aswRvrt.sys problem - won't boot, win7

Viruses and worms
1

Hi
I’ve read the forums on this issue but I can’t resolve this and get my machine to boot.
Dell XPS15 (UK) Win7 HP SP1, Avast free edition.
I think problem started after a recent Win7 auto update. Avast and Dell quickset stopped working. Tried to remove Avast using the avast removal tool and tools to remove all other AV remnants.
On rebooting and attempting system restore, had BSOD with error 0x80070057. Then noted message tha aswRvrt.sys is corrupt during repair. Repair just loops now and although I can get to command prompt and have a restore disk, I can’t get it to work (just goes round loop again, even if I boot from USB.)
I’ve read EssexBoy’s advice, and used FRST - I’ve posted the FRST.txt file output below.

I’d really appreciate it if someone could advise me on what to do next

Thanks

Andy
_

2
I'd really appreciate it if someone could advise me on what to do next
essexboy is notified, will probably take some hours before he is online
3

ok, thanks will await his input

Cheers

4

i see he is online now, so if not to busy he may look at your case now…

5

Ok, cheers, I’d really appreciate some help cos I need to get the laptop running again

6

Hi there, you appear to have hit a bad combination as some adware disabled Avast during the updates. Initially I will try a reg back, if that succeeds we will still need to check for the malware
If it fails I will remove the malware, Avast and Comodo

Download the attached fixlist to the same USB as FRST
Run FRST as before and press Fix
On completion try a normal boot

7

Hi essexboy

Thanks - normal boot following fix went to startup repair, which failed (‘cannot repair…’)

Fixlog attached.

Let me know what to try next

Cheers

Andy

8

This will disable both comodo and Avast

Download the attached fixlist to the same USB as FRST
Run FRST as before and press Fix
On completion try a normal boot

9

Thanks essexboy.

normal boot led to Windows error recovery screen which is different to what happened previously. Choosing ‘Start windows normally’ gave a momentary BSOD and reboot. This also happened when repeated.

Choosing repair windows option led to previous message - ‘Startup cannot repair…’

Fixlog attached - what else can I try?

Thanks again
Andy

10

Did you see if it referenced a file or a number on the BSOD ?

From the command prompt could you type in the following command and then try a reboot

Chkdsk c: /r

11

Hi
Didn’t see any ref, BSOD was only momentarily on screen before system rebooted.
I ran chkdsk c: /r earlier (took hours!) - there was a message about having to stop current process to do it and handles not being valid before it ran. It ran through but still no joy booting…

Anything else I can try?

Thanks

12

Does not look like it from what I can see. Have you tried a system restore ?

13

Hi
Hell, really? I didn’t think this would be so serious… haven’t done a system restore - will that lose any data? I don’t have any recent images for the machine - a comodo backup from March. That would mean I lose loads of data.

Are there any other options?

Thanks

14

Another (non-tech head) thought - is it possible to delete the aswRvrt.sys from the command prompt or would that be too easy :wink:

15

All avast and comodo drivers/services are disabled.

You will lose some data using system restore but if you use this one it will be minimal :

Restore point made on: 2014-07-21 07:15:14

16

just tried restore to one from 18 july - failed and gave same error code as earlier BSOD (0x80070057). Will try more recent one, but not looking hopeful…arrgghhh!

17

If that files then the final shot is SFC

Again from the recovery console command prompt enter the following command :

sfc /scannow /offbootdir=c:\ /offwindir=c:\windows

Once done try two startup repairs

18

Hi
Tried that and two other restore points - no joy. 0x80070057 error. Tried normal boot a few times to see if I could see BSOD for long enough to read it - there’s a long string of ASCII and something about corruption to something but it flies past too quickly to read.

Is there any other possible option that a clean install as I really am going to lose a lot?

Thanks

19

Sorry, missed your last post re sfc /scannow /offbootdir=c:\ /offwindir=c:\windows

will try that now, thanks

20

Hi essexboy,
Thanks for your support on this - much appreciated.
I ran sfc /scannow, which reported that WRP had found and repaired corrupt files and saved details to CBS.log. The two start up repairs found no problems so I tried a normal boot - momentary BSOD again, into restart. Start up repair then offered system restore and attempted repairs… but failed.
Will try to find CBS.log files if you think its worth it?