HP Support Assistant Update possibly causing BSOD daily

[Mellotron42]

I've been getting a daily BSOD around the same time that I believe has something to do with an update to the HP Support Assistant. I remember seeing that this program updated on September 4th, and a couple hours after the update, my system had a BSOD, first ever since I have had the computer (3+ years). I was out of town for a few days after that and had shut the computer down, but restarted it on the 8th. Now, shortly before 10:00 am Eastern Time (US), the system crashes and I have to turn the power off (even though the keyboard is still active) and restart. I have been checking things using the Problem Reporter in the Control Panel, and using WinDbg (Microsoft Windows Debug Tool), I've been seeing the same process coming up, "hp-plugin-exec". The module/image name have been changing (several times it has been disk.sys or ntkrnlmp.exe). Here is what I have done so far:

Run the system file checker several times; first time it repaired files, but every time since, no issues.

Run the DISM, which says nothing's wrong.

Run RAM diagnostics (I changed out the RAM for a larger capacity), nothing is wrong.

Disabled HP System Tray and HpseuHostLauncher.exe from the startup list (hoping it would be one of those)

Stopped HP One Agent Service (on advice from a different tech support area)

The specific errors for all but 1 have been:

KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure.  The corruption
could potentially allow a malicious user to gain control of this machine.

 The error code is: 

ERROR_CODE: (NTSTATUS) 0xc0000409 - The system detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to gain control of this application.

On 1 occasion this was the error:

KERNEL_MODE_HEAP_CORRUPTION (13a)
The kernel mode heap manager has detected corruption in a heap.

 There is no Windows error code for this instance.

Would someone know what the true issue is and how to stop it? One other thing that is happening is that even though it is set for a minidump file to send to Microsoft, it is still not being reported to them (unlike all the other issue

[BeemerBiker]

The error message

The system detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to gain control of this application

mentions an application.

What application is it?

If it is the HPSA then uninstall the support assistant and see if that fixes the problem.

here is the latest HP support assistant 

[Mellotron42]

The process is always "hp-plugin-exec". The module is "disk" or "nt" (with the respective image name of "disk.sys" or "ntkrnlmp.exe"). There is nothing listed as an application. This information is from the Windows Debugging Tool. I have not been able to see the blue screen because it happens when I am not at the computer (and would not have the chance until Saturday because of work), and when I discover it, my keyboard is lit but the screen is dark, the V at the front of the computer never lights up and the mouse has no response.

[BeemerBiker]

I am guessing the uninstall of the HPSA failed since you still have this error.

Occasionally you may need to use an uninstaller to remove damaged software. When an install fails it is likely due to corruption of the app or the app it was trying to upgrade.

There are several uninstaller applications. I use REVO Pro but the free version is excellent. Revo will attempt to run the original uninstall but if that fails it will continue on to uninstall whatever it can find that is associated with the problem app. It will show items in the registry that it wants to delete. Registry backup and restore points created before any uninstall.

At the conclusion of the uninstall, a checkbox of items to be cleaned from the registry will be presented. Normally all are selected and deleted. You should select them all and confirm deletion.

After the uninstall completes, perform step 2 and 3

https://share.google/aimode/weyxLkReD8DTvSkiz

[Mellotron42]

I uninstalled the HP Support Assistant, and the BSOD happened again this morning. I did a Google/Gemini search on "hp-plugin-exec", and this is what the search results gave (it has information from HP Community support):

The process hp-plugin-executor.exe (frequently referenced as hp-plugin-exec) is part of HP One Agent, an automated system diagnostics and telemetry application pre-installed on HP laptops and desktops.

What is HP One Agent?

It is a background service that HP typically pushes to Windows devices via automatic software updates (often bundled alongside HP PC Hardware Diagnostics or the HP One Device Platform). Its purpose is to monitor system health, collect hardware telemetry, and execute plugin tasks to keep the device updated.

Common Issues

Many users search for this specific file because it is known to cause several performance problems, including:

• High CPU usage: Spiking processing power anywhere from 10% to 100%, causing the system's fans to run constantly.

• Application crashes / BSODs: Generating standard APPCRASH logs or Blue Screen of Death errors like KERNEL_SECURITY_CHECK_FAILURE. 

How to Disable It

If it is causing performance lag or stuttering, you can safely stop it from running: 

• Open the Task Manager (Ctrl + Shift + Esc).

• Navigate to the Startup apps tab.

• Locate HP One Agent, right-click it, and select Disable.

• Alternatively, you can search for Services in your Windows search bar, find HP One Agent Service, right-click it, change the Startup Type to Disabled, and click Stop.

HP One Agent is not on the startups tab, but HP System Tray and HpseuHostLauncher.exe are, so I disabled them from starting up. I also have stopped the HP One Agent Service, but that didn't do anything. I have just disabled it in Services, and I will see if the BSOD happens again.