ASWRVRT.sys freezes in "safe mode" in Vista 64

Avast Free Antivirus / Premium Security
1

Hello,

I am having some “safe mode” issues with an AVAST file.

I can’t boot in Safe Mode… and when Windows does boot up, I get the “pipe” error when I try to do anything related to recovery, adding user names, running setup.exe files, etc. I can’t right click and “run as administrator” with anything or get to restore points. I suspect I have a virus.

First and foremost, I’d like to delete AVAST. Is there a tool to get me to boot to a USB and then run a tool to just delete AVAST?

What’s the process to create a bootable USB that has some “removal” software?
Would “avastclear.exe” work from a bootable USB?

I believe once AVAST is gone I will be able to boot in “safe mode” and then use my VISTA (64) disk to do any repair/recovery that may be necessary?

Thank you!

2

Are you able to get into normal mode ?
Would you be able to run a programme there or does it need to be USB based

As you have the CD we could run FRST from the recovery console

Download to a USB :
Farbar Recovery Scan Tool x64

Boot the computer using the CD

When you reboot you will see this.
Click repair my computer

http://i1224.photobucket.com/albums/ee362/Essexboy3/RepairVista_7275.jpg

Select your operating system

http://i1224.photobucket.com/albums/ee362/Essexboy3/RepairVista_7277202.jpg

Select Command prompt

http://i1224.photobucket.com/albums/ee362/Essexboy3/RepairVista_7277.jpg

Insert the USB with FRST

At the command prompt type the following :

notepad and press Enter.
The notepad opens. Under File menu select Open.
Select “Computer” and find your flash drive letter and close the notepad.
In the command window type e:\frst64.exe and press Enter
Note: Replace letter e with the drive letter of your flash drive.
The tool will start to run.
When the tool opens click Yes to disclaimer.

https://dl.dropbox.com/u/73555776/FRST%20Start%20scan.gif

Press Scan button.
It will make a log (FRST.txt) on the flash drive. Please copy and paste it to your reply.

3

Thank you for your response… I will try what you suggest.
To answer your question… I CAN boot in “normal mode”… but it is compromised.

I can’t “run” any executables. I get some “pipe” error.
I can’t run anything as Administrator… I can’t run a restore, or add a new user, or run CCleaner or disk defrag, or any other “imporant” system tools.

So, I suspect I have a virus as well.

I cannot boot up from the DVD when I put in the Windows Vista DVD. (I did set the BIOS to boot from the CD first).
When it boots from the DVD, I just get a blue background. Almost looks like a windows setup screen, but without any of the options.

I’d like to remove AVAST for the time being and see if I can get that “pipe” error to go away.
My research about this error often points to an issue with the virus software.

At this point, I’m just shooting in the dark.

Thanks

4

I do not believe it is Avast causing that. In normal mode could you download and run this programme… I will be an apparent screensaver and not an exe :slight_smile:

Download OTL to your Desktop
Secondary link

[*]Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.

https://dl.dropboxusercontent.com/u/73555776/OTL_Main_Tutorial.gif

[*]Select All Users
[]Select LOP and Purity
[]Under the Custom Scan box paste this in

netsvcs
BASESERVICES
%SYSTEMDRIVE%*.exe
c:\program files (x86)\Google\Desktop
c:\program files\Google\Desktop
dir “%systemdrive%*” /S /A:L /C
/md5start
rpcss.dll
/md5stop
CREATERESTOREPOINT

[*]Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
[*]When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
[*]Attach both logs