Win 7 64bit, problem with startup - safe mode stuck at aswrvrt.sys

Can you execute chkdsk c: /r within CMD inside repair tools?

When it eventually loads that far, I’ll try that

Thanks!

I was able to do chkdsk c: /r and it has completed it’s scan. Do you want me to attach any of the data?

The only thing that has come up that seems to indicate a problem is the last line: “Failed to transfer logged messages to the event log with status 50”

Try now to run FRST?

The FRST scan eventually started and I now have the .txt file attached :slight_smile:

Fingers crossed the problem is resolvable

Result is not yet complete? What is the letter of your system partition (C, D, E)?

When I was going through the system recovery options, it had (D:) as my system partition with 0Mb free on it :s Otherwise my standard drive that I save stuff to is (C:) and as far as I know I don’t have an (e:) drive unless it’s a DVD/CD-ROM or something?

Shall I run the scan again?

Try chkdsk d: /r. When you finish, try to attach fresh FRST report…

The chkdsk scan finally finished on the d drive and here is the new frst scan .txt file

Thanks

I restarted my computer this morning via USB and in contrast to what was happening yesterday, it took no time at all to load up the Windows ISO etc. I went to repair options and it managed to do a startup repair scan! Seems like chkdsk on the (D:) drive cleared something up.

The startup repair was unable to do anything automatically, but it did find the root cause of the problem. Here is what the diagnosis found:

"A patch is preventing the system from starting.

Repair action: System files integrity check and repair
Result: Failed. Error Code = 0x490
Time Taken = 1196746ms"

All of the other tests were performed successfully.

It’s now prompting me to remove any devices and try restarting the pc. Should I do that, or go into advanced options and run more frst scans first?

DT

Hi, I didn’t respond because I used to consult with my coleagues about this, because this problems is really weird.

I want you to go to Repair Tools, open CMD and try this commands:

Bootrec.exe /fixMBR
Bootrec.exe /fixBoot

Restart and see if there is a progress…

Okay, I’ll try that now.

While I was waiting I thought I might as well run another FRST scan, and the results this time seems to be a lot more comprehensive. Attached is the latest scan

I’ll try those two commands now and see what happens

DT

Have just tried both of those commands and they both completed successfully

On restart the pc loaded as normal and has now managed to load the OS and am logging in.

Is there anything I should do to prevent this kind of thing happening again?? As you can imagine it’s been a distressing few days for me :stuck_out_tongue:

Terrific 8)

Is there anything I should do to prevent this kind of thing happening again?? As you can imagine it's been a distressing few days for me :p

Unfortunatelly, we cannot know what caused this, sh*t happens. I had this problem few weeks ago, PC worked normally previous day, in the morning system won’t load. I spent several hours trying to fix it, using BIOS, Startup Repair, setting partitions as active, rebuilding boot and mbr, various other CMD commands, and succesfully fixed it. What caused it I don’t know, and honestly, I don’t give a damn ;D

I would recommend you to uninstall avast completely, then clean the possible remnants with this tool, and then reinstall it again.

But before that, let’s scan the system, and make sure everything is all right.

Please download Farbar Recovery Scan Tool by Farbar and save it to your desktop.

Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them.
Only one of them will run on your system, that will be the right version.

[*]Double-click to run it. When the tool opens click Yes to disclaimer.
[*]Under Optional Scan ensure “List BCD” and “Driver MD5” are ticked.
[*]Press Scan button.
[*]It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
[*]The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

Then…

Please download GMER, AntiRootkit tool from the link below and save it to your Desktop:

Gmer download link
Note: file will be random named

Double-clicking to run GMER.

[*]Wait for initial scan to finish - if there is any query, click No;
[*]Click Scan button and wait until the full scan is complete;
[*]Click Save … - save the report to the Desktop (named Gmer );

Attach here Gmer logreports.

Wicked, again, thanks for all your help so far :slight_smile: You’ve been a lifesaver.

Here are all of those scan files.

1. Open notepad and copy/paste the text present inside the code box below.
To do this highlight the contents of the box and right click on it. Paste this into the open notepad.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dalesearch.com/?babsrc=HP_ss&mntrId=A026C44619F36404&affID=124440&tsp=5028
URLSearchHook: HKCU - (No Name) - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - No File
SearchScopes: HKLM-x32 - DefaultScope {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1060933
SearchScopes: HKLM-x32 - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1060933
SearchScopes: HKCU - DefaultScope {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = http://mystart.incredibar.com/mb119/?search={searchTerms}&loc=IB_DS&a=6PQscY9rU2&i=26
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www.searchgol.com/?q={searchTerms}&babsrc=SP_ss_Btisdt7&mntrId=A026C44619F36404&affID=124440&tsp=5028
SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1060933
SearchScopes: HKCU - {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = http://mystart.incredibar.com/mb119/?search={searchTerms}&loc=IB_DS&a=6PQscY9rU2&i=26
BHO: Complitly - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Users\David\AppData\Roaming\Complitly\64\Complitly64.dll (SimplyGen)
C:\Users\David\AppData\Roaming\Complitly
CHR HKLM-x32\...\Chrome\Extension: [ajhcekcffkpnaednoeoegnmnjdlnjjmg] - C:\ProgramData\Codec-C\ajhcekcffkpnaednoeoegnmnjdlnjjmg.crx
CHR HKLM-x32\...\Chrome\Extension: [dlfienamagdnkekbbbocojppncdambda] - C:\Program Files (x86)\Complitly\chrome\ComplitlyChrome.crx
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx
CHR HKLM-x32\...\Chrome\Extension: [pbmbgangfmfbhnngbdgkplhjnfoaeihd] - C:\Program Files (x86)\i-beta\Extensions\Chrome\i-beta.crx
C:\Program Files (x86)\i-beta
C:\Program Files (x86)\Skype\Toolbars
C:\Program Files (x86)\Complitly
C:\ProgramData\Codec-C
AlternateDataStreams: C:\Users\David\Downloads\revised copy of contract.eml:OECustomProperty
cmd: ipconfig /flushdns

2. Save notepad as fixlist.txt to your Desktop.
NOTE: => It’s important that both files, FRST and fixlist.txt are in the same location or the fix will not work.

3. Run FRST/FRST64 and press the Fix button just once and wait.
If the tool needed a restart please make sure you let the system to restart normally and let the tool completes its run after restart.

The tool will make a log on the Desktop (Fixlog.txt). Please attach it to your reply.
Note: If the tool warned you about the outdated version please download and run the updated version.

Then…

Please download AdwCleaner by Xplode and save to your Desktop.

Double click on AdwCleaner.exe to run the tool.

[*]Click on the Scan button.
[*]After the scan has finished click on the Clean button.

Press OK when asked to close all programs and follow the onscreen prompts.
Press OK again to allow AdwCleaner to restart the computer and complete the removal process.

[*]After rebooting, a logfile report (AdwCleaner[S0].txt) will open automatically.
[*]Post logfile will also be saved in the C:\AdwCleaner folder.

Then…

Tell me how are the things now? Any remaining issue?

Here’s the frst fixlog. Am running the adwcleaner scan now.

Have run all of those scans etc now. Here are the adwcleaner files from the clean and subsequent restart. It all seems to running fine now, nothing I can tell is wrong.

Only thing is I got a runtime warning as soon as I restarted and logged in. It happens now and again. The pop up says something like “program was requested to shut down in an unusual way”. As said, it happens now and again, I click ‘ok’ and it’s as if nothing ever happened.

Do you recommend me still un-installing avast and reinstalling. Any other tips to keep the pc in a tip top condition?

Thank you!

Yes, uninstall and reinstall Avast…

Thanks very much man! PC seems to be back up and running again. Am in process of uploading all my important docs and photos etc to the cloud and will make sure to keep regular system images and backups handy!!

Managed to uninstall avast fully and it is now reinstalled and fingers crossed won’t cause any more problems.

Thanks for your help and if you have any more tips on how to stop it happening I’d be grateful to hear them.

Happy New Year

DT