WinRing0_1_2_0 service

Topic

New Reply

Event Viewer Service Control Manager Event ID 7000

The WinRing0_1_2_0 service failed to start due to the following error: Windows cannot verify the digital signature for this file. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

I found 63 instances listed in the Event Viewer, 57 in the last 24 hours.

I have picked up something and I don’t know what it is.  I did find something about it on the below site which I found when I googled WinRing0_1_2_0

https://threatinfo.net/files/OpenHardwareMonitorLib.sys-0c0195c48b6b8582fa6f6373032118da
I followed a link on the New York Times website to a data base on County by County incidence of COVID-19 which was on GitHub.  This seems to have something to do with GitHub per this search result on product name WinRing0. [Removed link]
Windows defender, Malwarebytes, Adware Cleaner and Super Antispyware all came back clean. Not sure how to get rid of the cause.  One website referred to it as a Windows program so I was afraid to remove it.
Any help appreciated.

HP Pavilion Desktop TP01-0050 – 64 bit
Windows 10 Home Version 22H2
OS build 19045.5608
Windows Defender and Windows Firewall
Microsoft Office Home and Business 2019
-Version 2502(Build 18526.20168 C2R)

Reply | Quote

Replies

[mpw]

I was wrong.  WinRing0 is a Windows driver.  I can’t find it in services or processes in Task Manager.  I don’t know where it is or why it keeps tying to start.  The Event Viewer lists the error every 15 minutes.

This is a website with more info. https://www.file.net/process/winring0.sys.html

Here is the NYT link I followed:  https://github.com/nytimes/covid-19-data

 

HP Pavilion Desktop TP01-0050 – 64 bit
Windows 10 Home Version 22H2
OS build 19045.5608
Windows Defender and Windows Firewall
Microsoft Office Home and Business 2019
-Version 2502(Build 18526.20168 C2R)

• This reply was modified 5 years ago by mpw.

Reply | Quote

OK. GitHub had nothing to do with it. It was a coincidence that I happened to visit the NYT data page when this started.  Apparently, a lot of things use WinRing0 driver. I now find this happens first before I get the error:

Log Name:      System

Source:        Service Control Manager

Date:          3/31/2020 5:30:02 PM

Event ID:      7045

Task Category: None

Level:         Information

Keywords:      Classic

User:          SYSTEM

Computer:      PC-Win10

Description:

A service was installed in the system.

Service Name:  WinRing0_1_2_0

Service File Name:  C:\WINDOWS\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_942053d68a2ba613\x64\OpenHardwareMonitorLib.sys

Service Type:  kernel mode driver

Service Start Type:  demand start

I finally found the HP Analytics Service was causing the check every 15 minutes and turned it off and changed it from automatic start to manual start.

I stopped it when I found it and the last error recorded was at 5:30 and it is now 6:00, so I guess that did it.  I do not know what started it.

HP Pavilion Desktop TP01-0050 – 64 bit
Windows 10 Home Version 22H2
OS build 19045.5608
Windows Defender and Windows Firewall
Microsoft Office Home and Business 2019
-Version 2502(Build 18526.20168 C2R)

2 users thanked author for this post.

satrow, Elly

Reply | Quote

mpw wrote:

I do not know what started it.

WinRing0.sys file information

The process known as WinRing0_1_0_1 or WinRing0_1_2_0 belongs to software Game Booster (version 3) or Razer Game Booster by OpenLibSys.org.

Description: WinRing0.sys is not essential for Windows and will often cause problems. The WinRing0.sys file is located in a folder listed in the Windows %PATH% environment variable or sometimes in a subfolder of the user’s profile folder (generally C:\). The file size on Windows 10/8/7/XP is 14,416 bytes. https://www.file.net/process/winring0.sys.html …

https://www.file.net/process/winring0.sys.html

1 user thanked author for this post.

Elly

Reply | Quote

Actually HP Analytics Service was the problem.  I stopped the service and changed it to manual start. All was well until I had to restart the computer then it started again.  So I went back and stopped it again and this time set it to “Disable”; it has not restarted, it does not try to load a program avery 15 minutes and  WinRing0_1_2_0 does not record an error every 15 minutes.

Problem service was hp analytics:

C:\WINDOWS\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_942053d68a2

HP Pavilion Desktop TP01-0050 – 64 bit
Windows 10 Home Version 22H2
OS build 19045.5608
Windows Defender and Windows Firewall
Microsoft Office Home and Business 2019
-Version 2502(Build 18526.20168 C2R)

Reply | Quote

You might prefer to be somewhat safer and fully uninstall all the HP bloatware:

To fully mitigate all flaws Demirkapi found, you will need to uninstall the vulnerable software by removing both HP Support Assistant and HP Support Solutions Framework from your computer.

Alex5723 wrote:

WinRing0.sys file information

The Carrona/Sysnative Driver Reference Table is my first stop for driver info:

WinRing0.sys Copyright: John D. Carrona (usasma)
Name WinRing0.sys
Info many different programs that center around the using of the WinRing libraries (RealTemp, Corsair Link2 (known BSOD issues w/Win8), Razer GameBooster, Fusiontweaker (Google Code), etc)
Source OEM – none at http://www.python.org/emacs/winring/

Reply | Quote