KMODE EXCEPTION NOT HANDLED

[renegade0815]

Hey,

Greetings from Germany.

thx a lot for this, it works! 

You saved my office life!

But it seams that these changes affect the system. Eg Some programs report an error during installation that did not previously exist.

Can you or someone else explain how I can undo the changes to the system? If the error is fixed by the latest update of Windows Defender, I would also like to use it again. The deactivation according to the above-mentioned method is in my eyes only an absolute emergency solution and not permanently suitable.

Could u pls help?

Thx a lot

[philip42h_2]

---

@SpedP wrote:

Is there anyway to prevent this from happening again? I sent my PC off to HP yesterday and I was wondering if there is any way to prevent this BSOD problem from happening again in the future? This was an inconvenience and cost me a lot of time.

---

The short answer is, probably, 'no'. HP will most probably re-image your PC and you will get it back pretty much as it was on the day you first got it. If the faulty software is still out there and you allow Windows Update to apply it to your PC it is at least possible that you would experience the BSOD problem all over again.

Of course, if the faulty software has already been removed / replaced then this specific problem should not recur. Some of us are 'betting' that this is the case and running our PCs with all the latest updates - we'll know within a month (say) whether we are in luck! If we are not, someone will be back to say so.

You can pause Windows Updates for a maximum of about one month which would leave you with a PC with [slightly] out-of-date software] but a little time to decide whether it is safe to accept updates again.

It would, of course, help if HP or Microsoft were to make a statement acknowledging the fault and indicating the software releases that resolved it. This would give us all greater confidence moving forward.

[philip42h_2]

---

@renegade0815 wrote:

Hey,

Greetings from Germany.

thx a lot for this, it works! 

You saved my office life!

But it seams that these changes affect the system. Eg Some programs report an error during installation that did not previously exist.

Can you or someone else explain how I can undo the changes to the system? If the error is fixed by the latest update of Windows Defender, I would also like to use it again. The deactivation according to the above-mentioned method is in my eyes only an absolute emergency solution and not permanently suitable.

Could u pls help?

Thx a lot

---

The registry edits to disable Defender are an effective way to get around the BSOD boot loop but in no way resolve the underlying issue. And while you can, of course, simply reverse the registry edits, a better way forward may well be to take this opportunity to secure your data and record your chosen PC configuration (apps etc), perform a clean install of Windows and build your PC back up from there ...

... only after we are reasonably sure that the underlying issue has been addressed correctly. 🙂

[Ferrumic]

I totally agree that we need some definitive statement from MS and HP about what the cause is and what, if anything, they've done to remedy the problem entirely.

At the moment, I have Defender and Update stalled or disabled, and I've uninstalled KB4556799. With a 3rd party set of AV stuff, I'm OK with leaving Defender off forever, as it is so baked-in to the operating system (and not in a good way) that it will forever be a problem, and unlike anything else, it can't, along with its hooks, just be uninstalled.

My main concern is with Update. I have disabled this in gpedit, and I know where the keys that contain the dates and day countdowns are. However, unless I test it empirically, I have no idea whether the gpedit setting overrides any others.

The last thing I want now is to turn on Update and find 4556799 back again, probably along with another dose of borked updates.

I guess that, like others, I've been googling this like a madman, in hopes of finding out more on the cause and cures. For example, the askwoody.com site mentions that an HP fix called "HP Software Component 4.1.4.3079" was delivered by Windows Update (not HP downloads) on 24 May, and poster F A Kramer there reports that his HP desktop has since not BSODed. However, in the same thread, "anonymous", a MS Insider, reports BSOD immediately after installing this on 9 May.

I think pretty well everybody is still in the dark, and having to do things by assumptions and guesswork, rather than firm facts.

In other words, we MUST have precise information from HP and MS, which may allow us to each decide what to do next with his/her system. This  "don't ask, no tell" approach from them is an absolute disgrace, and does nobody any good.

[philip42h_2]

---

@Ferrumic wrote:

...

I guess that, like others, I've been googling this like a madman, in hopes of finding out more on the cause and cures. For example, the askwoody.com site mentions that an HP fix called "HP Software Component 4.1.4.3079" was delivered by Windows Update (not HP downloads) on 24 May, and poster F A Kramer there reports that his HP desktop has since not BSODed. However, in the same thread, "anonymous", a MS Insider, reports BSOD immediately after installing this on 9 May.

...

---

I have both KB4556799 (the May cumulative update for Windows 10) and HP Software Component 4.1.4.3079 (this is an updated version of the HP Touchpoint Analytics Client) installed and running on my PC since 24th May. So it has been stable for two whole days now - which, in the current situation, really doesn't mean a thing! 😉

That said, I could well believe that the core of this issue was (note optimistic past tense) an adverse interaction between and updated Defender and an old / existing Touchpoint Analytics Client. I did notice a slew of Touchpoint related errors in the Event logs that I don't see now. So this is little more than supposition on my part but it appears that I am not alone in that belief - HP fixes KB4556799 BSOD issues via Windows Update

Edit: Though it must be said that the build date on version 4.1.4.3079 of the Analytics Client is 29th April so it has hardly been 'rushed out' since BSODs started occurring at the beginning of May. Perhaps more likely it is a change to Defender's signature files that may have 'solved' the issue.

Either way, two days and counting - I'll post back when it crashes again!

[Ferrumic]

@Philip42h_2

Thanks for the update.

I have looked everywhere on here for HP Touchpoint Analytics Client, but I have nothing by that name showing up on the system. There's nothing in Programs (both) or listed in Services, and Autoruns doesn't show anything near that description. However, at the start of this I disabled a group of HP Scheduled Tasks, one of which ran once daily. The .exe files for these are hpsf, hpsfreport,hpssfupdate and productconfig. There's also the hpwarrantychecker.exe.

How does this thing show up on your system i.e. what's the name of it, where is it in Programs etc. Also, how do you see or know about the HP Software Component 4.1.3079 i.e. running, listed where, and so on? I'm at a loss as to how to identify this, if it, or another version, are on here.

Any info gratefully received.

[philip42h_2]

@Ferrumic

I had previously Googled HP Software Component <some version> and the results pointed to HP Touchpoint Analytics Client. Now I just open Task Manger and look at the Properties > Details of the running HP Touchpoint Analytics Client process et voila!

It arrives as a Driver - so the update is visible via Windows Update > View update history.

I'm not sure whether it gets installed along with Windows or as part of the HP Support Framework (I rather suspect the former) but either way the HP Support Assistant is now an App (Settings > Apps) rather than a Program (Control Panel > Programs and Features) ... I'm probably just showing my age at this point! 🙂

[Ferrumic]

@Philip42h_2

Thanks for that.

I've looked through everything running in Task Manager; all services and drivers in Autoruns; all drivers in Nirsoft Driverview; everything in System Information (tasks, drivers etc.). Nowhere can I find anything that refers to "HP Touchpoint Analytics Client", and not as a match to any part of that name. In fact, there are no HP services running, and only a couple of HP drivers for other things. None of the Microsoft stuff contains any hint or reference either.

Maybe I've disabled it, but I don't recall seeing anything of its type. It's a mystery.

[siradix]

---

@Ferrumic wrote:

@Philip42h_2

Thanks for that.

I've looked through everything running in Task Manager; all services and drivers in Autoruns; all drivers in Nirsoft Driverview; everything in System Information (tasks, drivers etc.). Nowhere can I find anything that refers to "HP Touchpoint Analytics Client", and not as a match to any part of that name. In fact, there are no HP services running, and only a couple of HP drivers for other things. None of the Microsoft stuff contains any hint or reference either.

Maybe I've disabled it, but I don't recall seeing anything of its type. It's a mystery.

---

If you simply want to remove it from the computer, you can use adwcleaner. The preinstalled software section will have it, if it is on your computer.

[philip42h_2]

---

@Ferrumic wrote:

@Philip42h_2

Thanks for that.

I've looked through everything running in Task Manager; all services and drivers in Autoruns; all drivers in Nirsoft Driverview; everything in System Information (tasks, drivers etc.). Nowhere can I find anything that refers to "HP Touchpoint Analytics Client", and not as a match to any part of that name. In fact, there are no HP services running, and only a couple of HP drivers for other things. None of the Microsoft stuff contains any hint or reference either.

Maybe I've disabled it, but I don't recall seeing anything of its type. It's a mystery.

---

That suggests that, maybe, it comes in with the HP Support Framework which is installed with the HP Support Assistant which I have installed and, I guess, you have not ... ? 

Which is, I suspect, exactly the way you want things right now 😉