Hi,
after last Windows xp update yesterday I restarted computer. Now Windows won’t start normally and I can’t do anything. Safe mode stops when it comes to aswrvrt.sys. Please help.
For this you will need a USB of at least 1Gb
The file that windows stops on is the last sucessfully loaded one so somewhere windows has broken something else
Download Peazip to the desktop
Run and install the programme
As it installs this page will show, deselect the AVG ticks
Press decline and it will then install cleanly
https://dl.dropbox.com/u/73555776/peazip.jpg
Download the following files to the desktop … Right click the links and select save as…then select desktop
Right click OTLPE on your desktop and select …Open as archive
https://dl.dropbox.com/u/73555776/Unzup%20archive.png
Select OTLPE standard
https://dl.dropbox.com/u/73555776/select%20archive.PNG
Click Extract, ensure that desktop is selected
https://dl.dropbox.com/u/73555776/extract%20archive.PNG
Insert the USB stick Then run Rufus
https://dl.dropbox.com/u/73555776/rufus.JPG
Select the ISO file on the desktop via the ISO icon.
Press Start Burn
https://dl.dropbox.com/u/73555776/RufusISO.JPG
Once the USB has burnt then
[*]Download Farbar Recovery Scan Tool and save it to the flash drive.
[*]Reboot your system using the boot USB you just created.
Note : If you do not know how to set your computer to boot from USB follow the steps here
[]As the Programme needs to detect your hardware and load the operating system, I would recommend a nice cup of tea whilst it loads 
[]Your system should now display a Reatogo desktop.
[]Locate the flash drive and run FSRT
[]The tool will start to run.
http://i1224.photobucket.com/albums/ee362/Essexboy3/Farbar/FRST2.gif
[*]When the tool opens click Yes to disclaimer.
[*]Press Scan button.
[*]It will make a log (FRST.txt) on the flash drive. Please copy and paste it to your reply.
[*]The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.
Thanks for reply.
I did what you said. Content of USB is in attachment.
I have problem with Reatogo desktop. My system does not show it.
When I boot from USB, I see line STARTING REATOGO -X -PE and when bar comes to full nothing happens. Black screen. Computer is not processing either. I left computer like this for 30 min, nothing happened. Any thoughts?
OK lets try another tool to see if I can access your restore points. You can use the same USB for this
OK lets try XPUD
Download http://unetbootin.sourceforge.net/unetbootin-xpud-windows-latest.exe & http://noahdfear.net/downloads/bootable/xPUD/xpud-0.9.2.iso to the desktop of your clean computer
[*]Insert your USB drive
[*]Press Start > My Computer > right click your USB drive > choose Format > Quick format
[*]Double click the unetbootin-xpud-windows-387.exe that you just downloaded
[*]Press Run then OK
[*]Select the DiskImage option then click the browse button located on the right side of the textbox field.
[*]Browse to and select the xpud-0.9.2.iso file you downloaded
[]Verify the correct drive letter is selected for your USB device then click OK
[]It will install a little bootable OS on your USB device
[*]Once the files have been written to the device you will be prompted to reboot ~ do not reboot and instead just Exit the UNetbootin interface
Download http://noahdfear.net/downloads/rst.sh to the USB drive
[*]Boot the Sick computer to xPUD again
[*]Press File
[*]Expand mnt
[*]Expand your USB (sdb1)
[*]Confirm that you see rst.sh that you downloaded there
[*]Press Tool at the top
[*]Choose Open Terminal
[*]Type bash rst.sh
[*]Press Enter
[*]After it has finished a report will be located in the USB drive (sdb1) named enum.log
[]Plug that USB back into the clean computer and open it
[]Then post the contents here
Alright, I will try that. I would just like to add that I am doing this from Vista. Does this makes any difference?
Nope, you can create the USB on any system but it will need to be used on an XP computer
Thanks for the info. I have the same problem. When I download OTLPEStd.exe it is only 19 MB. It is missing the iso. Is there another link for the original 96MB file.
Could you try the link again please, meanwhile I will check for an alternate
thanks essexboy, I disabled my antivirus software and it downloaded the full file.
I’ve attached FRST.txt but it didn’t output Addition.txt
Download the attached fixlist.txt to the same USB as FRST
Run FRST as before and press fix
On completion try a normal boot
Thanks for the file. I tried it but it hasn’t worked. I tried an earlier restore point too and it didn’t work either. Should I just start to remove files of i there another tool I should try
Use the reatogo desktop to backup your data to USB or CD
As none of the restore points work it looks like a re-install
thanks for your help. I’ll try that.
I’m having a similar issue where my window xp system first went into blue screen, then when trying to boot in safe mode, it got stuck on aswrvrt.sys and goes into the blue screen repeatedly. I managed to make a USB boot up stick from the instruction above and here is the content from frst.txt. What should be done next? Any help is appreciated.
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 30-07-2013 01
Ran by SYSTEM on 29-07-2013 23:46:51
Running from X:
WIN_XP (X86) OS Language: English(US)
Boot Mode: Recovery
Attention: Could not load system hive.
Attention: System hive is missing.
==================== Registry (Whitelisted) ==================
Attention: Software hive is missing.
ATTENTION: Software hive is not loaded.
========================== Services (Whitelisted) =================
==================== Drivers (Whitelisted) ====================
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
==================== One Month Modified Files and Folders =======
==================== Known DLLs (Whitelisted) ============
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe IS MISSING <==== ATTENTION!.
C:\Windows\System32\winlogon.exe IS MISSING <==== ATTENTION!.
C:\Windows\System32\svchost.exe IS MISSING <==== ATTENTION!.
C:\Windows\System32\services.exe IS MISSING <==== ATTENTION!.
C:\Windows\System32\User32.dll IS MISSING <==== ATTENTION!.
C:\Windows\System32\userinit.exe IS MISSING <==== ATTENTION!.
C:\Windows\System32\Drivers\volsnap.sys IS MISSING <==== ATTENTION!.
==================== EXE ASSOCIATION =====================
HKLM.….exe: <===== ATTENTION!
HKLM.…\exefile\DefaultIcon: <===== ATTENTION!
HKLM.…\exefile\open\command: <===== ATTENTION!
==================== Restore Points (XP) =====================
==================== Memory info ===========================
Percentage of memory in use: 10%
Total physical RAM: 1943.96 MB
Available physical RAM: 1730.54 MB
Total Pagefile: 1775.21 MB
Available Pagefile: 1705.91 MB
Total Virtual: 2047.88 MB
Available Virtual: 1990.56 MB
==================== Drives ================================
Drive b: (RAMDisk) (Fixed) (Total:0.06 GB) (Free:0.06 GB) NTFS
Drive x: (ReatogoPE) (Removable) (Total:3.76 GB) (Free:3.44 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 4 GB) (Disk ID: 003BE947)
No partition Table on disk 0.
========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 233 GB) (Disk ID: A77C799A)
Partition 1: (Active) - (Size=233 GB) - (Type=07 NTFS)
==================== End Of Log ============================
Attention: Software hive is missing.Unfortunately FRST is unable to access the registryATTENTION: Software hive is not loaded.
Are you able to run the Reatogo desktop from the USB ?
Yes, I was able to boot into the window system on the USB. Is there a way to disable the avast from there and will that solve the problem?
Thank you!
Yes run OTLPE
[*]Your system should now display a Reatogo desktop.
Note : as you are running from CD it is not exactly speedy
[*]Double-click on the OTLPE icon.
[*]Select the Windows folder of the infected drive if it asks for a location
[*]When asked “Do you wish to load the remote registry”, select Yes
[*]When asked “Do you wish to load remote user profile(s) for scanning”, select Yes
[*]Ensure the box “Automatically Load All Remaining Users” is checked and press OK
[*]OTL should now start.
[*]Drag and drop this attached scan.txt into the Custom scans and fixes box
[*]Press Run Scan to start the scan.
[*]When finished, the file will be saved in drive C:\OTL.txt
[*]Copy this file to your USB drive if you do not have internet connection on this system.
[*]Right click the file and select send to : select the USB drive.
[*]Confirm that it has copied to the USB drive by selecting it
[*]You can backup any files that you wish from this OS
[*]Please post the contents of the C:\OTL.txt file in your reply.
Thank you. Are you saying my machine has been infected? Actually my c drive is now inaccessible from the file browser after booting with the USB stick. Not sure what’s going on. So this has nothing to do the avast update? I have several other machines and haven’t applied the latest update yet due to this issue.
I went into BIOS and did a hard drive diagnostic. It didn’t report any error.