Author Topic: BSOD Stop 0x0000008E with aswFsblk.sys  (Read 12845 times)

0 Members and 1 Guest are viewing this topic.

WhiteD

  • Guest
BSOD Stop 0x0000008E with aswFsblk.sys
« on: December 30, 2008, 05:56:43 PM »
Hello everyone,

I have a problem with my computer.
Sometimes, my computer displays the Windows' BSOD before rebooting.
Here some informations about the system error :

===
STOP : 0x0000008E (0xc0000005, 0xF79D8577, 0xF77A3884, 0x00000000)

aswfsblk.sys - Address F79D8577
base at F79D4000 - DateStamp 492AEE01
===

I have the minidump file if you want me to upload it (I use Filezilla Client).

Thank you for reading me, I hope you will help me finding the solution.


Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: BSOD Stop 0x0000008E with aswFsblk.sys
« Reply #1 on: December 30, 2008, 11:20:28 PM »
Check the folder <avast>\data\log
Are there any files called unpXXXX (where XXXX is a random number) or *.mdmp there?
If so, send them to vlk (at) avast.com
They may contain more information about the problem (maybe a link to this thread).

Also, please, go to folder \windows\minidump and send the newest (recent) .mdmp files for analysis. There is also C:\Windows\Memory.dmp file.
Better if you can compress (zip) them and add some information about the BSOD and the link for this thread.  ;)

Send an email to: vlk (at) avast.com
Or upload it to this anonymous ftp server: ftp://ftp.asw.cz/incoming

Control Panel > System > Advanced > Initialization & restoring Settings > Choose the dump options (removing the autorestart in case of failure)

Besides Google also you can use:
MS knowledgebase: http://support.microsoft.com/search/?adv=1
Free memory tester (Run it overnight): http://www.memtest86.com/
XP error explanations: http://www.xptuneup.com/xptuneup_stopmessages.htm
The best things in life are free.

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11863
    • AVAST Software
Re: BSOD Stop 0x0000008E with aswFsblk.sys
« Reply #2 on: December 31, 2008, 10:46:35 AM »
Yes, please upload the minidump to ftp://ftp.avast.com, or send it to Vlk's e-mail.
Thanks.

WhiteD

  • Guest
Re: BSOD Stop 0x0000008E with aswFsblk.sys
« Reply #3 on: December 31, 2008, 11:41:19 AM »
There is neither unpXXXX (or .mdmp) file in \data\log nor \windows\Memory.dmp file
I sent a mail with the \windows\minidump file and a link to this thread

Offline pk

  • Avast team
  • Super Poster
  • *
  • Posts: 2078
Re: BSOD Stop 0x0000008E with aswFsblk.sys
« Reply #4 on: December 31, 2008, 12:37:28 PM »
WhiteD: thanks for your dump! We've analyze your dump, but we're not quite sure what caused the problem - would it be possible to generate a kernel memory dump instead of minidump and next time when it'd happen, ZIP \Windows\memory.dmp file and upload it to ftp://ftp.avast.com/incoming ? (note that you won't have READ access to the ftp erver, just write - so you won't even be able to see what you've just uploaded). Thanks!

WhiteD

  • Guest
Re: BSOD Stop 0x0000008E with aswFsblk.sys
« Reply #5 on: December 31, 2008, 12:49:00 PM »
Ok but how can i do that kind of dump ?
Now, I have no Memory.dmp file in Windows folder

Offline pk

  • Avast team
  • Super Poster
  • *
  • Posts: 2078
Re: BSOD Stop 0x0000008E with aswFsblk.sys
« Reply #6 on: December 31, 2008, 12:52:05 PM »
Unfortunately, you have to wait for another BSOD, next time, \Windows\memory.dmp file will be created instead of minidump file. This file will contain much more information than minidump, so we can find the problem easily.

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11863
    • AVAST Software
Re: BSOD Stop 0x0000008E with aswFsblk.sys
« Reply #7 on: December 31, 2008, 12:58:11 PM »
You have to configure Windows to create this kind of dump first:
My Computer / Properties / Advanced / Startup and Recovery - Settings
- and select "Kernel memory dump " in the section Write debugging information.

I'm not sure if the change takes effect immediatelly, so I'd suggest to restart the computer first.

WhiteD

  • Guest
Re: BSOD Stop 0x0000008E with aswFsblk.sys
« Reply #8 on: December 31, 2008, 01:33:15 PM »
Ok, thank you for your answer.
See you soon ;)

WhiteD

  • Guest
Re: BSOD Stop 0x0000008E with aswFsblk.sys
« Reply #9 on: January 01, 2009, 04:49:36 PM »
Hello !
I have just uploaded "WhiteD-MEMORY.zip" file in the incoming folder of the FTP.
I hope this will help you.

Offline pk

  • Avast team
  • Super Poster
  • *
  • Posts: 2078
Re: BSOD Stop 0x0000008E with aswFsblk.sys
« Reply #10 on: January 02, 2009, 02:23:27 PM »
Thanks for your dump.
Looking at your dump, it looks like the Windows internal memory structures were damaged - it might seem like you have a rootkit in your system ;).

Please follow these steps (for x86 machines only) to download our fixed driver:
1) Stop avast self defense (avast settings -> Troubleshooting page)
2) Copy the following files http://public.avast.com/~kurtin/public/flt_05/i386/aswFsBlk.sys and http://public.avast.com/~kurtin/public/flt_05/i386/aswFsBlk.sys.sum to \Windows\System32\Drivers and \Program Files\ALWIL Software\Avast\setup\inf folders (overwrite existing)
3) Re-enable avast self defense
4) Restart the computer

If you see another BSOD, please zip & upload your memory.dmp file on our ftp.
« Last Edit: January 02, 2009, 02:25:16 PM by pk »

WhiteD

  • Guest
Re: BSOD Stop 0x0000008E with aswFsblk.sys
« Reply #11 on: January 02, 2009, 02:40:59 PM »
It is strange that i could have a rootkit in my computer because i have just formatted it.
Because formatting kills everything in the Windows file, doesn't it ?

Offline pk

  • Avast team
  • Super Poster
  • *
  • Posts: 2078
Re: BSOD Stop 0x0000008E with aswFsblk.sys
« Reply #12 on: January 02, 2009, 02:43:03 PM »
Well, fix the driver and we'll see what happen.

WhiteD

  • Guest
Re: BSOD Stop 0x0000008E with aswFsblk.sys
« Reply #13 on: January 02, 2009, 03:00:37 PM »
Ok i copied the two files in the two folders.
We'll see if it happens again.
Thank you for your help.

WhiteD

  • Guest
Re: BSOD Stop 0x0000008E with aswFsblk.sys
« Reply #14 on: January 04, 2009, 06:25:07 PM »
So, There is no BSOD caused by aswFsblk.sys since I fixed it.
We can say it's resolved :) thank you very much !