aswrvrt.sys locks at boot...

Viruses and worms
1

Hi all,

I my Win7 x64 PC is locking at boot of aswrvrt.sys … I just get a black screen even in safe mode boot option.

After perusing forums here I see that my prob is likely Zero Access rather than a true Avast problem.

I went ahead and made a repair USB with the FRST64.exe program to log the problems, as this reflects advice given pretty recently on the first step for someone with a similar problem

I am attaching the FRST.txt log file it made.

Any advice on next steps as to what cleaning utility or other steps to take?

Computer hard drive is not currently bootable even in safe mode, except to the repair USB.

Thanks,
Walt

2
Any advice on next steps as to what cleaning utility or other steps to take?
Essexboy is notified, check back tomorrow
3

Do you have a second hard drive that you could unplug ? As the windows updates has caused a fair few problems recently and not all are related to the KB that was pulled

Download the attached fixlist.txt to the same USB as FRST
Run FRST as before and press Fix
On completion try to reboot to normal windows

4

Thanks, I will implement tonight and post up how it goes.

I do not have a second fixed HDD on that machine.

5

Attached is the log.

I am now stuck in an endless loop with I try to start Windows.

I get “Starting Windows…” then a black screen with a movable cursor but otherwise no interactivity or icons. Then after a minute “Shutting Down…” then “Starting Windows…” again. Rinse and repeat in an endless loop.

Thanks

6

OK could you now reboot to the recovery console and select startup repair

7

OK, ran startup repair, it asked me to reboot.

Trying to start windows normally led to the same loop.
Starting in safe mode showed the same lockup at loading of aswvrt.sys

Went back to recovery and startup repair started automatically… It is now checking the disk for errors which can take a while.

If the repair process fails to resolve the problem I will generate another frst64 log if that is reasonable.

8

Yes please, prior to this did you install some windows updates ?

9

Unknown regarding Windows update, this is not my primary PC, however a family member has been installing “Minecraft” mods so my first suspicion was for some kind of virus.

Repair finished and indicated that it could not repair windows even though I authorized it to use prior restore points if it needed to. The only failure I saw in the log was:

System Files Integrity Check and Repair: failed, code 0x45d

I seem to be in the same black screen loop now if I try to start Windows.

The new frst.txt is attached. hm, looking at the file stamp the clock on that involved PC looks off.

Thanks for your help.

10

Whilst I check the log could you try this http://www.microsoft.com/en-us/download/details.aspx?id=38435

11

OK downloaded and burning to a USB drive using Rufus.

Are you sure I should run it? It seems to be the 32 bit version.

12

Well I ran it figuring that MS would detect an incompatibility.

I downloaded the english but it was half in Portugese, haha

Trying to start now.

13

Nope, still stuck in the loop. :frowning:

14

Nothing on the log that as far as I can see would stop the boot, the manual instructions if the MS fix does not work

http://support.microsoft.com/kb/2839011 Start at : Option 3: Uninstall security update 2823324 at a command prompt

15

OK, went in to follow manual uninstall instructions.

First of all, the c:\ drive is “Reserved” and DISM does not work on it, even when using the /Online switch. I cannot see any files on it when I try dir

However, the full windows install seems to be on what is currently assigned as the d: drive. Do, I ran dism /get-packages on that. The recovery disc seems to be the x: drive.

It was many hundreds of items so initially I used |more to go through the results but that was too unwieldy. So I just piped the results to a text file then used notepad to search the file.

That particular package, KB2823324, is not listed in the 47 Kb file. Accordingly I do not think it is installed on this machine.

KB2823324 seems to potentially be a dead end.

Could it be something as simple as replacing the aswrvrt.sys file?

16

Not really as windows sticks on the last successfully loaded file, it is the one after aswrvrt.sys that is at fault

OK back at the command prompt we will try a SFC run … This is based on windows being D

Type in this command, it may take a few minutes to run as it will check all system files

sfc /scannow /offbootdir=d:\ /offwindir=d:\windows

17

The response was:

Beginning System Scan. This process will take some time.

then eventually:

Windows Resource Protection could not perform the requested Operation.

Then it dropped me back to the dos prompt.

18

The options are now a re-install or parallel install. Do you have the windows cd ?

19

I ordered the restore CDs from the company. Currently doing a bare-metal factory reset. I really appreciate your help trying to solve the problem - this was some hard-core dysfunction.

20

Sorry that we could not diagnose the problem, there have been several of these lately and all with a different cause. So there was no apparent commonality