Hi i uninstalled avast free after noticing it run worse on windows 10. After I removed it via control panel I let my computer reboot.
It was unable to boot and i got caught in a “Automatic Repair Restart Loop”
I went to the Advanced options in recovery options but unable to access any form of safe mode. Also for some reason none of my restore point/images appear. Tried to Reset the PC but keep my files but that process stops at 1% due to some unknown problem.
The only thing I’m able to access is Cmd Prompt.
I’m unable to access or run the Avast clean install utility from the recovery menu since I can only guess the remnants of Avast is interfering with booting to windows 10.
Im reluctant to do a factory restore since I have quite a few important files that I haven’t backed up.
The notepad opens. Under File menu select Open.
Select “Computer” and find your flash drive letter and close the notepad.
In the command window type e:\frst64.exe and press Enter Note: Replace letter e with the drive letter of your flash drive.
The tool will start to run.
When the tool opens click Yes to disclaimer.
Essexboy is expert here and FRST log will help him.
However, since you CAN get to command prompt and put USB stick in for FRST run I would HIGHLY recomment copying all your "quite a few important files that I haven’t backed up" to the USB stick.
There are many things that can be tried but I would not do anything until those were copied off.
Also, hopefully a simple fix but if this becomes more complex and needing more aggressive efforts then having removed the risk of those files being lost/corrupt should be your first step.
This obviously includes, as you mentioned last ditch effort, doing a factory reset.
Also, I know it is late now but as most people that have boot issues it is not only important to backup “data files” but also to do an image offline (ie. to USB HDD) of your HDD partitions.
Windows has one built in but I highly recommend Macrium Reflect Free…a fantastic and very easy package to use…not bloated either. http://www.macrium.com/reflectfree.aspx
Not only does this protect you from above scenario but “when”…not “if”…your HDD has physical crash in future you have image to restore to new HDD.
A 500GB USB external HDD drive costs $40 so well worth the small investment…this size should hold two or three images.
I run the Macrium scheduler each night (takes about hour for 200GB drive, compresses image to 130GB) while I’m asleep…then disconnect the USB HDD each morning.
When you run Macrium for first time it’ll create a Windows PE recovery CD or USB stick which you boot to and restore image.
You can even mount the image within any Windows PC and pull files off it.
Anyway, just a comment for future reference.
C:\Windows\System32\Drivers\volsnap.sys IS MISSING <==== ATTENTION
C:\Windows\System32\codeintegrity\Bootcat.cache IS MISSING <==== ATTENTION
This occurs because the Bootcat.cache file, located at %SystemRoot%\system32\codeintegrity, is corrupted or because the size of the Bootcat.cache file is changed since the last successful start.
"This occurs because the Bootcat.cache file, located at %SystemRoot%\system32\codeintegrity, is corrupted or because the size of the Bootcat.cache file is changed since the last successful start.
To work around this issue, start the computer from the disc drive or from the USB drive by using the Windows installation media. Delete the Bootcat.cache file, and then restart the computer."
seems to be the solution how would i go about deleting bootcat.cache from cmd prompt?
edit: after navigating to C:\ cd windows\system32\codeintegrity
“del bootcat.cache” bootcat.cache could not be found.
Also, I think in Windows 10 in RE it is all “RESET” with two options…basically keep or delete personal files…I mention since it only says “RESET”…never had Windows 8 but think it used “Refresh” term. http://www.tenforums.com/tutorials/4090-refresh-windows-10-a.html
Disclaimer: As posted above…I’d sure copy off those personal files you have not backed up to the USB drive from CMD prompt first.
Ntdll.dll file under System32 folder is corrupt.
This file is used to create bootcat.cache file.
Bootcat.cache file creation mechanism failed. Once you delete the file and reboot, it should create it again automatically. But, in this case, it never creates the file.
So, this concludes, some kernal files related to bootcat.cache file creation is damaged.
I’m not suggesting to do this since I have no experience in it but wanted to post as a read.
I’d try the USB RE environment as Essexboy says…especially since the RE on your system does not seem to work…ie, no restore points, etc.
Essexboy…I looked at his FRST log and OP shows some RP & LastReg…worth a try thru FRST ?
==================== Restore Points =========================
Restore point date: 2016-01-06 09:34
Restore point date: 2016-01-13 22:12
Restore point date: 2016-01-13 22:13
Restore point date: 2016-01-16 08:25
Restore point date: 2016-01-16 08:25
Thank you to essexboy and thekochs for your help. I ended up just backing up my files via notepad (as per your suggestion) and doing a factory reset. Ill keep the Windows 10 RE usb on hand this time for my inevitable future problems.
HI THETRICKYTHIEF! I am also using windows 10 on a Toshiba laptop and I uninstalled Avast. After that, I ran into the same problem as your. My laptop would go thru the fix/diagnose loop and won’t let me recover while saving files. I did the FRST scan thing via notepad and I got the same result: Bootcat.cache IS MISSING
The part where you said you “you’ve backed up your file via notepad” is not quite clear to me. How do I backup or transfer my important files to my usb via notepad? I don’t want to go thru all these complicated solutions as I am no expert on this so I just want to get my files back and reset my laptop in the most straightforward way possible. Please help me!
Hi. Please excuse the old thread revival but I’m having very similar problems after uninstalling Avast (and installing another free antivirus in the same session before reboot). I can’t boot and none of the safe mode, etc. options work. My Bootcat.cache is missing, but my volsnap.sys is not. I also have some restore points listed by FRST, but my Windows 10 recovery environment doesn’t see them. This ntdll.dll idea does seem worth trying out.
Anyway this is my FRST scan result. Any help would be highly appreciated!
Reviving an old topic is never a good idea.
Things change and even if it sounds similar to your problem,
your equipment isn’t the same as that of the original poster.
It’s always best to start your own topic and list your information and your problem in detail.
Well, I ended up reinstalling Windows 10. So we’ll never know if there was a less ham-fisted solution, or if it would have been similar to OP’s or not. Thanks anyway!
