TMP????.sys Drivers

blueelvis

blueelvis

BSOD Kernel Dump Senior Analyst
Joined
Apr 14, 2014
Posts
970
Location
India
View attachment Temp.zip

I have attached the above ZIP File from a case. This case has been analysed today. Now, I saw those temporary drivers again and like out assumption, there was the presence of the WinRing Service in the Event Logs. But, this time the service is being started by Corsair Link which is also known to have the WinRing Services.

I think we are missing something else as well which is important. How come suddenly the behaviour of the WinRing has changed? The Corsair Link is dated 2013 so I don't think we are looking at some random change from the team behind WinRing libraries. Is it possible that Microsoft has released some update causing this driver to behave differently?

It is getting strange and exciting at the same time :huh:

Usasma, I think we should currently hold off until we have more accurate information as to what is causing this behaviour, don you think?
 
Re: Looking for input on Dynamic Driver listings in the DRT

Several things here:

1) We need to post the tmp????.tmp drivers in the DRT. That is important so that others can see them.
As a temporary measure, we can put a link to this topic there in order to help the researchers.

2) This is the DRT forum, so we generally don't address BSOD issues here. I'd prefer to see this over in the BSOD topics.
As for the "sudden" change - it's not so sudden. These tmp????.tmp drivers have been around for a long time.
There may be another cause for them being exposed, but that remains to be seen.

3) Often the drivers that appear are only a symptom of the problem. It can be that there is something else that conflicts with the WinRing now - so we have to watch and see what it is.
That's the problem with the more complex BSOD's - it takes a long time and patience to figure out the pattern that will eventually lead to the cause.
 
Re: Looking for input on Dynamic Driver listings in the DRT

One in each dump - dated 2008 -
Code: 
tmpB8E0.tmp  Sat Jul 26 09:29:37 2008 (488B26C1)
tmp361E.tmp  Sat Jul 26 09:29:37 2008 (488B26C1)

Code: 
ACPI.sys     Tue Oct 08 03:40:38 2013 (5253B6F6)
acpiex.sys   Thu Aug 22 07:37:47 2013 (5215F80B)
Afc.sys      Wed Jul 12 01:48:20 2006 (44B48D24)
afd.sys      Thu Aug 22 07:36:50 2013 (5215F7D2)
ahcache.sys  Thu Aug 22 07:39:54 2013 (5215F88A)
ArcSec.sys   Wed Nov 09 22:05:33 2011 (4EBB3F7D)
AsInsHelp64.sys Fri Jan 04 00:36:10 2008 (477DC5CA)
AsIO.sys     Wed Aug 22 05:54:47 2012 (5034AC67)
asramdisk.sys Tue Apr 09 02:13:22 2013 (5163B182)
AsUpIO.sys   Mon Aug 02 22:47:59 2010 (4C57835F)
ASUSFILTER.sys Tue Sep 20 11:46:33 2011 (4E78B559)
ATMFD.DLL    unavailable (00000000)
BasicDisplay.sys Thu Aug 22 07:39:31 2013 (5215F873)
BasicRender.sys Thu Aug 22 07:39:27 2013 (5215F86F)
Beep.SYS     Thu Aug 22 07:40:24 2013 (5215F8A8)
BOOTVID.dll  Thu Aug 22 07:40:26 2013 (5215F8AA)
bowser.sys   Thu Aug 22 07:38:38 2013 (5215F83E)
cdd.dll      unavailable (00000000)
cdrom.sys    Thu Aug 22 04:46:35 2013 (5215CFEB)
CI.dll       Sat Sep 21 03:58:34 2013 (523D51AA)
CLASSPNP.SYS Thu Aug 22 04:46:47 2013 (5215CFF7)
CLFS.SYS     Thu Aug 22 07:40:20 2013 (5215F8A4)
cng.sys      Thu Aug 22 07:38:09 2013 (5215F821)
CompositeBus.sys Thu Aug 22 07:38:48 2013 (5215F848)
condrv.sys   Thu Aug 22 07:40:17 2013 (5215F8A1)
kamd64 corsveng2kamd64.sys Fri Mar 15 11:01:17 2013 (514337BD)
crashdmp.sys Thu Aug 22 07:40:03 2013 (5215F893)
csc.sys      Thu Aug 22 07:38:00 2013 (5215F818)
dfsc.sys     Thu Aug 22 07:38:00 2013 (5215F818)
disk.sys     Thu Aug 22 07:39:47 2013 (5215F883)
drmk.sys     Thu Aug 22 07:39:24 2013 (5215F86C)
dtsoftbus01.sys Fri Jan 13 08:45:46 2012 (4F10358A)
dump dump_diskdump.sys Thu Aug 22 07:40:18 2013 (5215F8A2)
dump_dumpfve.sys Thu Aug 22 07:39:55 2013 (5215F88B)
dump_iaStorA.sys Thu Aug 01 21:39:52 2013 (51FB0DE8)
dxgkrnl.sys  Sat Oct 19 02:19:18 2013 (52622466)
dxgmms1.sys  Thu Oct 03 07:51:49 2013 (524D5A55)
e1d64x64.sys Wed Jun 26 16:51:31 2013 (51CB5453)
EhStorClass.sys Thu Aug 22 07:38:15 2013 (5215F827)
fileinfo.sys Thu Aug 22 07:38:45 2013 (5215F845)
fltmgr.sys   Thu Aug 22 07:40:18 2013 (5215F8A2)
Fs_Rec.sys   Thu Aug 22 04:46:33 2013 (5215CFE9)
fvevol.sys   Sat Sep 21 03:58:16 2013 (523D5198)
fwpkclnt.sys Thu Aug 22 07:36:38 2013 (5215F7C6)
hal.dll      Sat Sep 21 04:01:36 2013 (523D5260)
hcwhdpvr.sys Wed Mar 07 10:03:30 2012 (4F5778C2)
HD-Hypervisor-amd64.sys Wed Aug 13 08:37:59 2014 (53EB5C27)
HDAudBus.sys Thu Aug 22 07:38:37 2013 (5215F83D)
HECIx64.sys  Mon Dec 17 14:32:21 2012 (50CF7345)
HIDCLASS.SYS Thu Aug 22 07:39:13 2013 (5215F861)
HIDPARSE.SYS Thu Aug 22 07:40:26 2013 (5215F8AA)
hidusb.sys   Thu Aug 22 07:38:58 2013 (5215F852)
HTTP.sys     Thu Aug 22 07:37:09 2013 (5215F7E5)
iaStorA.sys  Thu Aug 01 21:39:52 2013 (51FB0DE8)
intelpep.sys Tue Oct 08 03:39:25 2013 (5253B6AD)
intelppm.sys Thu Aug 22 04:46:35 2013 (5215CFEB)
kbdclass.sys Thu Aug 22 07:39:23 2013 (5215F86B)
kbdhid.sys   Thu Aug 22 07:39:13 2013 (5215F861)
kd.dll       Thu Aug 22 07:40:43 2013 (5215F8BB)
kdnic.sys    Thu Aug 22 07:38:26 2013 (5215F832)
ks.sys       Thu Sep 05 03:39:03 2013 (52283517)
ksecdd.sys   Sat Sep 21 03:59:44 2013 (523D51F0)
ksecpkg.sys  Thu Aug 22 07:37:32 2013 (5215F7FC)
ksthunk.sys  Thu Aug 22 07:39:31 2013 (5215F873)
LGBusEnum.sys Mon Nov 23 20:36:48 2009 (4B0B38B0)
LGSHidFilt.Sys Thu May 30 11:16:33 2013 (51A76D51)
LGVirHid.sys Mon Nov 23 20:36:48 2009 (4B0B38B0)
lltdio.sys   Thu Aug 22 07:36:18 2013 (5215F7B2)
luafv.sys    Thu Aug 22 07:39:36 2013 (5215F878)
lvrs64.sys   Mon Oct 22 22:11:24 2012 (5085FCCC)
lvuvc64.sys  Mon Oct 22 22:12:08 2012 (5085FCF8)
mbam.sys     Wed Oct 30 12:11:45 2013 (52712FC1)
MBAMSwissArmy.sys Thu Mar 20 18:12:35 2014 (532B67D3)
mcupdate_GenuineIntel.dll Thu Aug 22 07:40:16 2013 (5215F8A0)
monitor.sys  Thu Aug 22 07:36:37 2013 (5215F7C5)
mouclass.sys Thu Aug 22 07:39:13 2013 (5215F861)
mouhid.sys   Thu Aug 22 07:39:13 2013 (5215F861)
mountmgr.sys Thu Aug 22 07:40:04 2013 (5215F894)
mpsdrv.sys   Thu Aug 22 07:36:06 2013 (5215F7A6)
mrxsmb.sys   Sat Sep 21 03:56:34 2013 (523D5132)
mrxsmb10.sys Thu Aug 22 07:35:42 2013 (5215F78E)
mrxsmb20.sys Sat Sep 21 03:57:59 2013 (523D5187)
Msfs.SYS     Thu Aug 22 07:40:24 2013 (5215F8A8)
msisadrv.sys Thu Aug 22 07:39:03 2013 (5215F857)
mslldp.sys   Thu Aug 22 07:36:07 2013 (5215F7A7)
MSPQM.sys    Thu Aug 22 07:39:31 2013 (5215F873)
msrpc.sys    Thu Aug 22 07:39:22 2013 (5215F86A)
mssmbios.sys Thu Aug 22 07:39:41 2013 (5215F87D)
mup.sys      Thu Aug 22 07:40:28 2013 (5215F8AC)
mwac.sys     Tue Mar 04 16:47:40 2014 (531649FC)
ndis.sys     Sat Sep 21 03:59:30 2013 (523D51E2)
NdisVirtualBus.sys Thu Aug 22 07:36:25 2013 (5215F7B9)
Ndu.sys      Thu Aug 22 07:35:42 2013 (5215F78E)
netbios.sys  Thu Aug 22 07:38:58 2013 (5215F852)
netbt.sys    Thu Aug 22 07:37:01 2013 (5215F7DD)
NETIO.SYS    Thu Aug 22 07:37:08 2013 (5215F7E4)
npf.sys      Thu Feb 28 20:31:24 2013 (513004EC)
Npfs.SYS     Thu Aug 22 07:40:25 2013 (5215F8A9)
npsvctrig.sys Thu Aug 22 07:38:22 2013 (5215F82E)
nsiproxy.sys Thu Aug 22 07:36:34 2013 (5215F7C2)
ntkrnlmp.exe Sun Oct 06 21:35:32 2013 (52520FE4)
Ntfs.sys     Thu Aug 22 04:48:02 2013 (5215D042)
Null.SYS     Thu Aug 22 07:40:24 2013 (5215F8A8)
nvhda64v.sys Thu Nov 28 08:38:09 2013 (52974741)
nvlddmkm.sys Wed Jul 02 13:42:02 2014 (53B4446A)
NvStreamKms.sys Thu Oct 02 21:39:09 2014 (542DFE3D)
nvvad64v.sys Thu Sep 04 13:10:48 2014 (54089D18)
pacer.sys    Thu Aug 22 07:36:06 2013 (5215F7A6)
partmgr.sys  Thu Aug 22 07:40:20 2013 (5215F8A4)
pci.sys      Thu Aug 22 07:38:31 2013 (5215F837)
pcw.sys      Thu Aug 22 04:46:34 2013 (5215CFEA)
pdc.sys      Sat Sep 21 00:28:39 2013 (523D2077)
peauth.sys   Thu Aug 22 07:36:07 2013 (5215F7A7)
portcls.sys  Tue Sep 17 03:01:35 2013 (5237FE4F)
PSHED.dll    Sat Sep 14 09:57:19 2013 (52346B3F)
rdbss.sys    Thu Aug 22 07:37:48 2013 (5215F80C)
rdpbus.sys   Thu Aug 22 07:38:52 2013 (5215F84C)
rdyboost.sys Sat Oct 12 19:49:41 2013 (5259E015)
rspndr.sys   Thu Aug 22 07:36:34 2013 (5215F7C2)
RTKVHD64.sys Tue Jul 16 08:10:14 2013 (51E53826)
SbieDrv.sys  Thu May 29 14:16:25 2014 (53877979)
secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
spaceport.sys Sat Oct 05 07:02:21 2013 (524FF1BD)
srv.sys      Sat Oct 05 07:01:15 2013 (524FF17B)
srv2.sys     Sat Sep 21 03:58:17 2013 (523D5199)
srvnet.sys   Wed Sep 11 05:31:45 2013 (52303881)
storahci.sys Thu Aug 22 07:40:39 2013 (5215F8B7)
storport.sys Thu Aug 22 07:39:03 2013 (5215F857)
swenum.sys   Thu Aug 22 07:39:29 2013 (5215F871)
tcpip.sys    Tue Oct 08 03:40:52 2013 (5253B704)
tcpipreg.sys Thu Aug 22 07:36:03 2013 (5215F7A3)
TDI.SYS      Thu Aug 22 07:39:01 2013 (5215F855)
tdx.sys      Thu Aug 22 07:36:34 2013 (5215F7C2)
tm.sys       Thu Aug 22 07:39:33 2013 (5215F875)
tmp361E.tmp  Sat Jul 26 09:29:37 2008 (488B26C1)
TSDDD.dll    unavailable (00000000)
tunnel.sys   Thu Aug 22 07:35:45 2013 (5215F791)
ucx01000.sys Thu Aug 22 07:37:32 2013 (5215F7FC)
udfs.sys     Thu Aug 22 07:40:19 2013 (5215F8A3)
umbus.sys    Thu Aug 22 07:38:59 2013 (5215F853)
usbaudio.sys Thu Aug 22 07:37:34 2013 (5215F7FE)
usbccgp.sys  Wed Oct 23 04:17:41 2013 (52678625)
USBD.SYS     Thu Aug 22 07:40:22 2013 (5215F8A6)
usbehci.sys  Thu Aug 22 07:39:15 2013 (5215F863)
usbhub.sys   Thu Aug 22 07:38:33 2013 (5215F839)
UsbHub3.sys  Tue Sep 17 03:01:13 2013 (5237FE39)
USBPORT.SYS  Thu Aug 22 07:39:40 2013 (5215F87C)
USBXHCI.SYS  Wed Sep 11 05:32:46 2013 (523038BE)
uxstyle.sys  Mon Sep 23 07:19:02 2013 (524023A6)
vdrvroot.sys Thu Aug 22 07:38:49 2013 (5215F849)
volmgr.sys   Thu Aug 22 07:39:53 2013 (5215F889)
volmgrx.sys  Thu Aug 22 07:40:23 2013 (5215F8A7)
volsnap.sys  Thu Aug 22 07:40:46 2013 (5215F8BE)
watchdog.sys Thu Aug 22 07:39:48 2013 (5215F884)
Wdf01000.sys Thu Aug 22 07:38:56 2013 (5215F850)
WdFilter.sys Thu Aug 22 07:39:34 2013 (5215F876)
WDFLDR.SYS   Thu Aug 22 07:39:03 2013 (5215F857)
WdNisDrv.sys Thu Aug 22 07:35:32 2013 (5215F784)
werkernel.sys Thu Aug 22 07:40:24 2013 (5215F8A8)
wfplwfs.sys  Sat Oct 12 19:46:38 2013 (5259DF5E)
win32k.sys   unavailable (00000000)
wmiacpi.sys  Thu Aug 22 07:40:04 2013 (5215F894)
WMILIB.SYS   Thu Aug 22 07:40:23 2013 (5215F8A7)
WppRecorder.sys Thu Aug 22 07:39:40 2013 (5215F87C)
WudfPf.sys   Thu Aug 22 07:37:21 2013 (5215F7F1)
WUDFRd.sys   Thu Aug 22 07:36:50 2013 (5215F7D2)
xusb22.sys   Thu Aug 22 07:38:23 2013 (5215F82F)
 
It seems that the WinRing service creates something else which in turn creates these Temporary Files since even on deleting the libraries and the software from the system, the temporary files are still being created.
And there is no trace of WinRing in my system as of now. I am trying to find more about this.
 

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top