System hangs at aswrvt.sys

I seem to be having the same problem other people have had. My laptop (Windows 7, 32 bit) blue screens after starting up, and when I try to run it in safe mode, it will hang at aswrvt.sys for 20-30 seconds before blue screening again. I can’t even restore to factory settings, as it just blue screens while loading it up. Is my computer just screwed now?

Hi Sinfex,

Not necessarily. A certified malware expert has been notified of your issue(s). Might be a bit or so before he enters, but he will have a solution or two for you.

Please be patient.

Sounds like a hard drive issue. Essex, Twin, Magna or argus, Mach or Valinorum will try to help you to their best of their abilities.

What is the stop error on the blue screen ?

Okay, well, I tried to load my computer in safe mode with networking to see what the blue screen error was, and it actually loaded. So I downloaded the Avast uninstall tool and ran it. Then I rebooted my computer again and it rebooted just fine, it (knock on wood) seems to be working okay for now.

Do you know what the problem could be though? I’m honestly thinking about switching to AVG. I really do like Avast, but this is the second time this has happened.

It really depends on what other software is on your computer. This is not an Avast specific problem it is windows related in some way. The service that loads prior to Avast is mup.sys. So if Avast is not on the computer then that is where it will stop, at a very quick search for that and I achieved About 948,000 results (0.74 seconds)

https://www.google.co.uk/search?q=safe+mode+stops+at+mup.sys&sourceid=ie7&rls=com.microsoft:en-GB:IE-Address&ie=&oe=&gfe_rd=cr&ei=odxoU9vfB6zY8gf75oCIDg

And it happened again. My computer just suddenly shut off, and now it’s just constant blue screens. The blue screen error was C000021a, and if I try to load it in safe mode, it just stops at avgidshx.sys before the blue screen pops up. (I downloaded the free trial for AVG because I didn’t have any other antivirus after deleting Avast)

This error occurs when a user-mode subsystem, such as WinLogon or the Client Server Run-Time Subsystem (CSRSS), has been fatally compromised and security can no longer be guaranteed. In response, the operating system switches to kernel mode. Microsoft Windows cannot run without WinLogon or CSRSS. Therefore, this is one of the few cases where the failure of a user-mode service can shut down the system.

Are you able to get me an FRST scan so that I can have a look

My computer just decided to work again today. I’m just confused now. Anyway, here’s the FRST log.

That looks OK but I would suggest that you test the drive out. It may be failing

Alright. I feel kind of dumb but, what is the best way to test for hard drive issues?

What is the make of hard drive that you have ?

Control Panel > Device Manager

Hitachi HTS725032A9A364

The diagnostic for that is here http://pcsupport.about.com/gi/o.htm?zi=1/XJ&zTi=1&sdn=pcsupport&cdn=compute&tm=43&f=00&tt=3&bt=9&bts=9&zu=http%3A//www.hgst.com/support/downloads%23DFT
Download both the PDF and the tool so that you can run it safely

About that link: http://pcsupport.about.com/gi/o.htm?zi=1/XJ&zTi=1&sdn=pcsupport&cdn=compute&tm=43&f=00&tt=3&bt=9&bts=9&zu=http%3A//www.hgst.com/support/downloads%23DFT

Appears to be email spoofing.

Really? I already tried the program in that link. (doesn’t seem to work) I already deleted it. Should I change my email password too?

Link provided above should display a warning about email spoofing, and not the link to the hard drive diagnostics and PDF file that essexboy intended to give you. You shouldn’t have found it necessary to enter your email address or password to get the diagnostic file at the link. but some sites do require you to register first. It should have been a point-and-click operation, with the end result you got the diagnostic file you needed.

If that’s not what happened, then suggest changing maybe your email password and monitoring it for a bit.

Yeah, I just clicked a link to download the program, no email required. I’m probably safe then.