Help please aswrvrt.sys

Viruses and worms
1

When i want to boot my pc it hangs then restarts. When i go into safemode it hangs at : aswrvrt.sys
I added an attach for frst64.exe.
Did sfc /scannow and chkdsk /r

Part of cbs because it is to long:
2014-07-18 10:41:18, Info CBS Starting TrustedInstaller initialization.
2014-07-18 10:41:18, Info CBS Loaded Servicing Stack v6.1.7601.17592 with Core: C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.17592_none_672ce6c3de2cb17f\cbscore.dll
2014-07-18 10:41:20, Info CSI 00000001@2014/7/18:08:41:20.698 WcpInitialize (wcp.dll version 0.0.0.6) called (stack @0x7feeedbf0ad @0x7feef079849 @0x7feef0434e3 @0xff04e97c @0xff04d799 @0xff04db2f)
2014-07-18 10:41:21, Info CSI 00000002@2014/7/18:08:41:21.302 WcpInitialize (wcp.dll version 0.0.0.6) called (stack @0x7feeedbf0ad @0x7feef0c6816 @0x7feef092aac @0x7feef0435b9 @0xff04e97c @0xff04d799)
2014-07-18 10:41:21, Info CSI 00000003@2014/7/18:08:41:21.326 WcpInitialize (wcp.dll version 0.0.0.6) called (stack @0x7feeedbf0ad @0x7fef2738738 @0x7fef2738866 @0xff04e474 @0xff04d7de @0xff04db2f)
2014-07-18 10:41:21, Info CBS Ending TrustedInstaller initialization.
2014-07-18 10:41:21, Info CBS Starting the TrustedInstaller main loop.
2014-07-18 10:41:21, Info CBS TrustedInstaller service starts successfully.
2014-07-18 10:41:22, Info CBS SQM: Initializing online with Windows opt-in: False
2014-07-18 10:41:22, Info CBS SQM: Cleaning up report files older than 10 days.
2014-07-18 10:41:22, Info CBS SQM: Requesting upload of all unsent reports.
2014-07-18 10:41:22, Info CBS SQM: Failed to start upload with file pattern: C:\Windows\servicing\sqm*_std.sqm, flags: 0x2 [HRESULT = 0x80004005 - E_FAIL]
2014-07-18 10:41:22, Info CBS SQM: Failed to start standard sample upload. [HRESULT = 0x80004005 - E_FAIL]
2014-07-18 10:41:22, Info CBS SQM: Queued 0 file(s) for upload with pattern: C:\Windows\servicing\sqm*_all.sqm, flags: 0x6
2014-07-18 10:41:22, Info CBS SQM: Warning: Failed to upload all unsent reports. [HRESULT = 0x80004005 - E_FAIL]
2014-07-18 10:41:22, Info CBS No startup processing required, TrustedInstaller service was not set as autostart, or else a reboot is still pending.
2014-07-18 10:41:22, Info CBS NonStart: Checking to ensure startup processing was not required.
2014-07-18 10:41:23, Info CSI 00000004 IAdvancedInstallerAwareStore_ResolvePendingTransactions (call 1) (flags = 00000004, progress = NULL, phase = 0, pdwDisposition = @0x186f6f0
2014-07-18 10:41:23, Info CSI 00000005 Creating NT transaction (seq 1), objectname [6]“(null)”
2014-07-18 10:41:23, Info CSI 00000006 Created NT transaction (seq 1) result 0x00000000, handle @0x1f4
2014-07-18 10:41:23, Info CSI 00000007@2014/7/18:08:41:23.308 CSI perf trace:
CSIPERF:TXCOMMIT;465
2014-07-18 10:41:23, Info CBS NonStart: Success, startup processing not required as expected.
2014-07-18 10:41:23, Info CBS Startup processing thread terminated normally
2014-07-18 10:41:27, Info CSI 00000008 CSI Store 2423376 (0x000000000024fa50) initialized
2014-07-18 10:41:27, Info CBS Session: 30384740_278240714 initialized by client WindowsUpdateAgent.
2014-07-18 10:41:29, Info CBS Archived backup log: C:\Windows\Logs\CBS\CbsPersist_20140718084118.cab.
2014-07-18 10:41:29, Info CBS Read out cached package applicability for package: Package_for_KB2840149~31bf3856ad364e35~amd646.1.1.0, ApplicableState: 80, CurrentState:112
2014-07-18 10:41:31, Info CBS Session: 30384740_318913041 initialized by client WindowsUpdateAgent.
2014-07-18 10:41:31, Info CBS Read out cached package applicability for package: Package_for_KB2656356~31bf3856ad364e35~amd646.1.1.1, ApplicableState: 80, CurrentState:112
2014-07-18 10:41:35, Info CBS Session: 30384740_353845039 initialized by client WindowsUpdateAgent.
2014-07-18 10:41:36, Info CBS Warning: Unrecognized packageExtended attribute.
2014-07-18 10:41:36, Info CBS Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2014-07-18 10:41:36, Info CBS Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2014-07-18 10:41:36, Info CBS Warning: Unrecognized packageExtended attribute.
2014-07-18 10:41:36, Info CBS Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2014-07-18 10:41:36, Info CBS Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2014-07-18 10:41:36, Info CBS Warning: Unrecognized packageExtended attribute.
2014-07-18 10:41:36, Info CBS Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2014-07-18 10:41:36, Info CBS Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2014-07-18 10:41:36, Info CBS Warning: Unrecognized packageExtended attribute.
2014-07-18 10:41:36, Info CBS Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2014-07-18 10:41:36, Info CBS Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2014-07-18 10:41:36, Info CBS Warning: Unrecognized packageExtended attribute.
2014-07-18 10:41:36, Info CBS Warning: Unrecognized packageExtended attribute.
2014-07-18 10:41:36, Info CBS Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2014-07-18 10:41:36, Info CBS Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2014-07-18 10:41:36, Info CBS Warning: Unrecognized packageExtended attribute.
2014-07-18 10:41:36, Info CBS Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2014-07-18 10:41:36, Info CBS Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2014-07-18 10:41:36, Info CBS Warning: Unrecognized packageExtended attribute.
2014-07-18 10:41:36, Info CBS Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2014-07-18 10:41:36, Info CBS Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]

Please help.

2

You appear to have two hard drives. Could you disconnect one and try a normal boot

3

How do you mean? I have a multiboot pc 1 xp and 1 windows 7. I am on xp now. I have only 1 harddisk.

4
==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 596 GB) (Disk ID: EDB11350)
Partition 1: (Active) - (Size=100 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=496 GB) - (Type=OF Extended)

========================================================
Disk: 1 (Size: 125 MB) (Disk ID: 0188ECD5)
Partition 1: (Active) - (Size=125 MB) - (Type=0C)


I was looking at this which appeared to show two hard drives

5

That was my usb, still not working same thing…

6

Hey?

7

Initially I will reset the registry, if that fails I will disable some of the boot drivers that are not essential

Download the attached fixlist.txt to the same location as FRST
Run FRST and press fix
On completion try a normal boot

8

Ok i will give it a try.

9

It is still halted at aswrvrt.sys, no changes . . .
The automatic repair said something about system modification root cause.

10

This will disable Avast and remove some malware

Download the attached fixlist.txt to the same location as FRST
Run FRST and press fix
On completion try a normal boot

11

Ok

12

Now it hangs at classpnp.sys
Auto repair logs are in attach.

13

Startup Repair diagnosis and repair log

Last successful boot time: ‎7/‎20/‎2014 10:24:00 AM (GMT)
Number of repair attempts: 12

Session details

System Disk = \Device\Harddisk0
Windows directory = C:\Windows
AutoChk Run = 0
Number of root causes = 1

Test Performed:

Name: Check for updates
Result: Completed successfully. Error code = 0x0
Time taken = 0 ms

Test Performed:

Name: System disk test
Result: Completed successfully. Error code = 0x0
Time taken = 0 ms

Test Performed:

Name: Disk failure diagnosis
Result: Completed successfully. Error code = 0x0
Time taken = 78 ms

Test Performed:

Name: Disk metadata test
Result: Completed successfully. Error code = 0x0
Time taken = 63 ms

Test Performed:

Name: Target OS test
Result: Completed successfully. Error code = 0x0
Time taken = 858 ms

Test Performed:

Name: Volume content check
Result: Completed successfully. Error code = 0x0
Time taken = 483 ms

Test Performed:

Name: Boot manager diagnosis
Result: Completed successfully. Error code = 0x0
Time taken = 47 ms

Test Performed:

Name: System boot log diagnosis
Result: Completed successfully. Error code = 0x0
Time taken = 0 ms

Test Performed:

Name: Event log diagnosis
Result: Completed successfully. Error code = 0x0
Time taken = 156 ms

Test Performed:

Name: Internal state check
Result: Completed successfully. Error code = 0x0
Time taken = 78 ms

Test Performed:

Name: Boot status test
Result: Completed successfully. Error code = 0x0
Time taken = 0 ms

Test Performed:

Name: Setup state check
Result: Completed successfully. Error code = 0x0
Time taken = 874 ms

Test Performed:

Name: Registry hives test
Result: Completed successfully. Error code = 0x0
Time taken = 10140 ms

Test Performed:

Name: Windows boot log diagnosis
Result: Completed successfully. Error code = 0x0
Time taken = 0 ms

Test Performed:

Name: Bugcheck analysis
Result: Completed successfully. Error code = 0x0
Time taken = 22635 ms

Test Performed:

Name: Access control test
Result: Completed successfully. Error code = 0x0
Time taken = 153942 ms

Test Performed:

Name: File system test (chkdsk)
Result: Completed successfully. Error code = 0x0
Time taken = 900563 ms

Test Performed:

Name: Software installation log diagnosis
Result: Completed successfully. Error code = 0x0
Time taken = 0 ms

Test Performed:

Name: Fallback diagnosis
Result: Completed successfully. Error code = 0x0
Time taken = 0 ms

Root cause found:

Unspecified changes to system configuration might have caused the problem.

Repair action: System files integrity check and repair
Result: Failed. Error code = 0x17
Time taken = 1828566 ms

Session details

System Disk = \Device\Harddisk0
Windows directory = C:\Windows
AutoChk Run = 0
Number of root causes = 1

Test Performed:

Name: Check for updates
Result: Completed successfully. Error code = 0x0
Time taken = 0 ms

Test Performed:

Name: System disk test
Result: Completed successfully. Error code = 0x0
Time taken = 0 ms

Test Performed:

Name: Disk failure diagnosis
Result: Completed successfully. Error code = 0x0
Time taken = 94 ms

Test Performed:

Name: Disk metadata test
Result: Completed successfully. Error code = 0x0
Time taken = 62 ms

Test Performed:

Name: Target OS test
Result: Completed successfully. Error code = 0x0
Time taken = 858 ms

Test Performed:

Name: Volume content check
Result: Completed successfully. Error code = 0x0
Time taken = 499 ms

Test Performed:

Name: Boot manager diagnosis
Result: Completed successfully. Error code = 0x0
Time taken = 31 ms

Test Performed:

Name: System boot log diagnosis
Result: Completed successfully. Error code = 0x0
Time taken = 0 ms

Test Performed:

Name: Event log diagnosis
Result: Completed successfully. Error code = 0x0
Time taken = 172 ms

Test Performed:

Name: Internal state check
Result: Completed successfully. Error code = 0x0
Time taken = 62 ms

Test Performed:

Name: Boot status test
Result: Completed successfully. Error code = 0x0
Time taken = 0 ms

Test Performed:

Name: Setup state check
Result: Completed successfully. Error code = 0x0
Time taken = 858 ms

Test Performed:

Name: Registry hives test
Result: Completed successfully. Error code = 0x0
Time taken = 4493 ms

Test Performed:

Name: Windows boot log diagnosis
Result: Completed successfully. Error code = 0x0
Time taken = 0 ms

Test Performed:

Name: Bugcheck analysis
Result: Completed successfully. Error code = 0x0
Time taken = 1623 ms

Test Performed:

Name: Access control test
Result: Completed successfully. Error code = 0x0
Time taken = 8704 ms

Test Performed:

Name: File system test (chkdsk)
Result: Completed successfully. Error code = 0x0
Time taken = 938097 ms

Root cause found:

System volume on disk is corrupt.

Repair action: File system repair (chkdsk)
Result: Completed successfully. Error code = 0x0
Time taken = 1184874 ms

Session details

System Disk = \Device\Harddisk0
Windows directory = C:\Windows
AutoChk Run = 0
Number of root causes = 1

Test Performed:

Name: Check for updates
Result: Completed successfully. Error code = 0x0
Time taken = 0 ms

Test Performed:

Name: System disk test
Result: Completed successfully. Error code = 0x0
Time taken = 0 ms

Test Performed:

Name: Disk failure diagnosis
Result: Completed successfully. Error code = 0x0
Time taken = 1295 ms

Test Performed:

Name: Disk metadata test
Result: Completed successfully. Error code = 0x0
Time taken = 4431 ms

Test Performed:

Name: Target OS test
Result: Completed successfully. Error code = 0x0
Time taken = 9921 ms

Test Performed:

Name: Volume content check
Result: Completed successfully. Error code = 0x0
Time taken = 53150 ms

Test Performed:

Name: Boot manager diagnosis
Result: Completed successfully. Error code = 0x0
Time taken = 6053 ms

Test Performed:

Name: System boot log diagnosis
Result: Completed successfully. Error code = 0x0
Time taken = 15 ms

Test Performed:

Name: Event log diagnosis
Result: Completed successfully. Error code = 0x0
Time taken = 11217 ms

Test Performed:

Name: Internal state check
Result: Completed successfully. Error code = 0x0
Time taken = 9656 ms

Test Performed:

Name: Boot status test
Result: Completed successfully. Error code = 0x0
Time taken = 0 ms

Test Performe

14

Could you save the report as ANSI please and reattach

15

Ok

16

OK this will turn off signature verification

Download the attached fixlist.txt to the same location as FRST
Run FRST and press fix
On completion try a normal boot