Intel update via Windows update

[Triple Helix]

Hello,

I'm being offered an update from Intel via Windows Update and it kills my OS (BSOD) until I do a System Restore then go into Safe Mode and delete the Software Distribution Folder in C:\Windows before it try's to install again, so be on the look out as I can't find any info on the update. I have Blocked Windows Update from running because it will try to install again. You can download the Dump file from here: MyAirBridge.com | Send or share big files up to 20 GiB for free

Windows 10 Pro for Workstations x64 20H2 updated.

I have ran the SysnativeFileCollectionApp and info from Speccy: http://speccy.piriform.com/results/kanOeWSZp0Zu6mOI3uExaNb

Thanks,
Daniel

 

[x BlueRobot]

It seems to be the exact same driver as mentioned by another user in this thread - PNP_DETECTED_FATAL_ERROR

1: kd> !drvobj ffffd68b8f2e6a70
fffff8057ea252b0: Unable to get value of ObpRootDirectoryObject
fffff8057ea252b0: Unable to get value of ObpRootDirectoryObject
Driver object (ffffd68b8f2e6a70) is for:
Unable to load image \SystemRoot\System32\drivers\dptf_acpi.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for dptf_acpi.sys
 \Driver\dptf_acpi

Driver Extension List: (id , addr)
(fffff80582304d50 ffffd68b90a34950)  
Device Object list:
ffffd68b90b4ad00  ffffd68b90b4cd00  ffffd68b90b4dd00: Could not read device object

1: kd> lmvm dptf_acpi
Browse full module list
start             end                 module name
fffff805`8bf00000 fffff805`8bf0e000   dptf_acpi T (no symbols)           
    Loaded symbol image file: dptf_acpi.sys
    Image path: \SystemRoot\System32\drivers\dptf_acpi.sys
    Image name: dptf_acpi.sys
    Browse all global symbols  functions  data
    Timestamp:        Thu Sep 18 19:32:41 2014 (541B2549)
    CheckSum:         0001353C
    ImageSize:        0000E000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4
    Information from resource tables:

I'm now wondering if this is a botched update? Have you tried updating the driver using the Intel Support tool?

 

[x BlueRobot]

I've been doing some playing around in the dump file and managed to find out which event the PnP driver was listening to at the time of the crash.

1: kd> dt _DEVICE_INTERFACE_CHANGE_NOTIFICATION fffff90078aa7a78
Wdf01000!_DEVICE_INTERFACE_CHANGE_NOTIFICATION
   +0x000 Version          : 1
   +0x002 Size             : 0x30
   +0x004 Event            : _GUID {cb3a4004-46f0-11d0-b08f-00609713053f} << GUID_DEVICE_INTERFACE_ARRIVAL
   +0x014 InterfaceClassGuid : _GUID {ee27098e-1b22-472a-89d8-5ccce16b1356}
   +0x028 SymbolicLinkName : 0xfffff900`78aa7b28 _UNICODE_STRING "\??\ACPI#INT3400#2&daba3ff&0#{ee27098e-1b22-472a-89d8-5ccce16b1356}"

1: kd> !stack -p
Call Stack : 7 frames
## Stack-Pointer    Return-Address   Call-Site       
00 fffff90078aa7998 fffff8057e64bf58 nt!KeBugCheckEx+0 
    Parameter[0] = 00000000000000ca
    Parameter[1] = 000000000000000a
    Parameter[2] = ffffd68b8f2e6a70
    Parameter[3] = 0000000000000000
01 fffff90078aa79a0 fffff8057e522f26 nt!PnpNotifyDriverCallback+13ee78 (perf)
    Parameter[0] = ffffe688ce3d71f0
    Parameter[1] = fffff90078aa7a78
    Parameter[2] = fffff90078aa7a70
    Parameter[3] = (unknown)

 

[Triple Helix]

Hello @x BlueRobot I used the Intel Support Tool and it found RST driver to be updated so I allowed so I will try again and Allow Windows Update to run to see if I'm still having any issues still.

Thanks,

 

[Triple Helix]

Here are the Properties of the said files dptf_acpi.sys

 

[Triple Helix]

The Intel Update doesn't show via Windows Update now so that is great and thanks again! I just wish I knew what the Update from Intel was for but it happened so fast and after 4 BSOD and getting my system back I didn't want to take a chance because on boot up it would install again so I had to go into Safe Mode quickly to delete the C:\Windows\Software Distribution Folder so it would try to install then I paused Windows Update until this was sorted!

Cheers,

Daniel

 

[x BlueRobot]

If it isn't able to be offered via the Intel Support tool then I would wait until the driver is patched. There does appear to be an issue with that particular driver.

 

[Triple Helix]

If it isn't able to be offered via the Intel Support tool then I would wait until the driver is patched. There does appear to be an issue with that particular driver.

I agree but it isn't being offered via Windows Update anymore for me anyways after I updated the RST driver using the Intel Support Tool.

 

[x BlueRobot]

I wonder if it has been pulled by Microsoft already?

 

[Triple Helix]

I wonder if it has been pulled by Microsoft already?

That is what I was wondering? I could not find any info on that Update but glad it's gone.

 

[Triple Helix]

@x BlueRobot did you look at the full Dump file as it could be in there? MyAirBridge.com | Send or share big files up to 20 GiB for free

 

[x BlueRobot]

I've been looking at the full dump file you've provided, just trying to find more information about the crash in general. The dump file won't have information on the update which the driver belongs to unfortunately.

Hotfix(s):                 12 Hotfix(s) Installed.
                           [01]: KB4601554
                           [02]: KB4562830
                           [03]: KB4570334
                           [04]: KB4577266
                           [05]: KB4577586
                           [06]: KB4580325
                           [07]: KB4586864
                           [08]: KB4589212 << Intel
                           [09]: KB4593175
                           [10]: KB4598481
                           [11]: KB5001567
                           [12]: KB5000858

From the SystemInfo.txt file, the only update I could see listed which was related to Intel is KB4589212. Do you know if that update is still installed?

 

[Triple Helix]

Yes it is but what I seen was Intel Update not like this: Microsoft is rolling out mandatory Windows 10 KB4589212 update again

 

[Triple Helix]

I have the latest BIOS A12 for my system: Microprocessor Side-Channel Vulnerabilities (CVE-2017-5715, CVE-2017-5753, CVE-2017-5754): Impact on Dell products | Dell Canada

 

[x BlueRobot]

Hmm, I have a Windows 10 Intel laptop, if I have time tonight or tomorrow, I'll check if I'm offered an Intel update like you had.

 

[x BlueRobot]

I apologise for bumping the thread, I've checked my other laptop which has a Intel processor and the Windows Update offered to me was named Intel - System - 2040.10.0.1029.

EDIT: I've extracted the .cab file for the update and it was for the Intel Management Engine Interface driver. However, a user on BleepingComputer mentioned, that their update was along lines of Intel DPTF. The latest update is from 2017?

 

[Triple Helix]

Thanks for the extra info!