Several BSOD, ntoskrnl.exe, aswSP.sys, more.

Hello Arc, forgive my delay I was going mostly nonstop from Friday to Sunday evening. :-P

I have not uninstalled Avast yet. I barely had time to work on the computer much actually. I was going to wait for Avast to get back with me, but they have not. However I just got their attention on Friday. I have had another BSOD however, and something else interesting.

I rebooted my computer yesterday. It did not give me a BSOD this time. I got a message from Malwarebytes. Screenshot attached. I got a notification that Avast was turned off as well. So my computer booted normally (although slowly) and Avast was turned off when I was fully booted.

I ended up running a few rootkit removers. None were found. One note of interest however: when I ran Avast's aswmbr, my computer gave a BSOD and spontaneously rebooted almost as soon as Avasts's aswmbr began scanning. When I booted again, I started the scan once again and it took all day to run, but just seemed to sit there for a couple of hours. I finally just shut it off. I do not have a dump file for this BSOD, at least BlueScreen Viewer doesn't bring up a dump for yesterday.

Today I got a BSOD on startup. Sigh.

Here's quick snips from today's BSOD from NirBlueScreen Viewer.

A problem has been detected and Windows has been shut down to prevent damage
to your computer.

-----------------------------------
The problem seems to be caused by the following file: Ntfs.sys

SYSTEM_SERVICE_EXCEPTION

*** Ntfs.sys - Address 0xfffff88001628e20 base at 0xfffff88001618000 DateStamp
0x52e1be8a
-----------------------------------------

If I don't hear from Avast by this afternoon, I am going to uninstall, boot and see what happens. I will install MSE in the interim. I'll get back with you after I do that.

Thanks for helping and for your reply,
Gina

Hello,

Finally got some health and time this afternoon. Uninstalled Avast, reboot. No BSOD. Installed MSE. Made the boot cd for Windows Defender Offline. (Had already run TDSSKiller, Sophos Virus Removal Tool, McAfee Rootkit Remover, and what I could of Avasts' tool). I could not create the CD on a different computer, I don't have one accessible. I might have access to one in a couple of days.

I can't find a log file at the stated location on the drive, but it didn't seem to find anything during the Quick scan.

When I booted after changing the boot order, I didn't get a BSOD. The boot time is quicker, but it was a good four minutes by count (from start of reboot) before seeing a hit of desktop, and a few more minutes until I got a usable desktop.

I had made some custom views in Event Viewer. This is the last boot time:

Windows has started up:
Boot Duration : 339959ms little over 5.5 minutes I think
IsDegradation : false
Incident Time (UTC) : ‎2015‎-‎05‎-‎18T18:46:28.718400300Z


The only thing I could find in boot degradation other than
File Name : MsMpEng.exe
Friendly Name : Antimalware Service Executable
Total Time : 92541ms
Degradation Time : 84041ms

was something for my Samsung s6 phone that helps with file transfer. Just installed it a few days ago, so not sure if I need it to load at start up or not. Will take a look at it.:
File Name : Samsung Link.exe
Friendly Name : Samsung Link Service
Version : 2.0.0.1503181422
Total Time : 8304ms
Degradation Time : 3304ms

So, now what? Any other ideas? I need to look at startups and services again. I've mostly preened the startups, but I am not sure what services I can stop, so not sure what else to do about boot time. BUT, it's much better, and no BSOD after two boots at least!