Author Topic: aswMBR.exe blue screen of death  (Read 2220 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
aswMBR.exe blue screen of death
« on: September 23, 2017, 10:43:39 PM »
Hi

I use Avast free antivirus and I tried to run aswMBR.exe (rootkit scanner). but every time I run it in nest  5 - 10s I got blue screen
My CPU is not overheating and this is not hardware related because if aswMBR.exe is not start computer runs fine.

Each time blue screen happened mini dump is added to c:\windows\Minidump directory
I'm unable to make sense in this dumps so I'm seeking help

this is as far as I got:

FOLLOWUP_IP:
aswMBR+95ae
GetContextState failed, 0x8007001E
GetContextState failed, 0x8007001E
GetContextState failed, 0x8007001E
fffff804`9bf995ae 66893b          mov     word ptr [rbx],di

FAULT_INSTR_CODE:  483b8966

SYMBOL_NAME:  aswMBR+95ae

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: aswMBR

IMAGE_NAME:  aswMBR.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  54649e31

BUCKET_ID_FUNC_OFFSET:  95ae

FAILURE_BUCKET_ID:  DISABLED_INTERRUPT_FAULT_aswMBR!unknown_function

BUCKET_ID:  DISABLED_INTERRUPT_FAULT_aswMBR!unknown_function

PRIMARY_PROBLEM_CLASS:  DISABLED_INTERRUPT_FAULT_aswMBR!unknown_function

TARGET_TIME:  2017-09-23T18:55:11.000Z

OSBUILD:  15063

OSSERVICEPACK:  483

SERVICEPACK_NUMBER: 0

OS_REVISION: 0

SUITE_MASK:  272

PRODUCT_TYPE:  1

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 10

OSEDITION:  Windows 10 WinNt TerminalServer SingleUserTS

OS_LOCALE: 

USER_LCID:  0

OSBUILD_TIMESTAMP:  2017-07-07 08:06:35

BUILDDATESTAMP_STR:  160101.0800

BUILDLAB_STR:  WinBuild

BUILDOSVER_STR:  10.0.15063.483

ANALYSIS_SESSION_ELAPSED_TIME:  c0b

ANALYSIS_SOURCE:  KM

FAILURE_ID_HASH_STRING:  km:disabled_interrupt_fault_aswmbr!unknown_function

FAILURE_ID_HASH:  {617cefd6-6d14-71eb-2020-e317ce333b99}

Followup:     MachineOwner
---------

GetContextState failed, 0x8007001E
GetContextState failed, 0x8007001E
GetContextState failed, 0x8007001E
GetContextState failed, 0x8007001E
GetContextState failed, 0x8007001E
GetContextState failed, 0x8007001E
GetContextState failed, 0x8007001E
GetContextState failed, 0x8007001E
GetContextState failed, 0x8007001E
GetContextState failed, 0x8007001E
GetContextState failed, 0x8007001E
GetContextState failed, 0x8007001E
GetContextState failed, 0x8007001E
GetContextState failed, 0x8007001E
GetContextState failed, 0x8007001E
GetContextState failed, 0x8007001E
GetContextState failed, 0x8007001E
GetContextState failed, 0x8007001E
GetContextState failed, 0x8007001E
GetContextState failed, 0x8007001E
GetContextState failed, 0x8007001E
GetContextState failed, 0x8007001E
GetContextState failed, 0x8007001E
GetContextState failed, 0x8007001E
GetContextState failed, 0x8007001E
GetContextState failed, 0x8007001E
GetContextState failed, 0x8007001E
GetContextState failed, 0x8007001E
GetContextState failed, 0x8007001E
GetContextState failed, 0x8007001E




Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31080
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: aswMBR.exe blue screen of death
« Reply #1 on: September 23, 2017, 10:49:12 PM »
Why are you running a scan in the first place ?

REDACTED

  • Guest
Re: aswMBR.exe blue screen of death
« Reply #2 on: September 23, 2017, 11:24:41 PM »
Spy hunter 4  found 1 "unkown rootkit", tdsskiller is unable to start so I tried aswMBR.exe

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37506
  • Not a avast user
Re: aswMBR.exe blue screen of death
« Reply #3 on: September 23, 2017, 11:33:24 PM »
I suggest you start a topic in Viruses and Worms section and let an expert have a look inside

Instructions to follow    https://forum.avast.com/index.php?topic=194892.0