aswrvt.sys hanging

Viruses and worms
1

I’ve got the issue where my system (Win 7 64 bit) hangs as it gets to aswrvt.sys

I’ve had a look at the topic at the top of the page in the section about not being able to boot, however I’m not able to find a copy of the oldtimers file that I can use.

https://forum.avast.com/index.php?topic=53253.0

Is there a newer version anywhere that anyone knows of?

Once I get that I’ll try the fix as listed in the topic.

Cheers

2

Get and run http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/
Attach the log to your next post please.

3

Thanks for the help Eddy, log attached.

Cheers

4

Remover notified. It may take a while for them to come online. It is bed time where they live.

5

I see that you have multiple hard drives on the system. Could you disconnect them all bar the main OS drive and then try a reboot

6

Sure, I’m away for a few days but will try to disconnect everything bar the main drive when I’m back on Sunday.

Cheers

7

Genius!

It now boots and runs a stable system from the main drive with all others disconnected.

Now how do I find out which drive is infected ? :-\

8

Trial and error I am afraid, reconnect them one at a time and reboot. That should locate the problem… But, it may have been a bad connection and so may not reappear

9

Ok, will attempt to hook them up, one by one tomorrow evening and see if I can track down the source of the problem.

Cheers

10

Drive d: (Vista) (Fixed) (Total:40.09 GB) (Free:16.05 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive y: (Data) (Fixed) (Total:0.1 GB) (Free:0.01 GB) NTFS ==>[System with boot components (obtained from reading drive)]

Really strange boot setup…
It would not surprise me if that is the problem.

What is the boot sequence setup in the bios ?

11

That is annoying, it’s the former version I was running before the W7 upgrade ages ago.

I’d managed to get rid of it, but it popped back up once I’d tried a repair once this issue had started.

Cheers

12

I ran a boot time scan and it found some kind of Java installer virus, but then couldn’t remove it.

Will try again from within Windows now I know where it is.