Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Random restart soon after GWX icon appeared in taskbar


  • Please log in to reply
7 replies to this topic

#1 aworrier

aworrier

  • Members
  • 72 posts
  • OFFLINE
  •  
  • Local time:06:31 PM

Posted 31 May 2015 - 08:40 PM

My CPU randomly restarted just now, a bit after the GWX icon appeared in the taskbar. Here is the minitoolbox error log:

MiniToolBox by Farbar  Version: 11-05-2015 01
Ran by Shahir (administrator) on 31-05-2015 at 21:29:47
Running from "C:\Users\Shahir\Downloads"
Microsoft Windows 8.1  (X64)
Model: HP ENVY dv7 Notebook PC Manufacturer: Hewlett-Packard
Boot Mode: Normal
***************************************************************************
 
========================= Event log errors: ===============================
 
Application errors:
==================
Error: (05/31/2015 09:25:00 PM) (Source: Application Error) (User: )
Description: Faulting application name: IAStorDataMgrSvc.exe, version: 11.5.9.1002, time stamp: 0x5065e128
Faulting module name: IAStorUtil.ni.dll, version: 11.5.9.1002, time stamp: 0x5065e124
Exception code: 0xc0000005
Fault offset: 0x0002f3fd
Faulting process id: 0xb00
Faulting application start time: 0xIAStorDataMgrSvc.exe0
Faulting application path: IAStorDataMgrSvc.exe1
Faulting module path: IAStorDataMgrSvc.exe2
Report Id: IAStorDataMgrSvc.exe3
Faulting package full name: IAStorDataMgrSvc.exe4
Faulting package-relative application ID: IAStorDataMgrSvc.exe5
 
Error: (05/31/2015 09:24:57 PM) (Source: .NET Runtime) (User: )
Description: Application: IAStorDataMgrSvc.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.NullReferenceException
Stack:
   at IAStorUtil.SystemDataModelListener.ProcessSystemDataModelChanges()
   at IAStorUtil.SystemDataModelListener.LoadSavedSystemState()
   at IAStorDataMgr.EventRelay.<Start>b__0(System.Object)
   at System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
   at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
   at System.Threading.ThreadPoolWorkQueue.Dispatch()
   at System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()
 
Error: (05/31/2015 01:09:47 PM) (Source: Customer Experience Improvement Program) (User: )
Description: 80070005
 
Error: (05/31/2015 00:14:05 PM) (Source: Application Error) (User: )
Description: Faulting application name: IAStorDataMgrSvc.exe, version: 11.5.9.1002, time stamp: 0x5065e128
Faulting module name: IAStorUtil.ni.dll, version: 11.5.9.1002, time stamp: 0x5065e124
Exception code: 0xc0000005
Fault offset: 0x0002f3fd
Faulting process id: 0xc4c
Faulting application start time: 0xIAStorDataMgrSvc.exe0
Faulting application path: IAStorDataMgrSvc.exe1
Faulting module path: IAStorDataMgrSvc.exe2
Report Id: IAStorDataMgrSvc.exe3
Faulting package full name: IAStorDataMgrSvc.exe4
Faulting package-relative application ID: IAStorDataMgrSvc.exe5
 
Error: (05/31/2015 00:14:02 PM) (Source: .NET Runtime) (User: )
Description: Application: IAStorDataMgrSvc.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.NullReferenceException
Stack:
   at IAStorUtil.SystemDataModelListener.ProcessSystemDataModelChanges()
   at IAStorUtil.SystemDataModelListener.LoadSavedSystemState()
   at IAStorDataMgr.EventRelay.<Start>b__0(System.Object)
   at System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
   at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
   at System.Threading.ThreadPoolWorkQueue.Dispatch()
   at System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()
 
Error: (05/30/2015 07:07:15 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 61281
 
Error: (05/30/2015 07:07:15 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 61281
 
Error: (05/30/2015 07:07:15 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
 
Error: (05/30/2015 07:07:01 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 46859
 
Error: (05/30/2015 07:07:01 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 46859
 
 
System errors:
=============
Error: (05/31/2015 09:25:05 PM) (Source: Service Control Manager) (User: )
Description: The Intel® Rapid Storage Technology service terminated unexpectedly.  It has done this 1 time(s).
 
Error: (05/31/2015 09:21:35 PM) (Source: DCOM) (User: SHAHEERLAPTOP)
Description: application-specificLocalLaunch{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}ShaheerLaptopShahirS-1-5-21-2660785230-1677557215-1497375200-1001LocalHost (Using LRPC)UnavailableUnavailable
 
Error: (05/31/2015 09:21:35 PM) (Source: DCOM) (User: SHAHEERLAPTOP)
Description: application-specificLocalLaunch{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}ShaheerLaptopShahirS-1-5-21-2660785230-1677557215-1497375200-1001LocalHost (Using LRPC)UnavailableUnavailable
 
Error: (05/31/2015 09:21:35 PM) (Source: DCOM) (User: SHAHEERLAPTOP)
Description: application-specificLocalLaunch{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}ShaheerLaptopShahirS-1-5-21-2660785230-1677557215-1497375200-1001LocalHost (Using LRPC)UnavailableUnavailable
 
Error: (05/31/2015 09:21:35 PM) (Source: DCOM) (User: SHAHEERLAPTOP)
Description: application-specificLocalLaunch{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}ShaheerLaptopShahirS-1-5-21-2660785230-1677557215-1497375200-1001LocalHost (Using LRPC)UnavailableUnavailable
 
Error: (05/31/2015 09:21:35 PM) (Source: DCOM) (User: SHAHEERLAPTOP)
Description: application-specificLocalLaunch{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}ShaheerLaptopShahirS-1-5-21-2660785230-1677557215-1497375200-1001LocalHost (Using LRPC)UnavailableUnavailable
 
Error: (05/31/2015 09:21:34 PM) (Source: DCOM) (User: SHAHEERLAPTOP)
Description: application-specificLocalLaunch{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}ShaheerLaptopShahirS-1-5-21-2660785230-1677557215-1497375200-1001LocalHost (Using LRPC)UnavailableUnavailable
 
Error: (05/31/2015 09:21:34 PM) (Source: DCOM) (User: SHAHEERLAPTOP)
Description: application-specificLocalLaunch{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}ShaheerLaptopShahirS-1-5-21-2660785230-1677557215-1497375200-1001LocalHost (Using LRPC)UnavailableUnavailable
 
Error: (05/31/2015 09:21:34 PM) (Source: DCOM) (User: SHAHEERLAPTOP)
Description: application-specificLocalLaunch{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}ShaheerLaptopShahirS-1-5-21-2660785230-1677557215-1497375200-1001LocalHost (Using LRPC)UnavailableUnavailable
 
Error: (05/31/2015 09:20:45 PM) (Source: BTHUSB) (User: )
Description: The local adapter does not support an important Low Energy controller state.  The minimum required supported state mask is 0x1f7fffff, got 0x1f3fffff.  Low Energy functionality will be disabled.
 
 
Microsoft Office Sessions:
=========================
Error: (05/31/2015 09:25:00 PM) (Source: Application Error)(User: )
Description: IAStorDataMgrSvc.exe11.5.9.10025065e128IAStorUtil.ni.dll11.5.9.10025065e124c00000050002f3fdb0001d09c09bb835613C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exeC:\WINDOWS\assembly\NativeImages_v4.0.30319_32\IAStorUtil\fa8d9620c05278c78ffcc3d5dae00e99\IAStorUtil.ni.dll04dfcc6e-07fd-11e5-bf81-6036dd74d1ae
 
Error: (05/31/2015 09:24:57 PM) (Source: .NET Runtime)(User: )
Description: Application: IAStorDataMgrSvc.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.NullReferenceException
Stack:
   at IAStorUtil.SystemDataModelListener.ProcessSystemDataModelChanges()
   at IAStorUtil.SystemDataModelListener.LoadSavedSystemState()
   at IAStorDataMgr.EventRelay.<Start>b__0(System.Object)
   at System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
   at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
   at System.Threading.ThreadPoolWorkQueue.Dispatch()
   at System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()
 
Error: (05/31/2015 01:09:47 PM) (Source: Customer Experience Improvement Program)(User: )
Description: 80070005
 
Error: (05/31/2015 00:14:05 PM) (Source: Application Error)(User: )
Description: IAStorDataMgrSvc.exe11.5.9.10025065e128IAStorUtil.ni.dll11.5.9.10025065e124c00000050002f3fdc4c01d09bbcc1c2747eC:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exeC:\WINDOWS\assembly\NativeImages_v4.0.30319_32\IAStorUtil\fa8d9620c05278c78ffcc3d5dae00e99\IAStorUtil.ni.dll0e90a544-07b0-11e5-bf80-6036dd74d1ae
 
Error: (05/31/2015 00:14:02 PM) (Source: .NET Runtime)(User: )
Description: Application: IAStorDataMgrSvc.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.NullReferenceException
Stack:
   at IAStorUtil.SystemDataModelListener.ProcessSystemDataModelChanges()
   at IAStorUtil.SystemDataModelListener.LoadSavedSystemState()
   at IAStorDataMgr.EventRelay.<Start>b__0(System.Object)
   at System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
   at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
   at System.Threading.ThreadPoolWorkQueue.Dispatch()
   at System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()
 
Error: (05/30/2015 07:07:15 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 61281
 
Error: (05/30/2015 07:07:15 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 61281
 
Error: (05/30/2015 07:07:15 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second
 
Error: (05/30/2015 07:07:01 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 46859
 
Error: (05/30/2015 07:07:01 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 46859
 
 
**** End of log ****
 
It looks like the application error today at 9:25 PM caused it. Before I think of viruses, is this a system problem?


BC AdBot (Login to Remove)

 


#2 rp88

rp88

  • Members
  • 3,067 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:11:31 PM

Posted 01 June 2015 - 04:52 PM

If you strongly suspect a virus it would be better to post this in the "am i infected" or malware removal forums.

This however could be a system issue and not a virus.

I'm afriad I do not know enough to diagnose anything from your logs, I can notice that something happened with "The Intel® Rapid Storage Technology service" and a few other things, which I think are processes related to it, but I don't know enough to say precisely what happened, or if this is somehow connected with the GWX service and the "get windows 10" pop-up which has appeared on the systems of users who had allowed KB3035583 to be installed.

With luck someone else will see this thread and be able to give you more information than I can, they might want you to run some other tools as well as minitoolbox so that they can get extra logs to look over. Do you think you have a problem right now? Do you want to somehow disable the "get windows 10" pop-up or something? Have you had anything else strange or bad happen to your system since this bizarre restart? Can you give any more description on excatly what happened, did your machine just restart suddenly, did it tell you to restart suddenyl, did anything flash up just as the restart happened, did anything look different after you logged on again after the restart?

A quick tip: make yourself some system images now (and if you do anything to disbale all this GWX stuff then make some more images afterwards, make some before changing anything though, just in case), there is a tool for it within control panel under "file history". You will need either a load of blank DVD discs (not the best choice), a blank external hard-drive or a blank USB stick (needs to be one of the really high capacity ones and needs to register itself as a "local disk" not a "removable disk"). Having an image might be very helpful if something goes badly wrong for you in the future, as it could well at a time when all these updates and upgrades are flying around, images also help incase you ever suffer form a malware infection.

Edited by rp88, 01 June 2015 - 04:52 PM.

Back on this site, for a while anyway, been so busy the last year.

My systems:2 laptops, intel i3 processors, windows 8.1 installed on the hard-drive and linux mint 17.3 MATE installed to USB

#3 aworrier

aworrier
  • Topic Starter

  • Members
  • 72 posts
  • OFFLINE
  •  
  • Local time:06:31 PM

Posted 02 June 2015 - 11:50 PM

I've scanned with MBAM and Norton. Norton runs in realtime and I've not downloaded anything so virus is very unlikely. The computer just restarted without warning. Nothing like that ever happened again. Googling it looks like it's a Intel RST error which happens often to others when there are hardware problems. I've been told I have driver issues caused by a forced Windows 8.1 update.



#4 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,697 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:06:31 PM

Posted 03 June 2015 - 05:27 AM

I've seen some threads on Microsoft Community where people's computer restarted a bit after the "Get Windows 10" icon appeared on their icon tray, or when they launched it. I don't say that it's related but it could be.

Also, if you give me your laptop brand and model (exact model number) I can link you the drivers for you need for the Intel RST.

animinionsmalltext.gif
unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#5 aworrier

aworrier
  • Topic Starter

  • Members
  • 72 posts
  • OFFLINE
  •  
  • Local time:06:31 PM

Posted 03 June 2015 - 03:32 PM

Brand: HP ENVY dv7 Notebook PC

Product number: D1A28UA#ABA

 

Thank you.



#6 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,697 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:06:31 PM

Posted 03 June 2015 - 05:00 PM

Here goes:

http://ftp.hp.com/pub/softpaq/sp59501-60000/sp59743.exe

Download and install these drivers, then restart your computer.

Edited by Aura., 04 June 2015 - 05:22 AM.

animinionsmalltext.gif
unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#7 aworrier

aworrier
  • Topic Starter

  • Members
  • 72 posts
  • OFFLINE
  •  
  • Local time:06:31 PM

Posted 03 June 2015 - 11:31 PM

Thank you. For the first driver, it tells me the computer does not meet the requirements.



#8 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,697 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:06:31 PM

Posted 04 June 2015 - 05:22 AM

Yeah it's the Intel Rapid Start Button (copy/pasted the wrong link, forgot to remove it, there).

animinionsmalltext.gif
unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users