Author Topic: WinXP crash with Avast 6.0.1  (Read 13887 times)

0 Members and 1 Guest are viewing this topic.

Grimnir

  • Guest
WinXP crash with Avast 6.0.1
« on: March 14, 2011, 07:39:34 PM »
Hi!

I installed Avast 6 some time ago and I am having problems that I now begin to suspect are related to Avast. The computer reboots every second day up to several times per day. Also, possibly related to this the IMM32.dll file crashes and the USB mouse often stops working so I have to unplug it and plug it in again. The same thing occassionally happens to the keyboard.

Looking at it briefly, the BSOD error messages seemed to refer to the graphics card, bad RAM/Motherboard/Harddrive (irql_not_less_or_equal, product id:768_1 etc).
But looking at the dump files the crashes seem related to two files from Avast 6.0.1, namely aswsp.sys and aswmon2.sys. Going through the dump files with the tool WhoCrashed, I get 10 out of 15 reports referring to these files.

I have Winxp SP3 installed and run Malwarebytes and Superantispyware on this system as well. About a year ago I had a serious infestation of a rootkit virus and I haven't reformatted or reinstalled Windows since, which of course may lead to problems, but the system seems to work well and I have done thourough searches for viruses using multiple tools, both online and installed tools.

Do you have any ideas how to solve this?
_______________________________________________________________

windows version: Windows XP Service Pack 3, 5.1, build: 2600
windows dir: C:\WINDOWS
CPU: GenuineIntel Intel(R) Core(TM)2 Duo CPU E6850 @ 3.00GHz Intel586, level: 6
2 logical processors, active mask: 3
RAM: 2146480128 total
VM: 2147352576, free: 2027925504

« Last Edit: March 14, 2011, 07:42:28 PM by Grimnir »

Grimnir

  • Guest
Re: WinXP crash with Avast 6.0.1
« Reply #1 on: March 14, 2011, 07:49:16 PM »
Not sure if it is related, but in the events log I have warnings regarding W32Time that the computer hasn't been able to synchronise in 49152 seconds. I have now changed the Internet Time to use time.nist.gov instead and that seems to update correctly.

There also appears to be some network related issues referring the service Browser being unable to obtain a list from the master browser.

Grimnir

  • Guest
Re: WinXP crash with Avast 6.0.1
« Reply #2 on: March 14, 2011, 08:28:05 PM »
Forgot to mention that it is the Free version of Avast 6.0.1.

YoKenny

  • Guest
Re: WinXP crash with Avast 6.0.1
« Reply #3 on: March 14, 2011, 10:33:58 PM »

iwathm2002

  • Guest
Re: WinXP crash with Avast 6.0.1
« Reply #4 on: March 19, 2011, 07:33:34 AM »
Hi, I am having the same problem. Just upgraded from Avast 5, which worked perfectly, to 6. Now I am getting these crashes every few days on XP. Just uploaded Mini031911-01.zip

Grimnir

  • Guest
Re: WinXP crash with Avast 6.0.1
« Reply #5 on: March 19, 2011, 09:16:03 AM »
I will be uploading my dump files soon as well. I am currently testing to see what happens when I have Avast disabled. It seems as if I don't get any crashes with it disabled, but I want to make completely sure.

What type of protection are these two files related to: aswsp.sys and aswmon2.sys? Perhaps I can turn off just those two?

Grimnir

  • Guest
Re: WinXP crash with Avast 6.0.1
« Reply #6 on: March 20, 2011, 05:14:51 PM »
Meanwhile...

Here is the report from WhoCrashed.

On Fri 2011-03-18 15:06:20 GMT your computer crashed
crash dump file: C:\WINDOWS\memory.dmp
This was probably caused by the following module: Unknown ()
Bugcheck code: 0xC5 (0xFFFFFFFF9935A65C, 0x2, 0x1, 0xFFFFFFFF8054BFD2)
Error: DRIVER_CORRUPTED_EXPOOL

Bug check description: This indicates that the system attempted to access invalid memory at a process IRQL that was too high.

This appears to be a typical software driver bug and is not likely to be caused by a hardware problem. This might be a case of memory corruption. More often memory corruption happens because of software errors in buggy drivers, not because of faulty RAM modules.

A third party driver was identified as the probable root cause of this system error. It is suggested you look for an update for the following driver: Unknown .

On Mon 2011-03-14 16:20:38 GMT your computer crashed
crash dump file: C:\WINDOWS\Minidump\Mini031411-02.dmp
This was probably caused by the following module: aswsp.sys (aswSP+0x1E449)
Bugcheck code: 0x1000000A (0x4, 0x2, 0x1, 0xFFFFFFFF80535B59)
Error: CUSTOM_ERROR
file path: C:\WINDOWS\system32\drivers\aswsp.sys
product: avast! Antivirus System
company: AVAST Software

description: avast! self protection module
A third party driver was identified as the probable root cause of this system error. It is suggested you look for an update for the following driver: aswsp.sys (avast! self protection module, AVAST Software).


On Mon 2011-03-14 13:36:45 GMT your computer crashed
crash dump file: C:\WINDOWS\Minidump\Mini031411-01.dmp
This was probably caused by the following module: aswmon2.sys (aswMon2+0xA34)
Bugcheck code: 0x100000C5 (0x304C7241, 0x2, 0x1, 0xFFFFFFFF8054B168)
Error: CUSTOM_ERROR
file path: C:\WINDOWS\system32\drivers\aswmon2.sys
product: avast! Antivirus System
company: AVAST Software

description: avast! File System Filter Driver for Windows XP
A third party driver was identified as the probable root cause of this system error. It is suggested you look for an update for the following driver: aswmon2.sys (avast! File System Filter Driver for Windows XP, AVAST Software).


On Sun 2011-03-13 19:37:05 GMT your computer crashed
crash dump file: C:\WINDOWS\Minidump\Mini031311-01.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x64952)
Bugcheck code: 0x10000050 (0xFFFFFFFFF79E8670, 0x0, 0xFFFFFFFF8053B952, 0x0)
Error: CUSTOM_ERROR
file path: C:\WINDOWS\system32\ntoskrnl.exe
product: Operativsystemet Microsoft® Windows®
company: Microsoft Corporation

description: NT:s kernel och system
The crash took place in the Windows kernel. Possibly this problem is caused by another driver which cannot be identified at this time.


On Sat 2011-03-12 10:59:12 GMT your computer crashed
crash dump file: C:\WINDOWS\Minidump\Mini031211-01.dmp
This was probably caused by the following module: aswsp.sys (aswSP+0x1E449)
Bugcheck code: 0x10000050 (0xFFFFFFFFF951AF14, 0x0, 0xFFFFFFFFB7E3072B, 0x0)
Error: CUSTOM_ERROR
file path: C:\WINDOWS\system32\drivers\aswsp.sys
product: avast! Antivirus System
company: AVAST Software

description: avast! self protection module
A third party driver was identified as the probable root cause of this system error. It is suggested you look for an update for the following driver: aswsp.sys (avast! self protection module, AVAST Software).


On Fri 2011-03-11 19:29:45 GMT your computer crashed
crash dump file: C:\WINDOWS\Minidump\Mini031111-02.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x402F6)
Bugcheck code: 0x1000000A (0xFFFFFFFF9953C1F8, 0x2, 0x1, 0xFFFFFFFF805172F6)
Error: CUSTOM_ERROR
file path: C:\WINDOWS\system32\ntoskrnl.exe
product: Operativsystemet Microsoft® Windows®
company: Microsoft Corporation

description: NT:s kernel och system
The crash took place in the Windows kernel. Possibly this problem is caused by another driver which cannot be identified at this time.


On Fri 2011-03-11 13:03:51 GMT your computer crashed
crash dump file: C:\WINDOWS\Minidump\Mini031111-01.dmp
This was probably caused by the following module: aswsp.sys (aswSP+0x1C712)
Bugcheck code: 0x1000008E (0xFFFFFFFFC0000005, 0xFFFFFFFF8053BA38, 0xFFFFFFFFA3D62A68, 0x0)
Error: KERNEL_MODE_EXCEPTION_NOT_HANDLED_M
file path: C:\WINDOWS\system32\drivers\aswsp.sys
product: avast! Antivirus System
company: AVAST Software

description: avast! self protection module

Bug check description: This indicates that a kernel-mode program generated an exception which the error handler did not catch.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
A third party driver was identified as the probable root cause of this system error. It is suggested you look for an update for the following driver: aswsp.sys (avast! self protection module, AVAST Software).



Grimnir

  • Guest
Re: WinXP crash with Avast 6.0.1
« Reply #7 on: March 20, 2011, 05:15:59 PM »
On Sat 2011-03-05 06:26:22 GMT your computer crashed
crash dump file: C:\WINDOWS\Minidump\Mini030511-01.dmp
This was probably caused by the following module: aswsp.sys (aswSP+0x1C712)
Bugcheck code: 0x1000008E (0xFFFFFFFFC0000005, 0xFFFFFFFF8053BA38, 0xFFFFFFFFB320CC08, 0x0)
Error: KERNEL_MODE_EXCEPTION_NOT_HANDLED_M
file path: C:\WINDOWS\system32\drivers\aswsp.sys
product: avast! Antivirus System
company: AVAST Software

description: avast! self protection module

Bug check description: This indicates that a kernel-mode program generated an exception which the error handler did not catch.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
A third party driver was identified as the probable root cause of this system error. It is suggested you look for an update for the following driver: aswsp.sys (avast! self protection module, AVAST Software).


On Fri 2011-03-04 14:51:28 GMT your computer crashed
crash dump file: C:\WINDOWS\Minidump\Mini030411-01.dmp
This was probably caused by the following module: aswsp.sys (aswSP+0x1E109)
Bugcheck code: 0x100000D1 (0xFFFFFFFF997DB8D0, 0x2, 0x1, 0xFFFFFFFFB4464109)
Error: CUSTOM_ERROR
file path: C:\WINDOWS\system32\drivers\aswsp.sys
product: avast! Antivirus System
company: AVAST Software

description: avast! self protection module
A third party driver was identified as the probable root cause of this system error. It is suggested you look for an update for the following driver: aswsp.sys (avast! self protection module, AVAST Software).


On Mon 2011-02-28 13:01:19 GMT your computer crashed
crash dump file: C:\WINDOWS\Minidump\Mini022811-01.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x2BCD8)
Bugcheck code: 0x1000000A (0xFFFFFFFF99753464, 0x1C, 0x1, 0xFFFFFFFF80502CD8)
Error: CUSTOM_ERROR
file path: C:\WINDOWS\system32\ntoskrnl.exe
product: Operativsystemet Microsoft® Windows®
company: Microsoft Corporation

description: NT:s kernel och system
The crash took place in the Windows kernel. Possibly this problem is caused by another driver which cannot be identified at this time.


On Fri 2011-02-25 11:33:35 GMT your computer crashed
crash dump file: C:\WINDOWS\Minidump\Mini022511-01.dmp
This was probably caused by the following module: aswmon2.sys (aswMon2+0x69BF)
Bugcheck code: 0x100000C5 (0xFFFFFFFFF89889B0, 0x2, 0x1, 0xFFFFFFFF8054B10D)
Error: CUSTOM_ERROR
file path: C:\WINDOWS\system32\drivers\aswmon2.sys
product: avast! Antivirus System
company: AVAST Software

description: avast! File System Filter Driver for Windows XP
A third party driver was identified as the probable root cause of this system error. It is suggested you look for an update for the following driver: aswmon2.sys (avast! File System Filter Driver for Windows XP, AVAST Software).


On Thu 2011-02-24 07:47:18 GMT your computer crashed
crash dump file: C:\WINDOWS\Minidump\Mini022411-01.dmp
This was probably caused by the following module: afd.sys (afd+0x10DA9)
Bugcheck code: 0x1000007E (0xFFFFFFFFC0000005, 0xFFFFFFFF805BB496, 0xFFFFFFFFB8503C00, 0xFFFFFFFFB85038FC)
Error: SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M
file path: C:\WINDOWS\system32\drivers\afd.sys
product: Microsoft® Windows® Operating System
company: Microsoft Corporation

description: Ancillary Function Driver for WinSock

Bug check description: This indicates that a system thread generated an exception which the error handler did not catch.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in a standard Microsoft module. Your system configuration may be incorrect. Possibly this problem is caused by another driver on your system which cannot be identified at this time.


On Tue 2011-02-22 12:49:55 GMT your computer crashed
crash dump file: C:\WINDOWS\Minidump\Mini022211-02.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x2BCD8)
Bugcheck code: 0x1000000A (0xFFFFFFFF99A149E4, 0x1C, 0x1, 0xFFFFFFFF80502CD8)
Error: CUSTOM_ERROR
file path: C:\WINDOWS\system32\ntoskrnl.exe
product: Operativsystemet Microsoft® Windows®
company: Microsoft Corporation

description: NT:s kernel och system
The crash took place in the Windows kernel. Possibly this problem is caused by another driver which cannot be identified at this time.


On Tue 2011-02-22 10:37:38 GMT your computer crashed
crash dump file: C:\WINDOWS\Minidump\Mini022211-01.dmp
This was probably caused by the following module: aswmon2.sys (aswMon2+0xA34)
Bugcheck code: 0x19 (0x20, 0xFFFFFFFF887A94C0, 0xFFFFFFFF887A94D8, 0x1A030001)
Error: BAD_POOL_HEADER
file path: C:\WINDOWS\system32\drivers\aswmon2.sys
product: avast! Antivirus System
company: AVAST Software

description: avast! File System Filter Driver for Windows XP

Bug check description: This indicates that a pool header is corrupt.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem. This might be a case of memory corruption. More often memory corruption happens because of software errors in buggy drivers, not because of faulty RAM modules.
A third party driver was identified as the probable root cause of this system error. It is suggested you look for an update for the following driver: aswmon2.sys (avast! File System Filter Driver for Windows XP, AVAST Software).


On Mon 2011-02-21 05:56:09 GMT your computer crashed
crash dump file: C:\WINDOWS\Minidump\Mini022111-01.dmp
This was probably caused by the following module: aswsp.sys (aswSP+0x1D399)
Bugcheck code: 0x100000C5 (0x4, 0x2, 0x1, 0xFFFFFFFF8054B10F)
Error: CUSTOM_ERROR
file path: C:\WINDOWS\system32\drivers\aswsp.sys
product: avast! Antivirus System
company: AVAST Software

description: avast! self protection module
A third party driver was identified as the probable root cause of this system error. It is suggested you look for an update for the following driver: aswsp.sys (avast! self protection module, AVAST Software).


As can be seen, there are quite a few instances relating to Avast. And with Avast disabled I no longer seem to get any crashes.

Omonimo

  • Guest
Re: WinXP crash with Avast 6.0.1
« Reply #8 on: March 20, 2011, 05:25:12 PM »
My story is similar,

http://forum.avast.com/index.php?topic=72460.0

I solved returning to a restore point, and reinstalling ver 5

Alberto

iwathm2002

  • Guest
Re: WinXP crash with Avast 6.0.1
« Reply #9 on: March 21, 2011, 04:37:02 AM »
I uninstalled and have been crash free for a few days. Going back to 5 works too, but you have to assume that Avast would want to fix tis.

SafeSurf

  • Guest
Re: WinXP crash with Avast 6.0.1
« Reply #10 on: March 21, 2011, 07:07:26 AM »
@ Grimnir (and others with this problem),

You need to send a mini-dump file to Avast to analyze the problem so that they can fix it.  Do not post your dump file here in the forum.  Without Avast having information, how are they going to fix it?  It seems to be an XP problem, so the more information they get, the better they can fix the problem.

This is what all of you having the same problem need to do...

Read the information on how to invoke a memory dump file:  http://support.avast.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=71.

Zip and upload the C:\Windows\Memory.dmp file to this anonymous ftp server and name it uniquely: ftp.avast.com/incoming.  Avast will analyze it and respond back to you in this thread or to your email.  Thank you.

Grimnir

  • Guest
Re: WinXP crash with Avast 6.0.1
« Reply #11 on: March 21, 2011, 07:26:52 AM »
Like I said, I will. But I am in the middle of a deadline and have suffered badly from searching for what caused all the BSODs, thinking it was hardware failure. So I won't be crashing my computer intentionally for a couple of days more. Also, I wanted to make sure that it was Avast that caused the BSODs, and with it disabled I have not had any more problems.

Meanwhile, I posted the contents of the dump files to help searching for the cause a little. So I DO understand that the dump files are needed. Thanks for the advise. But this is all I can offer right now. Hopefully someone else has some files to upload sooner. :)

SafeSurf

  • Guest
Re: WinXP crash with Avast 6.0.1
« Reply #12 on: March 21, 2011, 07:34:13 AM »
No problem and I understand.  Do the mini-dump when you get a chance.  Thank you for the update.  :)

Grimnir

  • Guest
Re: WinXP crash with Avast 6.0.1
« Reply #13 on: April 29, 2011, 06:11:15 PM »
This thread seems to be fairly identical.

http://forum.avast.com/index.php?topic=70034.0

Nesivos

  • Guest
Re: WinXP crash with Avast 6.0.1
« Reply #14 on: April 29, 2011, 06:18:03 PM »
Where is DavidR when you need him ;D ;D