Author Topic: BSOD from aswsp.sys  (Read 20553 times)

0 Members and 1 Guest are viewing this topic.

bakantor

  • Guest
BSOD from aswsp.sys
« on: August 05, 2010, 01:11:06 AM »
I got a BSOD from aswsp.sys after installing Avast Internet Security today on a Vista PC. I also had many BSODs (20-30 over a month or so) on a Win XP SP3 machine that seemed to happen at random times and resolved with removal of Avast Free. Any ideas? Attached is the screenshot from the Vista BSOD.
Thanks!

Further info is below:
Problem signature:
  Problem Event Name:   BlueScreen
  OS Version:   6.0.6000.2.0.0.256.6
  Locale ID:   1033

Additional information about the problem:
  BCCode:   50
  BCP1:   8C250038
  BCP2:   00000000
  BCP3:   8C636598
  BCP4:   00000000
  OS Version:   6_0_6000
  Service Pack:   0_0
  Product:   256_1

Files that help describe the problem:
  C:\Windows\Minidump\Mini080410-01.dmp
  C:\Windows\Temp\WER-61807-0.sysdata.xml
  C:\Windows\Temp\WER6518.tmp.version.txt

Read our privacy statement:
  http://go.microsoft.com/fwlink/?linkid=50163&clcid=0x0409

Windows NT  Version 6.0 Build: 6000
Product (0x6): Windows Vista (TM) Business
Edition: Business
BuildString: 6000.17021.x86fre.vista_gdr.100218-0019
Flavor: Multiprocessor Free
Architecture: X86
LCID: 1033


Jelon

  • Guest
Re: BSOD from aswsp.sys
« Reply #1 on: August 09, 2010, 07:08:15 PM »
Here I go with the same problem.

Windows XP Home Edition 5.01.2600 SP3
Laptop: Compaq Presario R4000 series
Chipset: ATI RS480M
Processor: AMD Athlon 64+ 3800+ @2400Mhz
RAM: 1GB DDR (2x512 DDR-SDRAM)
Graphic: ATI Radeon XPress 200M

Avast! version: 5.0.594

What happens is that every second re-start or start up is causing the BSoD. Every time the possible cause is listed as aswSP.sys. After it goes through the complete scan or I just turn the power off - second start goes smoothly. BlueScreen shows up at the logon screen. Recently I have tried to install the Cool I Cam tablet drivers but with no luck so un-installed every thing what I have tried to install.
Below is the minidump debug:

Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\Minidump\Mini080910-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows XP Kernel Version 2600 (Service Pack 3) UP Free x86 compatible
Product: WinNt
Built by: 2600.xpsp_sp3_gdr.100216-1514
Machine Name:
Kernel base = 0x804d7000 PsLoadedModuleList = 0x80554040
Debug session time: Mon Aug  9 14:16:37.093 2010 (GMT+2)
System Uptime: 0 days 0:01:12.640
Loading Kernel Symbols
...............................................................
................................................................
.................
Loading User Symbols
Loading unloaded module list
......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000007E, {c0000005, 805b6be2, a55329e8, a55326e4}

Unable to load image \SystemRoot\System32\Drivers\aswSP.SYS, Win32 error 0n2
*** WARNING: Unable to verify timestamp for aswSP.SYS
*** ERROR: Module load completed but symbols could not be loaded for aswSP.SYS
*** WARNING: Unable to verify timestamp for aksfridge.sys
*** ERROR: Module load completed but symbols could not be loaded for aksfridge.sys
Probably caused by : aswSP.SYS ( aswSP+8c94 )

Followup: MachineOwner
---------

kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003.  This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG.  This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG.  This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 805b6be2, The address that the exception occurred at
Arg3: a55329e8, Exception Record Address
Arg4: a55326e4, Context Record Address

Debugging Details:
------------------


OVERLAPPED_MODULE: Address regions for 'aksfridge' and 'Parport.SYS' overlap

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

FAULTING_IP:
nt!ObpCaptureObjectName+c6
805b6be2 f3a5            rep movs dword ptr es:[edi],dword ptr [esi]

EXCEPTION_RECORD:  a55329e8 -- (.exr 0xffffffffa55329e8)
Cannot read Exception record @ a55329e8

CONTEXT:  a55326e4 -- (.cxr 0xffffffffa55326e4)
Unable to read context, Win32 error 0n30

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  DRIVER_FAULT

BUGCHECK_STR:  0x7E

EXCEPTION_STR:  0x0

LAST_CONTROL_TRANSFER:  from 805b6d6f to 805b6be2

STACK_TEXT: 
a5532af4 805b6d6f ba625c00 a5532cdc a5532b78 nt!ObpCaptureObjectName+0xc6
a5532b48 805b105c 856ccd90 ba625c00 ba625c00 nt!ObpCaptureObjectCreateInformation+0x135
a5532b8c 8061b8ea a5532cc4 856ccd90 ba625c00 nt!ObOpenObjectByName+0x62
a5532c88 a7b4bc94 a5532d08 00020019 a5532cc4 nt!NtOpenKey+0x1c8
WARNING: Stack unwind information not available. Following frames may be wrong.
a5532ca4 a545bd3b a5532d08 00020019 a5532cc4 aswSP+0x8c94
a5532ce4 a543735b 84907850 00020019 a5532d08 aksfridge+0x33d3b
a5532d20 a546df28 84907008 00000000 84907b80 aksfridge+0xf35b
a5532d54 8053d658 00000000 00000000 06d8ffb4 aksfridge+0x45f28
a5532d54 ffffffff 00000000 00000000 06d8ffb4 nt!KiFastCallEntry+0xf8
a5532dd4 00000000 00000000 80541e02 a546dee9 0xffffffff


FOLLOWUP_IP:
aswSP+8c94
a7b4bc94 ??              ??

SYMBOL_STACK_INDEX:  4

SYMBOL_NAME:  aswSP+8c94

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: aswSP

IMAGE_NAME:  aswSP.SYS

DEBUG_FLR_IMAGE_TIMESTAMP:  0

STACK_COMMAND:  .cxr 0xffffffffa55326e4 ; kb

FAILURE_BUCKET_ID:  0x7E_aswSP+8c94

BUCKET_ID:  0x7E_aswSP+8c94

Followup: MachineOwner
---------

kd> lmvm aswSP
start    end        module name
a7b43000 a7b6a000   aswSP    T (no symbols)           
    Loaded symbol image file: aswSP.SYS
    Image path: \SystemRoot\System32\Drivers\aswSP.SYS
    Image name: aswSP.SYS
    Timestamp:        unavailable (00000000)
    CheckSum:         00000000
    ImageSize:        00027000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4



Let me know what kind of file will be helpful to check the problem - I am sure I can send it. I am sure that the problem will continue. I have tried to re-install Avast but the problem is still the same.
Hopefully someone will find a solution. I really like the software so keep up the good work.

Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89443
  • No support PMs thanks
Re: BSOD from aswsp.sys
« Reply #2 on: August 09, 2010, 07:23:12 PM »
What is the avast version you are using free/pro/AIS ?

What is the version number, 5.0.594 is the latest ?
If you don't have that version do a manual program update first and see if that resolves the problem.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.6.6121 (build 24.6.9241.848) UI 1.0.809/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Jelon

  • Guest
Re: BSOD from aswsp.sys
« Reply #3 on: August 09, 2010, 08:34:53 PM »
Avast Free Edition - the latest version :) wrote that in previous post ;)

UPDATE: after un-installing the program, system starts-up normally :/ without the BSoD

Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89443
  • No support PMs thanks
Re: BSOD from aswsp.sys
« Reply #4 on: August 09, 2010, 09:10:30 PM »
OK thanks for the update.

Glad that you now have it resolved.

Welcome to the forums.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.6.6121 (build 24.6.9241.848) UI 1.0.809/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Jelon

  • Guest
Re: BSOD from aswsp.sys
« Reply #5 on: August 09, 2010, 09:35:29 PM »
But the problem still remains. I am now working without the Avast! AntiVirus, which I am not really happy off. I would like to keep that, in my opinion, great software. Hopefully there will be a solution for the blue screen issue. I know that was on of the problems in a previous version (not sure but I think it was 4.6 or .8?)

EDIT: Thanks for the welcoms :) I would be glad to help the software makers in any way.
« Last Edit: August 09, 2010, 09:38:20 PM by Jelon »

Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89443
  • No support PMs thanks
Re: BSOD from aswsp.sys
« Reply #6 on: August 09, 2010, 11:00:32 PM »
Sorry I though you had reinstalled it and not just uninstalled.

Try a clean reinstall:
- Download the latest version of avast, 5.0.594 http://www.avast.com/free-antivirus-download and save it to your HDD, somewhere you can find it again (if you didn't save your last download). Use that when you reinstall.

- Download the avast! Uninstall Utility, aswClear5.exe find it here and save it to your HDD (it has uninstall tools for both 4.8 and 5.0).
  • 1. Now uninstall (using add remove programs, if you can't do that (or don't need to having uninstalled) start from the next step), reboot.
  • 2. run the avast! Uninstall Utility from safe mode, first for 4.8 if previously installed and then for 5.0, once complete reboot into normal mode.
  • 3. install the latest version, reboot.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.6.6121 (build 24.6.9241.848) UI 1.0.809/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Jelon

  • Guest
Re: BSOD from aswsp.sys
« Reply #7 on: August 10, 2010, 04:11:55 PM »
Thanks for the advise. As of the first start-up no BSoD showed up :D will update in few days with a report. Thanks again DavidR

Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89443
  • No support PMs thanks
Re: BSOD from aswsp.sys
« Reply #8 on: August 10, 2010, 04:31:42 PM »
You're welcome.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.6.6121 (build 24.6.9241.848) UI 1.0.809/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

bakantor

  • Guest
Re: BSOD from aswsp.sys
« Reply #9 on: August 10, 2010, 04:51:14 PM »
For my issue I am using version 5.0.594 of Avast Internet Security. How should I proceed?

Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89443
  • No support PMs thanks
Re: BSOD from aswsp.sys
« Reply #10 on: August 10, 2010, 05:12:47 PM »
Basically in the same way as in Reply #6 above, if this is a repeat alert try a clean reinstall ensuring you run the uninstall utility for 4.8 also, but for the AIS version.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.6.6121 (build 24.6.9241.848) UI 1.0.809/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Santa

  • Guest
Re: BSOD from aswsp.sys
« Reply #11 on: August 12, 2010, 04:23:39 AM »
I also get the BSOD
latest package, 5.0.594

mine is rather strange tho when it happens.
I load up the yahoo instant messenger, and thats when
the bsod hits. I think its the modules in yahoo that
is causing the problem, but cant be sure.
win xp sp 3
yahoo im is 8.1.0.421
module 8.0.0.1

nothing else so far is causing this to happen.
i was using the 4.8 pro version and bought the
online version today. do i have to de-install,
then reinstall , and if it keeps happening, and
i can no longer use yahoo, then what?
why would the yahoo modules be causing
the BSOD in the first place? i turned it all
off, then ran it, and i still got a bsod.



Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89443
  • No support PMs thanks
Re: BSOD from aswsp.sys
« Reply #12 on: August 12, 2010, 03:29:44 PM »
I would tend to agree about Yahoo instant messenger, but you need to check out the windows even viewer as the others have to get more information.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.6.6121 (build 24.6.9241.848) UI 1.0.809/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

kpstross

  • Guest
Re: BSOD from aswsp.sys
« Reply #13 on: August 12, 2010, 09:02:32 PM »
Same thing happened to me.  About a week after upgrading Avast (free) from v4 to v5 my system started to experience BSOD crashes.  I did not have the tools to analyze the logs at that time, and the system degraded so quickly that it was completely dead before I could determine the culprit. 

Tore it down and tested all of the components to ensure that it was not hardware failure.  Then rebuilt it, formatting the drive, to get a clean install.  Loaded Avast v5 directly from the download, and within a week was back to BSOD crashes, but this time I could see that the first two were caused by aswsp.sys.  After that, the system was unstable and corrupt, so other BSOD started happening.

I'll be reloading this box again from scartch and trying another AV solution to confirm.  I like Avast and hope this gets resolved.  I can attached or post my dmp files and system specs if it will help.

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11865
    • AVAST Software
Re: BSOD from aswsp.sys
« Reply #14 on: August 12, 2010, 11:21:03 PM »
The dump files would certainly be needed to tell anything.
It's possible to upload them to ftp://ftp.avast.com/incoming