BSOD with several Chrome windows, error 3B (C0000005, ...

I've been getting this error for a couple of months, over 20 times in all. The two common situations in which it usually happens are:
1) Browsing in Chrome, particularly when there are many windows and tabs open.
2) While computer is idle.
Except for the very first time this happened, it points to file aswSnx.sys, address FFFFF8800????AD1, where the ???? can vary

I attach the SFdebug file.

Haakon

All of the crashes I saw point to Avast as the culprit. Looking at the module in particular, it's up to date, but it's still the cause nonetheless.

fffff880`03e87000 fffff880`03f88000 aswSnx
Loaded symbol image file: aswSnx.sys
Image path: \??\C:\Windows\system32\drivers\aswSnx.sys
Image name: aswSnx.sys
Timestamp: Tue Jan 21 11:11:09 2014 (52DEAA2D)
CheckSum: 000FECA1
ImageSize: 00101000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

Personally, I wouldn't use Avast. If you have to run antivirus (I don't run any) then use something that has hundreds of millions of engineering dollars behind it. Such as McAfee or Symantec. I know these comments will likely get me a lot of heat, but they're just my opinion.

If you want to post links to some full memory dumps I'd be happy to look further to see if another driver might be stepping on top of the Avast driver. As it is right now, some action in user mode invokes a call to aswSnx.sys (likely through services.exe) which results in an unrecoverable exception.

It's this instruction here that causes the bugcheck:

aswSnx+0x2cad1:
fffff880`040f7ad1 f30f6f01 movdqu xmm0,xmmword ptr [rcx] ds:00000000`17de0000=????????????????????????????????

Unfortunately the code referenced is paged out.

Thanks so much peebee for looking into this.

Having had various problems with viruses (and other critters) over the years, I don't feel that no antivirus is an option. I certainly am not wedded to Avast, but it seems that there has to be more to the story, or lots of people with a similar setup (whatever that consists of) would be getting the same problem.

I'll set up the computer for a full dump. In the meantime fwiw here's a kernel dump:
https://www.dropbox.com/s/p8cxql7tmvt7mi7/MEMORY.DMP

Actually, I can't set it up for a full dump. Apparently I have too much memory (6 GB).

I understand not wanting to part from your AV. Many people share the same feelings. I'm just rather old school in that I don't feel AV is necessary if you take reasonable steps to prevent getting infected. Such as not using JRE, Flash, Acrobat, etc. and not downloading questionable material. And personally, I absolutely hate the performance penalty of running AV as well. Most people need it though.

As for the full memory dump, let's look at the kernel dump first.

I looked at your kernel dump and saw very similar results. I was able to look at a few additional areas but they didn't appear to have any signs of concern. The instruction that's causing the crash is consistent and is within a function of the aswsnx.sys driver. The function is being invoked by something in user mode though so a full dump is going to be required to further analyze this problem. Here's a little of what I'm looking at:

Code:

aswSnx+0x2c9cc:
fffff880`03e989cc 4c8bdc          mov     r11,rsp
fffff880`03e989cf 49895b08        mov     qword ptr [r11+8],rbx
fffff880`03e989d3 49897310        mov     qword ptr [r11+10h],rsi
fffff880`03e989d7 49897b20        mov     qword ptr [r11+20h],rdi
fffff880`03e989db 4d894318        mov     qword ptr [r11+18h],r8
fffff880`03e989df 4154            push    r12
fffff880`03e989e1 4883ec60        sub     rsp,60h
fffff880`03e989e5 498bf8          mov     rdi,r8
fffff880`03e989e8 8bda            mov     ebx,edx
fffff880`03e989ea 488bf1          mov     rsi,rcx
fffff880`03e989ed 488b842490000000 mov     rax,qword ptr [rsp+90h]
fffff880`03e989f5 498943b8        mov     qword ptr [r11-48h],rax
fffff880`03e989f9 ff1581330b00    call    qword ptr [aswSnx+0xdfd80 (fffff880`03f4bd80)]
fffff880`03e989ff 448be0          mov     r12d,eax
fffff880`03e98a02 89442430        mov     dword ptr [rsp+30h],eax
fffff880`03e98a06 85c0            test    eax,eax
fffff880`03e98a08 0f88fc010000    js      aswSnx+0x2cc0a (fffff880`03e98c0a)
aswSnx+0x2ca0e:
fffff880`03e98a0e ff159caf0600    call    qword ptr [aswSnx+0x979b0 (fffff880`03f039b0)]
fffff880`03e98a14 3c01            cmp     al,1
fffff880`03e98a16 0f85ee010000    jne     aswSnx+0x2cc0a (fffff880`03e98c0a)
aswSnx+0x2ca1c:
fffff880`03e98a1c 83fb01          cmp     ebx,1
fffff880`03e98a1f 0f85e5010000    jne     aswSnx+0x2cc0a (fffff880`03e98c0a)
aswSnx+0x2ca25:
fffff880`03e98a25 48c744244070020000 mov   qword ptr [rsp+40h],270h
fffff880`03e98a2e 488364243800    and     qword ptr [rsp+38h],0
fffff880`03e98a34 ff1576af0600    call    qword ptr [aswSnx+0x979b0 (fffff880`03f039b0)]
fffff880`03e98a3a 84c0            test    al,al
fffff880`03e98a3c 751a            jne     aswSnx+0x2ca58 (fffff880`03e98a58)
aswSnx+0x2ca3e:
fffff880`03e98a3e 41b8536e7820    mov     r8d,20786E53h
fffff880`03e98a44 488b542440      mov     rdx,qword ptr [rsp+40h]
fffff880`03e98a49 8bcb            mov     ecx,ebx
fffff880`03e98a4b ff15ffaf0600    call    qword ptr [aswSnx+0x97a50 (fffff880`03f03a50)]
fffff880`03e98a51 4889442438      mov     qword ptr [rsp+38h],rax
fffff880`03e98a56 eb2c            jmp     aswSnx+0x2ca84 (fffff880`03e98a84)
aswSnx+0x2ca58:
fffff880`03e98a58 c744242804000000 mov     dword ptr [rsp+28h],4
fffff880`03e98a60 c744242000100000 mov     dword ptr [rsp+20h],1000h
fffff880`03e98a68 4c8d4c2440      lea     r9,[rsp+40h]
fffff880`03e98a6d 4533c0          xor     r8d,r8d
fffff880`03e98a70 488d542438      lea     rdx,[rsp+38h]
fffff880`03e98a75 4883c9ff        or      rcx,0FFFFFFFFFFFFFFFFh
fffff880`03e98a79 ff15f9aa0600    call    qword ptr [aswSnx+0x97578 (fffff880`03f03578)]
fffff880`03e98a7f 488b442438      mov     rax,qword ptr [rsp+38h]
aswSnx+0x2ca84:
fffff880`03e98a84 4885c0          test    rax,rax
fffff880`03e98a87 0f847d010000    je      aswSnx+0x2cc0a (fffff880`03e98c0a)
aswSnx+0x2ca8d:
fffff880`03e98a8d 488364242000    and     qword ptr [rsp+20h],0
fffff880`03e98a93 448b4c2440      mov     r9d,dword ptr [rsp+40h]
fffff880`03e98a98 4c8bc0          mov     r8,rax
fffff880`03e98a9b ba02000000      mov     edx,2
fffff880`03e98aa0 488bce          mov     rcx,rsi
fffff880`03e98aa3 ff15d7320b00    call    qword ptr [aswSnx+0xdfd80 (fffff880`03f4bd80)]
fffff880`03e98aa9 8bf0            mov     esi,eax
fffff880`03e98aab 85c0            test    eax,eax
fffff880`03e98aad 0f881b010000    js      aswSnx+0x2cbce (fffff880`03e98bce)
aswSnx+0x2cab3:
fffff880`03e98ab3 488d15464b0b00  lea     rdx,[aswSnx+0xe1600 (fffff880`03f4d600)]
fffff880`03e98aba 488d4c2448      lea     rcx,[rsp+48h]
fffff880`03e98abf e850670c00      call    aswSnx+0xf3214 (fffff880`03f5f214)
fffff880`03e98ac4 85c0            test    eax,eax
fffff880`03e98ac6 0f8802010000    js      aswSnx+0x2cbce (fffff880`03e98bce)
aswSnx+0x2cacc:
fffff880`03e98acc 488b4c2438      mov     rcx,qword ptr [rsp+38h]
fffff880`03e98ad1 f30f6f01        movdqu  xmm0,xmmword ptr [rcx] <---- crash
fffff880`03e98ad5 f30f7f442450    movdqu  xmmword ptr [rsp+50h],xmm0
fffff880`03e98adb ff15cfae0600    call    qword ptr [aswSnx+0x979b0 (fffff880`03f039b0)]
fffff880`03e98ae1 3c01            cmp     al,1
fffff880`03e98ae3 7426            je      aswSnx+0x2cb0b (fffff880`03e98b0b)
aswSnx+0x2cae5:
fffff880`03e98ae5 488b4c2458      mov     rcx,qword ptr [rsp+58h]
fffff880`03e98aea 488b05b7a90600  mov     rax,qword ptr [aswSnx+0x974a8 (fffff880`03f034a8)]
fffff880`03e98af1 483b08          cmp     rcx,qword ptr [rax]
fffff880`03e98af4 761a            jbe     aswSnx+0x2cb10 (fffff880`03e98b10)
aswSnx+0x2caf6:
fffff880`03e98af6 488d542450      lea     rdx,[rsp+50h]
fffff880`03e98afb 488b5c2448      mov     rbx,qword ptr [rsp+48h]
fffff880`03e98b00 488bcb          mov     rcx,rbx
fffff880`03e98b03 ff157fad0600    call    qword ptr [aswSnx+0x97888 (fffff880`03f03888)]
fffff880`03e98b09 eb47            jmp     aswSnx+0x2cb52 (fffff880`03e98b52)
aswSnx+0x2cb0b:
fffff880`03e98b0b 488b4c2458      mov     rcx,qword ptr [rsp+58h]
aswSnx+0x2cb10:
fffff880`03e98b10 0fb7442450      movzx   eax,word ptr [rsp+50h]
fffff880`03e98b15 6685c0          test    ax,ax
fffff880`03e98b18 740f            je      aswSnx+0x2cb29 (fffff880`03e98b29)
aswSnx+0x2cb1a:
fffff880`03e98b1a 0fb7d0          movzx   edx,ax
fffff880`03e98b1d 41b801000000    mov     r8d,1
fffff880`03e98b23 ff1547a70600    call    qword ptr [aswSnx+0x97270 (fffff880`03f03270)]
aswSnx+0x2cb29:
fffff880`03e98b29 488d542450      lea     rdx,[rsp+50h]
fffff880`03e98b2e 488b5c2448      mov     rbx,qword ptr [rsp+48h]
fffff880`03e98b33 488bcb          mov     rcx,rbx
fffff880`03e98b36 ff154cad0600    call    qword ptr [aswSnx+0x97888 (fffff880`03f03888)]
fffff880`03e98b3c eb14            jmp     aswSnx+0x2cb52 (fffff880`03e98b52)
aswSnx+0x2cb52:
fffff880`03e98b52 85f6            test    esi,esi
fffff880`03e98b54 7869            js      aswSnx+0x2cbbf (fffff880`03e98bbf)
aswSnx+0x2cb56:
fffff880`03e98b56 41b001          mov     r8b,1
fffff880`03e98b59 488d15d0110b00  lea     rdx,[aswSnx+0xddd30 (fffff880`03f49d30)]
fffff880`03e98b60 488bcb          mov     rcx,rbx
fffff880`03e98b63 ff1557ad0600    call    qword ptr [aswSnx+0x978c0 (fffff880`03f038c0)]
fffff880`03e98b69 85c0            test    eax,eax
fffff880`03e98b6b 751e            jne     aswSnx+0x2cb8b (fffff880`03e98b8b)
aswSnx+0x2cb6d:
fffff880`03e98b6d 488bcf          mov     rcx,rdi
fffff880`03e98b70 e89fe1fdff      call    aswSnx+0xad14 (fffff880`03e76d14)
fffff880`03e98b75 84c0            test    al,al
fffff880`03e98b77 7446            je      aswSnx+0x2cbbf (fffff880`03e98bbf)
aswSnx+0x2cb79:
fffff880`03e98b79 4c8bc7          mov     r8,rdi
fffff880`03e98b7c 488bd7          mov     rdx,rdi
fffff880`03e98b7f b902000000      mov     ecx,2
fffff880`03e98b84 e88b2cfeff      call    aswSnx+0xf814 (fffff880`03e7b814)
fffff880`03e98b89 eb34            jmp     aswSnx+0x2cbbf (fffff880`03e98bbf)
aswSnx+0x2cb8b:
fffff880`03e98b8b 41b001          mov     r8b,1
fffff880`03e98b8e 488d158b110b00  lea     rdx,[aswSnx+0xddd20 (fffff880`03f49d20)]
fffff880`03e98b95 488bcb          mov     rcx,rbx
fffff880`03e98b98 ff1522ad0600    call    qword ptr [aswSnx+0x978c0 (fffff880`03f038c0)]
fffff880`03e98b9e 85c0            test    eax,eax
fffff880`03e98ba0 751d            jne     aswSnx+0x2cbbf (fffff880`03e98bbf)
aswSnx+0x2cba2:
fffff880`03e98ba2 66833f4e        cmp     word ptr [rdi],4Eh
fffff880`03e98ba6 7217            jb      aswSnx+0x2cbbf (fffff880`03e98bbf)
aswSnx+0x2cba8:
fffff880`03e98ba8 488bcf          mov     rcx,rdi
fffff880`03e98bab e850960300      call    aswSnx+0x66200 (fffff880`03ed2200)
fffff880`03e98bb0 84c0            test    al,al
fffff880`03e98bb2 740b            je      aswSnx+0x2cbbf (fffff880`03e98bbf)
aswSnx+0x2cbb4:
fffff880`03e98bb4 488bd7          mov     rdx,rdi
fffff880`03e98bb7 488bcf          mov     rcx,rdi
fffff880`03e98bba e88d960300      call    aswSnx+0x6624c (fffff880`03ed224c)
aswSnx+0x2cbbf:
fffff880`03e98bbf 488d153a4a0b00  lea     rdx,[aswSnx+0xe1600 (fffff880`03f4d600)]
fffff880`03e98bc6 488bcb          mov     rcx,rbx
fffff880`03e98bc9 e89ec20400      call    aswSnx+0x78e6c (fffff880`03ee4e6c)
aswSnx+0x2cbce:
fffff880`03e98bce ff15dcad0600    call    qword ptr [aswSnx+0x979b0 (fffff880`03f039b0)]
fffff880`03e98bd4 84c0            test    al,al
fffff880`03e98bd6 7512            jne     aswSnx+0x2cbea (fffff880`03e98bea)
aswSnx+0x2cbd8:
fffff880`03e98bd8 ba536e7820      mov     edx,20786E53h
fffff880`03e98bdd 488b4c2438      mov     rcx,qword ptr [rsp+38h]
fffff880`03e98be2 ff1538ae0600    call    qword ptr [aswSnx+0x97a20 (fffff880`03f03a20)]
fffff880`03e98be8 eb20            jmp     aswSnx+0x2cc0a (fffff880`03e98c0a)
aswSnx+0x2cbea:
fffff880`03e98bea 488364244000    and     qword ptr [rsp+40h],0
fffff880`03e98bf0 41b900800000    mov     r9d,8000h
fffff880`03e98bf6 4c8d442440      lea     r8,[rsp+40h]
fffff880`03e98bfb 488d542438      lea     rdx,[rsp+38h]
fffff880`03e98c00 4883c9ff        or      rcx,0FFFFFFFFFFFFFFFFh
fffff880`03e98c04 ff15eea80600    call    qword ptr [aswSnx+0x974f8 (fffff880`03f034f8)]
aswSnx+0x2cc0a:
fffff880`03e98c0a 418bc4          mov     eax,r12d
fffff880`03e98c0d 4c8d5c2460      lea     r11,[rsp+60h]
fffff880`03e98c12 498b5b10        mov     rbx,qword ptr [r11+10h]
fffff880`03e98c16 498b7318        mov     rsi,qword ptr [r11+18h]
fffff880`03e98c1a 498b7b28        mov     rdi,qword ptr [r11+28h]
fffff880`03e98c1e 498be3          mov     rsp,r11
fffff880`03e98c21 415c            pop     r12
fffff880`03e98c23 c3              ret
 
2: kd> dd @rcx <--- register being moved... usermode addresses (can't see what the data is without a full dump)
00000000`072c0000  ???????? ???????? ???????? ????????
00000000`072c0010  ???????? ???????? ???????? ????????
00000000`072c0020  ???????? ???????? ???????? ????????
00000000`072c0030  ???????? ???????? ???????? ????????
00000000`072c0040  ???????? ???????? ???????? ????????
00000000`072c0050  ???????? ???????? ???????? ????????
00000000`072c0060  ???????? ???????? ???????? ????????
00000000`072c0070  ???????? ???????? ???????? ????????

As for getting a full memory dump, you might need to increase your pagefile size so that it's able to capture the entire contents of physical memory? I believe there are a number of causes of why a full dump can't be captured but this is probably a good start.

Thanks for pointing out the code. I actually did some x86 assembly programming eons ago, so it's not totally foreign to me.

I figured out how to do a full dump--just waitin' for the next crash. I'll let you know when it happens.

No problem. I'll check back periodically to see if you post a full crash dump.

Since I had that second crash, I could upload that second full dump too, if it makes any difference. I think there's enough room. Let me know.