Several BSOD, ntoskrnl.exe, aswSP.sys, more.

Gina · 13 May 2015

Hello, I've been having BSOD and can't really figure out what is going on. I have done a bunch of googling and just get more confused, lol. Would like some help. I have a Samsung Chronos Series 7 Model NP700Z7C-S01US.

I have had very long boot times for awhile. I do not reboot or turn off the machine very often, so I'm not sure when or why that could have started. The BSOD just started happening. The only thing I can think of that could have caused it are, installing a WD MyCloud into the networking system, which works fine except when I reboot the computer sometimes I get a notification that the mapped networked drives could not connect and all the mapped drives have a big red x on them until I double-click them, then they are ok. I also tried to add my new Sony HT-CT370 sound bar to bluetooth devices on my laptop so I could listen to the music through the soundbar. Windows reported the driver did not install correctly, and I could not get it to work, so I removed the soundbar. I think the soundbar thing may have been what started it, but not sure. My computer gets a lot of beating though, I install and try out software, it is three years old and never been restored to factory. So anything probably could have messed it up.

------------------------------------------------------------------------------------------------------------------------
Just some quick copy and paste from NirView:

The problem seems to be caused by the following file: aswSnx.sys
DRIVER_VERIFIER_DETECTED_VIOLATION
*** aswSnx.sys - Address 0xfffff88001ea05fb base at 0xfffff88001e77000 DateStamp
0x55364a30
-----------------------------------------------
The problem seems to be caused by the following file: aswSP.sys
MEMORY_MANAGEMENT
*** aswSP.sys - Address 0xfffff880039bb7a0 base at 0xfffff88003959000 DateStamp
0x55364d99
-----------------------------------------------
The problem seems to be caused by the following file: iaStor.sys
DRIVER_IRQL_NOT_LESS_OR_EQUAL
*** iaStor.sys - Address 0xfffff8800124cceb base at 0xfffff8800121f000 DateStamp
0x4ed5a567
------------------------------------------------
The problem seems to be caused by the following file: ntoskrnl.exe
SPECIAL_POOL_DETECTED_MEMORY_CORRUPTION
*** ntoskrnl.exe - Address 0xfffff80002679a40 base at 0xfffff80002607000 DateStamp
0x5507a73c
------------------------------------------------------
The problem seems to be caused by the following file: ntoskrnl.exe
IRQL_NOT_LESS_OR_EQUAL
*** ntoskrnl.exe - Address 0xfffff80002684a40 base at 0xfffff80002612000 DateStamp
0x5507a73c
---------------------------------------------------
The problem seems to be caused by the following file: ntoskrnl.exe
PAGE_FAULT_IN_NONPAGED_AREA
*** ntoskrnl.exe - Address 0xfffff800026c8a40 base at 0xfffff80002656000 DateStamp
0x5507a73c
---------------------------------------------------------------------------------------------------------------

I have uploaded the files required in the pinned post for the forum. Can anyone help me out? I would appreciate it :)

Thanks so much!

Gina

Boozad · 13 May 2015

Welcome to 7F Gina. I'll see if I can help solve your issues for you.

DISK KEEPER

Your DiskKeeper driver is causing issues. It's old and needs updating, check for updates here.

Code:

fffff800`024b8678  fffff880`01032693Unable to load image \SystemRoot\system32\DRIVERS\excsd.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for excsd.sys
*** ERROR: Module load completed but symbols could not be loaded for excsd.sys
 excsd+0x3693

0: kd> lmvm excsd
start             end                 module name
fffff880`0102f000 fffff880`010e5000   excsd    T (no symbols)           
    Loaded symbol image file: excsd.sys
    Image path: \SystemRoot\system32\DRIVERS\excsd.sys
    Image name: excsd.sys
    Timestamp:        Fri Sep 23 23:19:01 2011 (4E7D05D5)
    CheckSum:         000198E2
    ImageSize:        000B6000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

RAID

Are you running a RAID setup? Intel Rapid Storage is causing issues.

Code:

fffff800`024b8868  fffff880`0124d31f iaStor+0x2e31f
fffff800`024b8870  fffffa80`16df5902
fffff800`024b8878  fffffa80`16784410
fffff800`024b8880  fffffa80`16df59c0
fffff800`024b8888  fffff880`0124d31f iaStor+0x2e31f

INTEL WIRELESS

Your Intel Wireless WiFi Link Adaptor driver is being flagged. Again it could do with updating, check here for an updated version.

Code:

fffff800`024b8038  fffff880`1aa7ed10Unable to load image \SystemRoot\system32\DRIVERS\Netwsw00.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for Netwsw00.sys
*** ERROR: Module load completed but symbols could not be loaded for Netwsw00.sys
 Netwsw00+0x33d10

0: kd> lmvm Netwsw00
start             end                 module name
fffff880`1aa4b000 fffff880`1b59d000   Netwsw00 T (no symbols)           
    Loaded symbol image file: Netwsw00.sys
    Image path: \SystemRoot\system32\DRIVERS\Netwsw00.sys
    Image name: Netwsw00.sys
    Timestamp:        Wed May 08 14:45:41 2013 (518A5705)
    CheckSum:         00B070DE
    ImageSize:        00B52000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

AVAST

Avast is causing issues. Uninstall Avast and install MS Security Essentials and MalwareBytes.

Note

Make sure you uncheck the 'Enable Free Trial' box when installing.

Code:

fffff800`024b8018  fffff880`01c4465aUnable to load image \SystemRoot\system32\DRIVERS\aswNdisFlt.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for aswNdisFlt.sys
*** ERROR: Module load completed but symbols could not be loaded for aswNdisFlt.sys
 aswNdisFlt+0x965a

Perform the above steps and test the system for stability.

Gina · 14 May 2015

Hi Boozad, and thank you so much for responding, and taking the time to look at and analyze my problems. :)

Ok, I was totally lost on the Diskeeper thing. However, I found something in my Easy Settings that Samsung gives as part of it's utilities for the laptop. Take a look at the expresscache.png I have attached. The "Use Expresscache" is set to 'off'. Should I set it to 'on'? Should I reset the expresscache? I went to Samsung's site and found the driver but it's from 2012. I cannot find a driver for this on Diskeeper's website.

As for RAID, I have no idea. I looked in device manager and did not see anything about RAID. How would I find out? I have one SATA hard drive and one ssd. I couldn't find anything for Intel Rapid Storage, except there is a driver download at the Samsung site for my model, again from 2012.

I'm trying to figure out the wireless adapter driver. It's a bit confusing because the site says I have a Intel(R) Centrino(R) Advanced-N 6235, but when I look up drivers it's for Bluetooth (?)

I have Malwarebytes Pro already, and actually I have a convo going with Avast at the moment. If they can't figure it out, then I will uninstall. I bought a three PC license with them, and I'd rather try to get it fixed than uninstall at the moment.

Thanks so much! I appreciate the help. What should I do with the ExpressCache thing, and how do I find out about RAID?

Boozad · 14 May 2015

Hi Gina, I can't see a .PNG file attached to your post so I can't comment just yet. I'll have a look into DiskKeeper for you as I've never heard of it myself.

Can you open Control Panel and click on Add/Remove Programs and see if Intel Rapid Storage is listed. You won't have a RAID setup with the drives you have I wouldn't have thought, but to be sure can you open Device Manager, expand Storage Controllers and take a screenshot and upload in your next post.

Avast has caused countless BSODs (as have many other AC suites) so your success with Avast may be unreliable. I can only advise on that point, your choice of AV is completely up to yourself. :)

Gina · 14 May 2015

Hmmm, I uploaded it to the forum. Let me try again :)

Gina · 14 May 2015

And again....

Boozad · 14 May 2015

This could be the cause for the iaStor crashes too. I'll have to look into this but my gut feeling says it's unnecessary bloatware that would be best uninstalled. I'll ask if anybody else knows more about this, sit tight for the time being.

Gina · 14 May 2015

Oh, and I looked in Installed Programs, and yes, there is Intel Rapid Technology. There is no icon for it however, it's the generic for a program. I'm tempted to click uninstall and see if it asks to repair. But won't. ;-P

I have Avast installed on my win8 tablet, and hubs has it on his Win7 Laptop and no problems, not even slow boot times. Obviously it's something with my particular set up. I am going to see what they say. I'll decide after that. In the meantime I may just uninstall and see if my boot BSOD goes away, that is when it usually happens.

Here is screenshot of storage controllers.

Gina · 14 May 2015

It seems like the ExpressCache is for my 8GB SSD.

OK, thank you for helping, I really appreciate it!!

Boozad · 14 May 2015

I've asked for some more eyes to drop in and take a look as I'm not completely familiar with how setups like this work. Someone should be along soon and I think I'll learn as much as you do from this!