[Reopen] BSOD of AIS Sandbox

[Lisandro]

Failed to load.
I've replaced the original aswSnx.sys driver with the new one for sure (answer UAC, etc.).
What should I do?

[pk]

hard to say now... try to delete both snx_gconfig.xml and snx_lconfig.xml from your avast data folder and reboot...

[Lisandro]

As a side effect, the storage folder is shown even when OS/hidden files are off.

[pk]

As a side effect, the storage folder is shown even when OS/hidden files are off.

yes, it's because aswSnx driver isn't loaded and therefore it's not able to hide that folder...
did you try to remove those two files and reboot? did it help?

[Lisandro]

did you try to remove those two files and reboot? did it help?

It does not load it... Why?
I've deleted both files but the fltmc command does not return the sandbox driver.

[pk]

how about "fltmc load aswsnx" command?
do you have any errors in event viewer?

[Lisandro]

how about "fltmc load aswsnx" command?

Then it works... See first screenshot.

do you have any errors in event viewer?

Event 7026: failed to load driver at initialization. See second screenshot.

[Lisandro]

Seems that the correct load of this driver was something like the picture.
It's failing now on each boot.

[Lisandro]

how about "fltmc load aswsnx" command?

Seems this make it works after reboot also.
I'm using Firefox sandboxed now, tested the upload of a file, no BSOD.
But, when I open the folder to attach the file (there are a lot of screenshots in that folder), it takes molasses to display the contents. I'm not sure if it is related to sandboxing.

I'll wait and test a little, then set this issue to "solved".

[Lisandro]

Bri (aka hyatt) has the same issue.
I've cross referenced both threads.
Seems to be solved.
https://forums.comodo.com/bug-reports-ctm/bsod-t61238.0.html;new#new

[Lisandro]

Problem come back...
PAGE_FAULT_IN_NONPAGED_AREA
0x00000050 (0xCB2BD6EA, 0x00000000, 0x90C20EF9, 0x00000000)
aswSnx.sys Address 90C20EF9 base at 90C150000 DateStamp 4C865205
I'm using the "new" sandbox driver.

[pk]

Unfortunately, your aswSnx.sys was replaced by original driver:

DateStamp 4C865205 => Sep 07
DateStamp 4C8FB2DB => Sep 14 (336 896 bytes)

avast shouldn't replace the original driver if you disable auto program update feature

[pk]

...just wanted to add that even if you disable auto program update feature, you wouldn't miss any new upcoming avast beta builds, because it's always published on avast forum

[Lisandro]

Thanks pk. Need to do the trick all over again and set the updates to manual.

[Lisandro]

Doesn't work this time...

Code: [Select]

Microsoft Windows [versão 6.1.7600]
Copyright (c) 2009 Microsoft Corporation. Todos os direitos reservados.

C:\Windows\system32>fltmc load aswsnx

Carregamento falhou com erro: 0x80070241
Razão de erro não pôde ser traduzida, Código de mensagem: 0x80070241, Razão: 7a

Loading failed with error: 0x80070241
Reason for the error can't be translated, message code: 0x80070241, Reason: 7a