BSOD in ASWSP.SYS, Win 7 64bit, Avast 6.0.1125

I’ve now had 2 BSOD’s in ASWSP.SYS. The computer was standing Idle at the time, however last 3 entries in the logs before each one was

1) The start type of the Windows Modules Installer service was changed from demand start to auto start.
2) The start type of the Windows Modules Installer service was changed from auto start to demand start.
3) The Windows Modules Installer service entered the stopped state.
4) BSOD - No entries till restart

I have the Minidumps for both and the full Memory dump (78mb Rar) for the lastest one if needed.

This is Avast Pro Licenced for 10 users version.

I got the same, no Idea whats going, windows also tells me now to activate my Avast, but it was already activated, the time.
Crash Time: 17-Jun-11 11:41:41 AM
Bug Check String
PAGE_FAULT_IN_NOPAGED_AREA
Bug Check Code
0x00000050

Caused By Driver
aswSP.SYS
Caused By Adresss
aswSP.SYS+2925c

Can you zip and upload the memory.dump file to the ftp server of avast?

Uploading now, Adsl speed says about 6 weeks remaining (well 30 mins lol)

Okay that’s uploaded, Good luck sifting out the problem :slight_smile:

I just checked my Windows “Services” by typing in Services above the Windows world ball. I then clicked on Services and scrolled down to “Windows Module Installer” Under Startup Type it says “Manual”

It appears that somehow your WMI startup command was altered, maybe by Malware. According to your log above your Windows Module Installer is not correct under Startup Type and this could be causing the problem based upon what your log is showing.

If you can see the F8 key option on the screen after you start your computer you can use it to restore the Last Known Good Configuration. If you can see it then reboot and tap the F8 key until you get to the screen which shows restoring Windows Last Known Good Configuration. More detailed instructions on link

http://windows.microsoft.com/en-US/windows-vista/Using-Last-Known-Good-Configuration

If you can restore the Last Known Good Configuration check your Windows Services to make sure that Windows Module Installer is set to Manual.

If you are able to boot to your desktop after restoring the LKGC then first thing run Windows Updates from the Control Panel. Then update Avast.

Do a Boot Scan with Avast. I would also suggest scanning your computer using Malwarebytes, SAS, McAfee Stinger and MSSS (Microsoft Standalone Systems Sweeper) if have a USB thumb drive you can afford to reformat or a CD on which to burn it. You can find all of the aforementioned using Google, Bing etc.

Here is more about WMI from Black Viper

Default Description

Enables installation, modification, and removal of Windows updates and optional components. If this service is disabled, install or uninstall of Windows updates might fail for this computer.

Go to link to read the entire article

http://www.blackviper.com/wiki/Windows_Modules_Installer