Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: Lisandro on September 14, 2011, 02:38:59 PM

Title: [6.0.1289] BSOD of aswFW.sys and browsing speed degration
Post by: Lisandro on September 14, 2011, 02:38:59 PM: My system is well known, with TrueCrypt, K9 and avast Internet Security.
TrueCrypt analysis of the BSOD indicates <avast>\Setup\INF\aswFW.sys crash.
Besides, my Internet speed was degraded last week significantly.

Hope the dump help in anyway. Uploaded as Tech.Memory.Dump.aswFW.sys.crash.7z
Title: Re: [6.0.1289] BSOD of aswFW.sys and browsing speed degration
Post by: ady4um on September 14, 2011, 02:52:33 PM: Tech, you probably know about these 2, but for general info:

1_ if using mini dumps, BlueScreenView: http://nirsoft.net/utils/blue_screen_view.html (http://nirsoft.net/utils/blue_screen_view.html)

There are several others too.

2_ For Application crashes:

http://nirsoft.net/utils/app_crash_view.html (http://nirsoft.net/utils/app_crash_view.html).

Of course, Avast devs are very good about crashes too :).
Title: Re: [6.0.1289] BSOD of aswFW.sys and browsing speed degration
Post by: Lisandro on September 14, 2011, 02:59:03 PM: I know that tools.
The first only analyze minidumps and not the full dump.

By the way, I cannot upload the file to ftp regardless I try.
Cannot create the file at the server... What's wrong?
Title: Re: [6.0.1289] BSOD of aswFW.sys and browsing speed degration
Post by: ady4um on September 14, 2011, 03:03:07 PM: Quote from: Tech on September 14, 2011, 02:59:03 PM
I know that tools.
The first only analyze minidumps and not the full dump.
Yes, I specifically wrote both 2 facts :).
Quote
By the way, I cannot upload the file to ftp regardless I try.
Cannot create the file at the server... What's wrong?

Either the ftp is down, a connection problem, your firewall, or the file size of the complete (or kernel) dump is too big (even compressed)?
Title: Re: [6.0.1289] BSOD of aswFW.sys and browsing speed degration
Post by: igor on September 14, 2011, 03:21:54 PM: There were two (small, unfinished) files on the FTP... so the file creation succeeded, the transfer must have been interrupted afterwards.
Title: Re: [6.0.1289] BSOD of aswFW.sys and browsing speed degration
Post by: Lisandro on September 14, 2011, 03:32:27 PM: Quote from: igor on September 14, 2011, 03:21:54 PM
There were two (small, unfinished) files on the FTP... so the file creation succeeded, the transfer must have been interrupted afterwards.

I've tested three times... Maybe later I could succeed...
Title: Re: [6.0.1289] BSOD of aswFW.sys and browsing speed degration
Post by: nmb on September 14, 2011, 07:20:04 PM: I have also experienced a decrement in browsing speed, significant I should say. Let me know if you want any logs or other details.
Title: Re: [6.0.1289] BSOD of aswFW.sys and browsing speed degration
Post by: Lisandro on September 14, 2011, 07:45:21 PM: I've tried disabling 1) Firewall 2) WebShield 3) All Shields.
Things does not go so better. Maybe an interaction between avast 6.0.1289 and other drivers in my computer... :-\ ::)
Title: Re: [6.0.1289] BSOD of aswFW.sys and browsing speed degration
Post by: Lisandro on September 15, 2011, 12:38:02 AM: I've boot as admin. My Internet speed restored. Something seems fishy in my user account.
Finally I've could manage to update the dump Tech.Memory.Dump.aswFW.sys.crash3.7z
Title: Re: [6.0.1289] BSOD of aswFW.sys and browsing speed degration
Post by: Lisandro on September 15, 2011, 10:56:11 PM: New BSOD with tcpip.sys (occurred twice after sleeping/waking up the computer).
I'll add the TrueCrypt analysis of the dump and I'm uploading it as Tech.Memory.Dump.tcpip.sys.7z
Can anybody analyze the dumps? I'm in favor of uninstalling *any* software that is causing the error as I need it stable back to work. Thanks.

The only change from last week to this one is the avast program update. I was mostly off line due to my father's disease and passed away.
Title: Re: [6.0.1289] BSOD of aswFW.sys and browsing speed degration
Post by: pk on September 16, 2011, 12:49:16 AM: Thanks Tech, I looked at your dump - and please contact lukor, because he's responsible for TDI drivers -- he should find a root problem in your PC. Thanks!
Title: Re: [6.0.1289] BSOD of aswFW.sys and browsing speed degration
Post by: Lisandro on September 16, 2011, 03:14:15 AM: Quote from: pk on September 16, 2011, 12:49:16 AM
Thanks Tech, I looked at your dump - and please contact lukor, because he's responsible for TDI drivers -- he should find a root problem in your PC. Thanks!
Thanks pk.
Dump or dumps? I've uploaded two.
Hope Lukas can help me :)
Title: Re: [6.0.1289] BSOD of aswFW.sys and browsing speed degration
Post by: Lisandro on September 19, 2011, 02:13:38 PM: Different BSOD when the computer is stressed (Virtualbox) and high file activity (Mozy, PureSync).
Now it is tdx.sys (after Windows Updates).

Tech.Memory.Dump.tdx.sys.7z is the uploaded dump.
Please, give me some help in order to ask the proper support team product.
I can't manage which application is due to these BSODs.

I was nos suspecting avast, but other threads made me thought...
http://forum.avast.com/index.php?topic=85034
http://forum.avast.com/index.php?topic=84989
Title: Re: [6.0.1289] BSOD of aswFW.sys and browsing speed degration
Post by: Lisandro on September 27, 2011, 03:58:43 AM: I have three BSODs since then.
Nobody is saying me nothing about them.
Please, help me!

I've uploaded the three ones: Tech.Memory.Dump1a.7z Tech.Memory.Dump2a.7z Tech.Memory.Dump3a.7z

I've stabilized the computer following this:
1. Uninstall Firefox Tweak addon (https://addons.mozilla.org/pt-BR/firefox/addon/firefox-tweak/).
2. Uninstall K9 (http://www1.k9webprotection.com/).
3. Run netsh int ip reset
4. Run sfc /scannow

I don't know where to ask for help...
Title: Re: [6.0.1289] BSOD of aswFW.sys and browsing speed degration
Post by: Lisandro on September 27, 2011, 04:11:51 AM: Here is another one: http://forum.avast.com/index.php?topic=85522.msg692772#msg692772

Hey... Trevor will say me: "Hey, Tech, why are you losing time here on forum. Shut up and translate" ;D
Trevor, besides the BSODs while translating, I'm trying to use my night time on it.
You gave us very little time this time ;D
Title: Re: [6.0.1289] BSOD of aswFW.sys and browsing speed degration
Post by: Lisandro on September 29, 2011, 03:14:36 AM: The lack of support hurts me... :'(
Title: Re: [6.0.1289] BSOD of aswFW.sys and browsing speed degration
Post by: Lisandro on September 29, 2011, 11:54:58 PM: I've got another BSOD. Should I upload? Does it worth anything after all? ??? :'(
Title: Re: [6.0.1289] BSOD of aswFW.sys and browsing speed degration
Post by: Lisandro on October 01, 2011, 03:32:06 AM: Lukor: http://forum.avast.com/index.php?topic=83234.msg694214#msg694214
I'll send another one. Tech.Memory.Dump4b.7z

What's weird: each time, a different driver. Now ntkrpamp.exe? ???
Title: Re: [6.0.1289] BSOD of aswFW.sys and browsing speed degration
Post by: iroc9555 on October 01, 2011, 02:54:49 PM: Tech.

I feel your pain.

You may have done this, but I have to tell you since your comp was fine and suddenly started to BSOD. A year or so ago my sister´s comp started to BSOD because of Avast, and then it was a bunch of different files doing the BSOD. If Avast was not in the PC, it was OK, well it turned out to be one bad memory stick. I believe you said in one of your post that was BSOD under stress.

My penny.

Hope it helps some.
Title: Re: [6.0.1289] BSOD of aswFW.sys and browsing speed degration
Post by: Lisandro on October 04, 2011, 03:03:21 PM: Also asking for help here: http://forums.bluecoat.com/viewtopic.php?f=13&t=12292
An email was sent to Lukas.
Also, another BSOD if I return back K9. Tech.Memory.Dump.K9.7z
Title: Re: [6.0.1289] BSOD of aswFW.sys and browsing speed degration
Post by: lukor on October 04, 2011, 04:29:31 PM: Hello Tech, I have looked into your dumps. They have not much in common. Certainly they don't have any connection with the links you've posted (regarding some crashes in aswsp.sys). The crash types are always different, DRIVER_IRQL_NOT_LESS_OR_EQUAL, PFN_LIST_CORRUPT, MULTIPLE_IRP_COMPLETE_REQUESTS, KERNEL_MODE_EXCEPTION_NOT_HANDLED, APC_INDEX_MISMATCH.

In almost all crashes there is a driver on the stack with the name nbdrv.sys. Searching on google suggests it might be part of NetBalancer driver from SeriousBit.

Could you please try to uninstall this product to test if that makes any change?

Thanks.
Lukas.
Title: Re: [6.0.1289] BSOD of aswFW.sys and browsing speed degration
Post by: pk on October 04, 2011, 04:42:53 PM: there was also a K9 related crash...
Title: Re: [6.0.1289] BSOD of aswFW.sys and browsing speed degration
Post by: Lisandro on October 05, 2011, 01:12:11 PM: Quote from: lukor on October 04, 2011, 04:29:31 PM
In almost all crashes there is a driver on the stack with the name nbdrv.sys. Searching on google suggests it might be part of NetBalancer driver from SeriousBit.
You're right. I had it installed. I've disabled... oh, sorry, I've forgotten that disable is not enough. I'll uninstall it and check.
I'm managing the K9 one with their support team (by email).
Thanks.

I've curious about why is happening each time a different thing...
Title: Re: [6.0.1289] BSOD of aswFW.sys and browsing speed degration
Post by: lukor on October 05, 2011, 03:26:43 PM: A large percentage of bugs is not easily reproducible, most exhibits it self as random behavior. This is probably the case on your computer as well. Someone, some driver, is corrupting the system's structures or memory and since it is probably random (uninitialized pointer or something like that) it hits every time different part of the system.

Or maybe something else. :P

The stacks were all more or less connected to some networking operations, so we might guess that the bug is close to the network.
Title: Re: [6.0.1289] BSOD of aswFW.sys and browsing speed degration
Post by: Lisandro on October 05, 2011, 05:12:21 PM: Quote from: lukor on October 05, 2011, 03:26:43 PM
The stacks were all more or less connected to some networking operations, so we might guess that the bug is close to the network.
I'm quite sure of that. In the first post I've pointed to Firefox Tweak addon (network settings) or VirtualBox or K9. I'm waiting for the K9 team to say if I can reinstall K9 to test.
Title: Re: [6.0.1289] BSOD of aswFW.sys and browsing speed degration
Post by: Lisandro on October 06, 2011, 02:09:57 AM: Quote from: lukor on October 04, 2011, 04:29:31 PM
In almost all crashes there is a driver on the stack with the name nbdrv.sys. Searching on google suggests it might be part of NetBalancer driver from SeriousBit.
You're right. I had it installed. I've disabled... oh, sorry, I've forgotten that disable is not enough. I'll uninstall it and check.
I'm managing the K9 one with their support team (by email). I'm waiting for their input to go further ::)
Thanks.

I've curious about why is happening each time a different thing...
Title: Re: [6.0.1289] BSOD of aswFW.sys and browsing speed degration
Post by: Lisandro on October 13, 2011, 10:54:28 PM: I've reinstalled K9. Next second boot, the computer start to behave strange... freezing...
Then a BSOD of tdx.sys.
I'm right now uploading a full dump to them.

Lukor, can you analyze it too? Can you discover why K9 is "probably" conflicting with AIS?
Should I upload it (17 pieces of 50Mb).
Title: Re: [6.0.1289] BSOD of aswFW.sys and browsing speed degration
Post by: lukor on October 14, 2011, 10:42:18 AM: Interesting, please upload.

Edit: Tech, the NetBalancer driver is uninstalled? It is little strange, since you were using K9 for quite some time.
Title: Re: [6.0.1289] BSOD of aswFW.sys and browsing speed degration
Post by: Lisandro on October 14, 2011, 02:27:09 PM: Quote from: lukor on October 14, 2011, 10:42:18 AM
Interesting, please upload.

Edit: Tech, the NetBalancer driver is uninstalled? It is little strange, since you were using K9 for quite some time.
I'll start uploading 18 files starting with my name. 1-17 are last BSOD. One single, the last, is a dump of the K9 driver.
The NetBalancer application was fully removed. The driver is not there anymore as per Autoruns.
Thanks Lukor.
Title: Re: [6.0.1289] BSOD of aswFW.sys and browsing speed degration
Post by: Lisandro on October 16, 2011, 10:47:02 PM: Uploaded the files and now waiting here and at K9 to know what wrong between avast and K9.
Lukor, when you can, don't let me down :)
Title: Re: [6.0.1289] BSOD of aswFW.sys and browsing speed degration
Post by: Lisandro on October 18, 2011, 02:35:16 AM: Lukor, any advance on handling it?
Title: Re: [6.0.1289] BSOD of aswFW.sys and browsing speed degration
Post by: Lisandro on October 19, 2011, 02:33:15 AM: Bump...
Title: Re: [6.0.1289] BSOD of aswFW.sys and browsing speed degration
Post by: lukor on October 19, 2011, 11:11:52 AM: Hi Tech, thanks for your patience! We are currently working on a big rework of the whole TDI infrastructure in avast! In av7, chances are that the drivers will be completely replaced by different ones.

However I'll post here any findings regarding your dumps as soon as I'll have something to post.

Thanks again,
Lukas.
Title: Re: [6.0.1289] BSOD of aswFW.sys and browsing speed degration
Post by: Lisandro on October 19, 2011, 12:31:46 PM: Thanks Lukas.
The K9 team also asked me to be patient.
I'll be more or less out of Internet next week. So, no problems.
Good to see the improvements on v7 :)
Title: Re: [6.0.1289] BSOD of aswFW.sys and browsing speed degration
Post by: avast@@dvantage77.com on October 20, 2011, 10:07:39 PM: Several years ago we found K9 as not stable, and bailed from that product! J.R. Guthrie
Title: Re: [6.0.1289] BSOD of aswFW.sys and browsing speed degration
Post by: Lisandro on October 21, 2011, 02:05:09 AM: Quote from: avast@advantage77.com on October 20, 2011, 10:07:39 PM
Several years ago we found K9 as not stable, and bailed from that product! J.R. Guthrie
Well... I have no option now: I had to uninstall K9 to use the computer. Without it, no BSODs at all. With it, from time to time, from different parts of the computer, problems.
But I still believe in their development and support team. They deserve my acknowledge when releasing a free product with quite good quality.
Title: Re: [6.0.1289] BSOD of aswFW.sys and browsing speed degration
Post by: avast@@dvantage77.com on October 22, 2011, 12:55:26 AM: Depending upon your needs, there are other good solutions similar to K9.

J.R. Guthrie
Title: Re: [6.0.1289] BSOD of aswFW.sys and browsing speed degration
Post by: Lisandro on October 22, 2011, 01:53:32 AM: Quote from: avast@advantage77.com on October 22, 2011, 12:55:26 AM
Depending upon your needs, there are other good solutions similar to K9.
Freeware?
Title: Re: [6.0.1289] BSOD of aswFW.sys and browsing speed degration
Post by: Yance on October 22, 2011, 02:54:43 PM: Hello Tech. Did you remember me? I had also ever discussed about K9 BSOD issued with you. But now, i never got BSOD if i install K9 in all of my computer. I don't now why, but i just try to install k9 again in my computer and didn't got BSOD again. I also using netbalancer, no problem with windows start. But netbalancer didn't work if i use avast 6.
Title: Re: [6.0.1289] BSOD of aswFW.sys and browsing speed degration
Post by: Lisandro on October 24, 2011, 01:34:03 AM: Yance, I need to be honest, but I did not remember you. The forum is so big...
But, sorry for that.
I take your experience as real because a lot of K9 users have avast without problems.
I never had luck with the network drivers in my computer.
Right now, I need to be patient, because both avast team and K9 team promised they're looking into the memory dumps.
Right now, each time I install K9 I got a BSOD, sooner or later.
Title: Re: [6.0.1289] BSOD of aswFW.sys and browsing speed degration
Post by: Lisandro on November 09, 2011, 11:35:18 AM: Well, I did not progress with K9 team that much.
Now, the BSOD occurs directly with an avast driver.
Sorry to resurrect this thread, but, can I got some help?

I've uploaded the file to the ftp server with the name Tech.Memory.Dump.9.11.2011.7z
Title: Re: [6.0.1289] BSOD of aswFW.sys and browsing speed degration
Post by: Lisandro on November 10, 2011, 05:58:55 PM: email sent to Lukor in order to get some help.
Lukor answered me that, although avast is at the end of the dump (faulty driver), they can't really found why as there is no technical reason for avast being involved in that part of the memory.

Remains a mystery.
I'll post more if the computer BSODs again.
Title: Re: [6.0.1289] BSOD of aswFW.sys and browsing speed degration
Post by: bob3160 on November 10, 2011, 06:32:26 PM: Tech,
Why not find a replacement for K9 ???
I've read lot's of complaints about compatibility problems with that program ???
Title: Re: [6.0.1289] BSOD of aswFW.sys and browsing speed degration
Post by: Lisandro on November 10, 2011, 08:29:03 PM: I've tried. I did not find the same power & features I need.
Title: Re: [6.0.1289] BSOD of aswFW.sys and browsing speed degration
Post by: bob3160 on November 10, 2011, 09:05:13 PM: Quote from: Tech on November 10, 2011, 08:29:03 PM
I've tried. I did not find the same power & features I need.
Have you checked out the following: ???
http://explore.live.com/windows-live-family-safety (http://explore.live.com/windows-live-family-safety)
Title: Re: [6.0.1289] BSOD of aswFW.sys and browsing speed degration
Post by: Lisandro on November 10, 2011, 09:58:47 PM: Quote from: bob3160 on November 10, 2011, 09:05:13 PM
Quote from: Tech on November 10, 2011, 08:29:03 PM
I've tried. I did not find the same power & features I need.
Have you checked out the following: ???
http://explore.live.com/windows-live-family-safety (http://explore.live.com/windows-live-family-safety)
Don't work at admin account :'(
Title: Re: [6.0.1289] BSOD of aswFW.sys and browsing speed degration
Post by: Lisandro on November 11, 2011, 03:27:10 PM: New different BSOD of tdx.sys. Most probably related in anyways.
Hope Lukor and pk could take a look at it. Good work. Many thanks.

File uploaded Tech.Memory.Dump.11.11.11.7z
Title: Re: [6.0.1289] BSOD of aswFW.sys and browsing speed degration
Post by: Lisandro on November 13, 2011, 09:56:20 PM: Another dump uploaded: Tech.Memory.Dump.12.11.2011.7z