Here you go pk. See pic. Who’s blocking it from ejecting?
nmb
avast eh eh…
You are right Tech. What next?
nmb
Indeed I don’t see a solution… I think it’s not the self-defense who will solve this.
Seems to be related to the permanent cache…
But pk is the one to solve this.
Or is it related to sandbox storage?
pk, where are you??
nmb
Oh, yeah, the sandbox…
nmb: thanks for posting that screenshot. I think what might have gone wrong, but I’d like to be sure: when you’ll get the same results in Process Explorer (i.e. System process is holding “aswSnx private storage” handles), could you please execute http://public.avast.com/~kurtin/osrbang.exe, press that harmless button ;D, compress & upload memory.dmp to our ftp? Thanks a lot!
Hello pk,
Ya will do that. Gimme sometime.
nmb
It failed to start and load the driver - in both elevated user rights and low rights.
It could not bang! ;D
nmb
hmmm, interesting… could you please generate kernel dump manually? [rightmost Ctrl+press Scroll Lock twice], see: http://msdn.microsoft.com/en-us/library/ff545499.aspx
Thanks.
Sorry this is a laptop. So no scroll lock 
Any other way?
nmb
See that link, you can redefine Scroll lock.
Define Dump2Key to 0x11, and Scroll lock will be replaced by Q key.
I am not able to do that. Gimme some tool.
nmb
try this version (Vista+ x64): http://public.avast.com/~kurtin/osrbang_x64.exe
This one did crash the system but the dmp file is not available. When I checked the event log viewer, I saw that the crash dump driver could not be loaded. check the pic.
nmb