939322D20434D443A2020433A5C57696E646F77735C53797374656D33325C737663686F73742E657865202D6B2073777072762D20557365723A204E616D653A204E5420415554484F524954595C53595354454D2C205349443A532D312D352D313820</Binary>
</EventData>
</Event>

Edited by MML, 19 November 2010 - 06:40 PM.

Well, I don't think we'll be able to diagnose anything from 2 crashes a month apart, especially, when one of them happened while getting out of sleep mode.
Those power saving features don't always work as they suppose to. If this is a desktop, I'd disable them altogether.

The bottom line is...we need to see more malfunctions.

Nope, it's a (brand new as of this summer) laptop.

Ah, good . Since it appears to be malware/spyware/hackware, I'll just keep an eye open for any odd behavior. I'll be sure to come back if I have any more crashes!

I have a cscript file that keeps launching my HP Advisor, but it doesn't seem to have been edited since the computer was manufactured (July of 09). So that's a comfort.

Thank you so much for your help! I love what you guys do here, and it's so generous!