BSOD on Startup with Avast 6.0

Avast Free Antivirus / Premium Security
1

I tried the link to upload the file, it doesn’t work, nor I know how to zip it. I use the program ‘Blue Screen View’ and I copied it all from it.

Here it is:

Dump File: Mini030211-01.dmp

Crash Time: 3/2/2011 10:00:13 PM

Bug Check String: DRIVER_IRQL_NOT_LESS_OR_EQUAL

Bug Check Code: 0x100000d1

Parameter 1: 0x00000000

Parameter 2: 0x00000002

Parameter 3: 0x00000000

Parameter 4: 0x901ace38

Caused By Driver: hal.dll

Caused By Address: hal.dll+3c39

File Description: Hardware Abstraction Layer DLL

Product Name: Microsoft® Windows® Operating System

Company: Microsoft Corporation

File Version: 6.0.6002.18005 (lh_sp2rtm.090410-1830)

Processor: 32-bit

Full Path: C:\Windows\MiniDump\Mini030211-01.dmp

Processors Count: 2

Major Version: 15

Minor Version: 6002

Dump File Size: 140,967

On the bottom of the BSOD, it showed: aswSP.SYS…This was on the actual BSOD.

Thanks in advance.

2

Hello RB123 and welcome to the forum.

  1. What version of Avast did you install?
  2. What product of Avast did you install? Free, Pro, AIS?
  3. What other security software do you currently have or did you have in the past on this machine including:

  • Antivirus (AV)

  • Firewall (FW)

  • Trial versions of AV, FW and other security programs

  • Other security software

  • If they were in the past, how did you remove them (the vendor’s uninstaller’s tool or another way)?

  1. If you had a previous version of Avast on your machine, did you do an upgrade to this version of Avast or a clean install?
3

Hi,

  1. I have 6.0.1000

  2. Free

  3. I always had Avast Free…Windows Firewall…MB-Free Version…SAS-Free Version…Spywareblaster

  4. I uninstalled the previous Avast and I did a clean install with the new 6.0

This is the 3rd or 4th BSOD that I had from Avast. When the BSOD came today, it showed that aswSP.SYS on the bottom of it.

With the info i provided you from ‘Blue Screen View’ what do you see?

Also, This happened on boot up.

4

You never had a problem with the prior version of Avast?

When you have scanned for malware, you have come out clean?

5

Sorry forgot to mention it, Yes I had the same problem with the prior Avast. It happened about 2 times with the 5.1 Avast and now the first time with the 6.0 Yes, my system is clean.

6

Then it is not specific to Avast v.6. I’d like you to submit a mini-dump file.

Here is additional information on how to invoke a memory dump file: http://support.avast.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=71.

Please, zip and upload the C:\Windows\Memory.dmp file to this anonymous ftp server and name it uniquely: ftp.avast.com/incoming. Avast will analyze it and respond back to you in this thread or to your email.

7

Ok, I will try.

8

OK. Avast will analyze your mini-dump file to figure out what is going on. Check back in this thread or if they email you respond back here to let us know the outcome. Thank you.

9

Actually I still have the minidump already, problem is what do i open it with?

10

Do you have a new mini-dump while you are having the problem with this Avast version? That’s what you need. Follow the directions to the link I gave you.

11

Yes, But it won’t let me open it. What program should I use to open it with?

12

You mean you can’t open the file to zip it? It is not a file that you can read; it is only a file that you can send to Avast.

13

I tried to open it with wordpad, and it’s got all these crazy numbers. Also, the link you gave me doesn’t work.

14

The link works for me.

Can you run an MBAM (Malwarebytes) scan:

Check your computer for malware with Malwarebytes’ Anti-Malware (MBAM).
· Download free http://www.malwarebytes.org/ (the blue button) for an on-demand scanner.
· Double Click mbam-setup.exe to install the application.
· After install, click update so you have latest database before scanning.
· Under Settings:
o General: Automatically Save File After Scan Completes is checked off
o Scanner Settings: Check all boxes
o Updater: Download and install update if available is checked off
· Once the program has loaded, select “Perform Quick Scan”, then click Scan.
· The scan may take some time to finish, so please be patient.
· When the disinfection scan is complete, a log will appear in Notepad and you may be prompted to Restart. (See Extra Note).
· Click the “remove selected” button to quarantine anything found. You will find the infection details under the Quarantine tab.
· The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
· Copy & Paste the entire report in your next reply.

15

Here are the rest of my minidump files:

Crash List

Created by using BlueScreenView
Filename Address In Stack From Address To Address Size Time Stamp Time String Product Name File Description File Version Company Full Path
aswFsBlk.SYS 0x90b52000 0x90b54b00 0x00002b00 0x4d651fbe 2/23/2011 8:54:54 AM avast! Antivirus System avast! File System Access Blocking Driver 6.0.999.0 AVAST Software C:\Windows\system32\drivers\aswFsBlk.SYS

Crash List

Created by using BlueScreenView
Filename Address In Stack From Address To Address Size Time Stamp Time String Product Name File Description File Version Company Full Path
aswMonFlt.sys 0x90b1a000 0x90b52000 0x00038000 0x4d651fc5 2/23/2011 8:55:01 AM avast! Antivirus System avast! File System Minifilter for Windows 2003/Vista 6.0.999.0 AVAST Software C:\Windows\system32\drivers\aswMonFlt.sys

Crash List

Created by using BlueScreenView
Filename Address In Stack From Address To Address Size Time Stamp Time String Product Name File Description File Version Company Full Path
aswRdr.SYS 0x9009a000 0x9009e200 0x00004200 0x4d651fcd 2/23/2011 8:55:09 AM avast! Antivirus System avast! TDI RDR Driver 6.0.999.0 built by: WinDDK AVAST Software C:\Windows\system32\drivers\aswRdr.SYS

Crash List

Created by using BlueScreenView
Filename Address In Stack From Address To Address Size Time Stamp Time String Product Name File Description File Version Company Full Path
aswSnx.SYS 0x8fd81000 0x8fddf000 0x0005e000 0x4d652035 2/23/2011 8:56:53 AM avast! Antivirus System avast! Virtualization Driver 6.0.999.0 AVAST Software C:\Windows\system32\drivers\aswSnx.SYS

Crash List

Created by using BlueScreenView
Filename Address In Stack From Address To Address Size Time Stamp Time String Product Name File Description File Version Company Full Path
aswSP.SYS aswSP.SYS+1a623 0x90192000 0x901d9880 0x00047880 0x4d65202b 2/23/2011 8:56:43 AM avast! Antivirus System avast! self protection module 6.0.999.0 AVAST Software C:\Windows\system32\drivers\aswSP.SYS

Crash List

Created by using BlueScreenView
Filename Address In Stack From Address To Address Size Time Stamp Time String Product Name File Description File Version Company Full Path
aswTdi.SYS 0x90034000 0x9003df00 0x00009f00 0x4d651ff4 2/23/2011 8:55:48 AM avast! Antivirus System avast! TDI Filter Driver 6.0.999.0 built by: WinDDK AVAST Software C:\Windows\system32\drivers\aswTdi.SYS

16

MBAM:

Malwarebytes’ Anti-Malware 1.50.1.1100
www.malwarebytes.org

Database version: 5940

Windows 6.0.6002 Service Pack 2
Internet Explorer 7.0.6002.18005

3/3/2011 2:29:03 AM
mbam-log-2011-03-03 (02-29-03).txt

Scan type: Quick scan
Objects scanned: 149273
Time elapsed: 3 minute(s), 25 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

17

Can you zip that file and send it to the link quoted above? It will go to Avast. This is the Avast forum.

18

I listed all my minidump files. The link doesn’t work for me. All the files I posted on page 1, Also, I posted the MBAM scan too.

19

MBAM is clean…good.

I notice you are using IE7…not good since there are many security holes. You really should upgrade to at least IE8. You may also want to check the rest of your software with free Secunia Sofware Inspector http://secunia.com/vulnerability_scanning/personal/ which will give you the vendor’s download link if you need to patch or upgrade something. Most of us here scan our machines weekly since software changes so often.

20

To run MBAM, you need to update prior to running a scan every time. The fact that you cannot see a link is a problem. Have you tried a different browser to see if you can see the links I provided?