This BSOD come again…
COMODO DID NOT SOLVE IT AS THEY HAVE PROMISSED >:(
https://forums.comodo.com/bug-reports-ctm/ctmfltsys-bsods-0x000000f7-with-175-beta-t58907.0.html;msg427463#msg427463
0x00000050 (0xC9190634, 0x00000000, 0x8FE28EF9, 0x00000000)
aswSnx.sys
PAGE_FAULT_IN_NONPAGED_AREA
Is there anything you can do for me pk?
sure, send me your aswSnx.sys driver and run gmer.exe (http://www.gmer.net/#files), go to Modules tab, find aswSnx.sys and tell me its Address value
Well, it does not BSODed yet, so I can get this information. I’ll keep the computer on and test.
The aswSnx.sys address is: 8BCBB000 and size: 364544
I’ll send the file by email for you. By the way, why is it different from the file you can get installing AIS in your computer?
I can reproduce the BSOD with easy.
It always occur when I try to attach a file (screenshot .png file) to the forums while Firefox is sandboxed.
When I try to upload the file, immediately, the computer BSODs.
8BCC6EF9 base at 8BCBB000 DateStamp 4C865205
0x00000050 (0xD2526024, 0x00000000, 0x8BCC6EF9, 0x00000000)
aswSnx.sys
PAGE_FAULT_IN_NONPAGED_AREA
Thanks for the file and address - I was able to find the source line where it crashed; it seems our driver deceived invalid filename request, it should be fixed now.
By the way, why is it different from the file you can get installing AIS in your computer?I use internal avast build, which is usually newer than the official build => BSOD address doesn't match in it.
Many thanks!
Can you give me a new version (internal) of this specific file?
Can I overwrite the one in my computer? Will it pass the check?
pk ???
pk, right now, when I try to access the sandbox expert settings, the computer bsods.
I can’t further test it.
Can you give me an updated driver?
pk… I’m not able to use/test the sandbox…
Hello,
sorry for delay, we (pk/vlk/lukor) are currently out of office.
please download new internal aswSnx version:
x86: http://public.avast.com/~kurtin/snx/01/x86/aswSnx.sys
x64: http://public.avast.com/~kurtin/snx/01/x64/aswSnx.sys
copy them into \Windows\System32\drivers and reboot.
To check if the driver was loaded correctly, execute cmd.exe and type: fltmc and aswSnx must be listed.
If you don’t have right-click context menu, then driver isn’t loaded or GUI wasn’t able to connect with the driver.
New aswSnx.sys driver converts your snx_lconfig.xml file to the format (e.g. all file paths are converted into ??\Volume{xx} guid form). So, if you want to downgrade to old avast version, just delete that file from avast data folder, because old version wouldn’t recognize that file format.
If you get BSOD, just write me BSOD numbers - I’ll be able to find the problematic code without dump.
Failed to load.
I’ve replaced the original aswSnx.sys driver with the new one for sure (answer UAC, etc.).
What should I do?
hard to say now… try to delete both snx_gconfig.xml and snx_lconfig.xml from your avast data folder and reboot…
As a side effect, the storage folder is shown even when OS/hidden files are off.
yes, it’s because aswSnx driver isn’t loaded and therefore it’s not able to hide that folder…
did you try to remove those two files and reboot? did it help?
It does not load it… Why?
I’ve deleted both files but the fltmc command does not return the sandbox driver.
how about “fltmc load aswsnx” command?
do you have any errors in event viewer?
Then it works… See first screenshot.
Event 7026: failed to load driver at initialization. See second screenshot.
Seems that the correct load of this driver was something like the picture.
It’s failing now on each boot.
Seems this make it works after reboot also.
I’m using Firefox sandboxed now, tested the upload of a file, no BSOD.
But, when I open the folder to attach the file (there are a lot of screenshots in that folder), it takes molasses to display the contents. I’m not sure if it is related to sandboxing.
I’ll wait and test a little, then set this issue to “solved”.
Bri (aka hyatt) has the same issue.
I’ve cross referenced both threads.
Seems to be solved.
https://forums.comodo.com/bug-reports-ctm/bsod-t61238.0.html;new#new