KMODE_EXCEPTION_NOT_HANDLED Bluescreen aswSP.sys

Avast Business
1

Hey Guy’s

I’ve have a problem with a (brand new) Windows Server 2016 Standard. Mostly on the same time, we got a bluescreen “KMODE_EXCEPTION_NOT_HANDLED”. Avast is Version “18.8.2546, build: 18.8.4084.409”

The Bluescreen appears shortly before the backup process is starting (doing backup with Acronis) → same setup on all Servers which we have, but only with this Server we have problems.


060319-10156-01.dmp	03.06.2019 21:30:10	KMODE_EXCEPTION_NOT_HANDLED	0x0000001e	ffffffff`c0000002	fffff803`0077bad0	ffffd700`29eb6180	ffffd700`29eb6220	aswSP.sys	aswSP.sys+60a38					x64	ntoskrnl.exe+15c940					4	15	14393	679.756	03.06.2019 21:31:36	

053019-7703-01.dmp	30.05.2019 21:30:07	KMODE_EXCEPTION_NOT_HANDLED	0x0000001e	ffffffff`c0000002	fffff803`65525ad0	ffff9001`d8b6b180	ffff9001`d8b6b220	aswSP.sys	aswSP.sys+60a38					x64	ntoskrnl.exe+15c940					4	15	14393	679.996	30.05.2019 21:31:16	

052919-10859-01.dmp	29.05.2019 21:30:25	KMODE_EXCEPTION_NOT_HANDLED	0x0000001e	ffffffff`c0000002	fffff801`6cb15ad0	ffffde81`d0a46180	ffffde81`d0a46220	aswSP.sys	aswSP.sys+60a38					x64	ntoskrnl.exe+15c940					4	15	14393	679.908	29.05.2019 21:32:16	

050819-7906-01.dmp	08.05.2019 21:29:53	KMODE_EXCEPTION_NOT_HANDLED	0x0000001e	ffffffff`c0000002	fffff800`b4195ad0	ffffa981`8f52d180	ffffa981`8f52d220	aswSP.sys	aswSP.sys+60a38					x64	ntoskrnl.exe+15c940					4	15	14393	679.756	08.05.2019 21:30:52

Is there maybe a know issue?

If you need any informations from me, please tell me.

Thanks for supporting!

Best Regards

2

Hi ok6,

can you please upload the dump files (*.dmp) into our FTP server? https://support.avast.com/en-eu/article/FTP-file-upload

Thank you

3

Hi Spec8472

I uploaded the file according to instructions (including the passwort in the instruction).

Best regards

4

Thank you, Avast is not causing your issues. snapman.sys driver (Acronis) is responsible. Most common crash stack is:

00 ffffa9818f52c938 fffff800b425f38b nt!KeBugCheckEx
01 ffffa9818f52c940 fffff800b4203176 nt!KiFatalFilter+0x1f
02 ffffa9818f52c980 fffff800b41daebf nt!KeExpandKernelStackAndCalloutInternal$filt$0+0x16
03 ffffa9818f52c9c0 fffff800b41f3d2d nt!_C_specific_handler+0x9f
04 ffffa9818f52ca30 fffff800b41944a1 nt!RtlpExecuteHandlerForException+0xd
05 ffffa9818f52ca60 fffff800b4195b06 nt!RtlDispatchException+0x421
06 ffffa9818f52d160 fffff800b42b8daa nt!RtlRaiseStatus+0x4e
07 ffffa9818f52d700 fffff80e847e1f9c nt!purecall+0xe
08 ffffa9818f52d730 ffffcb0b13455300 snapman+0x21f9c

5

Thank you for the fast answer. Okay, then I’ll look with the Acronis support to solve the problem. :slight_smile: