Blue screen with aswsnx.sys

Avast Free Antivirus / Premium Security
1

Hello,
Excuse me for my english.
Since few days, my computer (Windows XP SP3) crashes when I am not working on it. Generaly during the night. The file concerned by the error message is “aswsnx.sys”.
My avast version is 6.0.1125.

Is someone could help me ?

Thanks

2

that’s the sandbox driver… try to de-activate auto-sandbox and reboot. Might not be enough to solve your problem as the driver will keep loading (the basic sandbox component can’t be dismissed).

3

Please upload a few latest minidump files (from C:\Windows\Minidump) to ftp://ftp.avast.com/incoming (and post here the filename).
Thanks.

4

It is done. The name is : Rdevel_Mini070411-01.dmp
I hope it is the good file.

Thanks a lot

5

I de-activated auto-sandbox few days ago but it is always the same.

Best regards

6

Hello,
A new crash this morning. It seems that it is when I “wake up” my computer. The dmp file was created this morning at 8:41 when I went back in my office and moved my mouse.

The file name on your ftp server is : Rdevel_Mini070511-01.dmp

Thanks

7

Please try updating to the latest version, 6.0.1203.
There are some improvements in this version that hopefully address your issue.

Thanks
Vlk

8

yes, this bug is fixed in 6.0.1203

9

It is good since 2 days with 6.0.1203.

Thanks a lot.

10

Hi all,

My Windows XP SP3 machine keeps crashed even with the newest Avast (6.0.1203)

Probably caused by : aswSnx.SYS ( aswSnx+155c4 )

Followup: MachineOwner

0: kd> !analyze -v

ADDITIONAL_DEBUG_TEXT: Use '!findthebuild' command to search for the target build information. If the build information is available, run '!findthebuild -s ; .reload' to set symbol path and load symbols.

MODULE_NAME: aswSnx

FAULTING_MODULE: 804d7000 nt

DEBUG_FLR_IMAGE_TIMESTAMP: 4e11a5ca

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at “0x%08lx” referenced memory at “0x%08lx”. The memory could not be “%s”.

FAULTING_IP:
nt+98b1c
8056fb1c 8b4804 mov ecx,dword ptr [eax+4]

TRAP_FRAME: ef4f5818 – (.trap 0xffffffffef4f5818)
ErrCode = 00000000
eax=00000000 ebx=001f0003 ecx=00000000 edx=e26ed3d0 esi=e26ed3ac edi=85576020
eip=8056fb1c esp=ef4f588c ebp=ef4f58a8 iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
nt+0x98b1c:
8056fb1c 8b4804 mov ecx,dword ptr [eax+4] ds:0023:00000004=???
Resetting default scope

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x8E

LAST_CONTROL_TRANSFER: from 8056fb94 to 8056fb1c

STACK_TEXT:
WARNING: Stack unwind information not available. Following frames may be wrong.
ef4f58a8 8056fb94 e26ed3a0 ef4f58c0 000f001f nt+0x98b1c
ef4f58c4 805742f0 e26ed3a0 ef4f58f8 00000000 nt+0x98b94
ef4f5908 805744b9 e315da78 000f001f 00000001 nt+0x9d2f0
ef4f59fc 8056dc67 e315da78 00000000 000f001f nt+0x9d4b9
ef4f5a64 f38955c4 010ff918 000f001f 00000000 nt+0x96c67
ef4f5ce0 f38958cb 000f001f 00000000 00000013 aswSnx+0x155c4
ef4f5d10 f39372eb 010ff918 000f001f 00000000 aswSnx+0x158cb
ef4f5d40 804dd99f 010ff918 000f001f 00000000 aswSP+0x1f2eb
ef4f5d64 7c90e514 badb0d00 010ff8e4 ef4f5d98 nt+0x699f
ef4f5d68 badb0d00 010ff8e4 ef4f5d98 ef4f5dcc 0x7c90e514
ef4f5d6c 010ff8e4 ef4f5d98 ef4f5dcc 00000000 0xbadb0d00
ef4f5d70 ef4f5d98 ef4f5dcc 00000000 00000000 0x10ff8e4
ef4f5d74 ef4f5dcc 00000000 00000000 00000000 0xef4f5d98
ef4f5d98 00000000 7c90e514 010ff914 00000000 0xef4f5dcc

STACK_COMMAND: kb

FOLLOWUP_IP:
aswSnx+155c4
f38955c4 ?? ???

SYMBOL_STACK_INDEX: 5

SYMBOL_NAME: aswSnx+155c4

FOLLOWUP_NAME: MachineOwner

IMAGE_NAME: aswSnx.SYS

BUCKET_ID: WRONG_SYMBOLS

Followup: MachineOwner
---------

11

@lvt, please send me a couple of the latest minidumps from \Windows\Minidump folder to kurtin@avast.com, thanks.

12

Message sent, thank you !