BSOD avast5 free

[jprofic]

Hello, I have the following problem:
During setup of avast5 free antivirus around stage "Finishing install" (assuming here as I was installing Russian version) OS crashes with BSOD PAGE_FAULT_IN_NONPAGED_AREA. After that during every boot this same BSOD repeats. Only booting "previous known good configuration" helps.
Tried to install avast 4.8 home edition with same result: BSOD on every boot.
OS is Windows XP SP2 Russian. This computer had another antivirus running previously (Kaspersky Internet Security 2010), which had expired and was uninstalled. This antivirus worked without any problems.
As possible culprit I can flag:
CryptoPro CSP (crypt module implementing state standard GOST cryptoalgorithm)
ruToken driver (eToken type dongle driver)
I have minidump (88k) and FULL memory dump (around 315M in zip-archive, 0.9G unpacked). Kernel only dump cannot be obtained as computer: hanged, rebooted, showed BSOD but did not write dump. Where can I send them?
If more information is needed, I'll provide what I can.
Thanks in advance.

[pk]

send me the minidump to kurtin@avast.com
thanks

[jprofic]

E-mail is sent with the link to this thread and the minidump.

[pk]

I've seen this bug before, but I wasn't exactly sure what's wrong there - I'd love to get the memory dump.
Please open our FTP server ftp://ftp.avast.com and navigate to the /incoming folder. Please note that you have write-only rights in this directory, so you will not see any content nor your uploaded file.

[jprofic]

Uploaded file AvastDump.zip
Inside is full memory dump and minidump.

[pk]

thanks for memory dump
it's OS bug (memory overflow), maybe it's fixed in later OSes... CryptoPro loads a dll module and this request is handled by avast, then we ask OS for an additional info, but OS rewrites some portions of memory it doesn't own; we've already seen this problem with other software in past; this will be fixed in next version - for now, please stop behavior blocker, it should help

[jprofic]

Unfortunately disabling Behavior shield did not help.
I tried to install only Standard, Web and Network shields with all other shields disabled, but got same BSOD in "Finishing install" stage.
I also found on this PC an unrecognized (and unused) Bluetooth stack which I cannot uninstall: it aborts with some weird error message. Can it be the cause?
Unfortunately I can't uninstall CryptoPro to check if it is the real culprit as owner of this PC has neither installation source nor valid serial key for it.

[scythe944]

Have you tested your memory recently?

I know PK is a programmer and knows better than I do, but if you have other weird problems it could be why.

Give MemtestX86 or Windows Memory Diagnostics a shot if you get some time.

[jprofic]

Yes, I ran memtest86+ on this PC recently: one-two months ago. It did not report any problems.
Moreover there are currently only two problems known to me with it: avast BSOD and Bluetooth stack uninstall. I called message weird because it says something like "Cannot uninstall: file not found" with no mention of filename that cannot be found. This same PC had previously other antivirus solution for one year with no problems.
Thus, I don't think that problem is with hardware.

[scythe944]

Alrighty then.  Just checkin'.

With the bluetooth stack, you might try removing the drivers with the Windows Installer cleanup utility msizap, or maybe even revo uninstaller.  Or are you trying to remove the device drivers from device manager?

[pk]

jprofic: could you please send me the new minidump? thanks.

[jprofic]

scythe944: I tried to uninstall from "Add or remove software" applet from "Control panel".
Thanks for the info, I'll give it a try if it'll become necessary. I currently would prefer a solution without need to uninstall the Bluetooth stack.

pk: I currently don't have any new MD. I can try to generate some tomorrow. Will the full memory dump be needed?

[pk]

oops, I made a mistake - disabling behavior shield will not help.
you need to disable aswsp.sys driver completely: set Start=4 in "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\aswSp" (you need to disable self protection in avast settings page -> troubleshoot). This will help you, but it will also disable self-protection and behavior shield. After next program update you can set Start value to the original value.

...or disable "CryptoPro CSP" tool