Windows XP In Constant Restart Loop - Hangs Up On amsrvt.sys Driver And Reboots

Viruses and worms
1

Good Morning. My Father-In-Law has an older eMachines desktop with Windows XP on it. During boot-up it goes into a restart loop. It seems to be hanging up on the awsrvrt.sys driver. I have followed some instructions found on here and I am attaching the FRST.txt file for some help, if possible. Thank-you in advance for all of your help.

2

Remover Notified.

3

Hello,

You have few system restore points. Have you try that? We can tell FRST to force the system to preform the system restore itself. Bit first once again we shall use FRST for some additional checks. Re-run FRST/FRST64 as you did before in RE. Then:

[*]Type rpcss.dll;Explorer.exe;User32.dll into the Search: field in FRST then click the Search File(s) button.
[*]FRST will search your computer for files and when finished it will produce a log Search.txt in the same directory the tool is run.
[*]Please attach it to your reply.

4

I followed your instructions and have attached the required file. Can I try a restore point using reatogo? If so, how do I try? Thanks a million for all of your help.

Todd

5

Sorry about that Restore Point question. After re-reading the response I see that we wanted to try this first. Please let me know something when you can. Thanks for your help.

6

Hi,

Please note that these fixes are not instantaneous. This case shall require more than one fix attempt …

1. Open notepad and copy/paste the text present inside the code box below.
To do this highlight the contents of the box and right click on it. Paste this into the open notepad.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system

Start
Replace: C:\WINDOWS\system32\dllcache\rpcss.dll C:\Windows\System32\rpcss.dll
End

2. Save notepad as fixlist.txt at the same location where the FRST tool is located (USB drive).
FixList.txt must be in the same location where FRST.exe tool is!

3. Re-run FRST.exe as you did before from RE (recovery environment using Reatogo) and press the Fix button just once and wait.

The tool will create the (Fixlog.txt) logfile in the same location where FRST.exe tool is located. Please attach it to your reply.

Then re-try to boot Windows in normal boot. Is the problem solved?

7

I followed your instructions. Rebooted and the PC is still on an endless restart loop. The file you requested is attached. Thank-you so much for your help and patience with this problem.

8

Hello,

Try this FixList.txt. First create the first one and execute it via FRST in RE. Tell me is the problem resolved?

This FixList shall tell FRST to remove some junk files, some adware as well as avast! itself along with his related driver.

Start C:\Program Files\Ask.com C:\Program Files\AVAST Software C:\Windows\System32\Drivers\aswFsBlk.sys C:\WINDOWS\system32\drivers\aswMonFlt.sys C:\Windows\System32\Drivers\aswRdr.sys C:\Windows\System32\Drivers\aswRvrt.sys C:\Windows\System32\Drivers\aswSnx.sys C:\Windows\System32\Drivers\aswSP.sys C:\Windows\System32\Drivers\aswTdi.sys C:\Windows\System32\Drivers\aswVmm.sys C:\Documents and Settings\owner\Local Settings\Temp\ApnStub.exe C:\Documents and Settings\owner\Local Settings\Temp\jre-6u31-windows-i586-iftw-rv.exe C:\Documents and Settings\owner\Local Settings\Temp\NEWED.tmp.exe C:\Documents and Settings\owner\Local Settings\Temp\ose00000.exe C:\Documents and Settings\owner\Local Settings\Temp\setup.exe HKLM\...\Run: [] => [X] HKLM\...\Run: [ApnUpdater] => C:\Program Files\Ask.com\Updater\Updater.exe [1648264 2013-04-25] (Ask) HKLM\...\Run: [20131121] => C:\Program Files\AVAST Software\Avast\setup\emupdate\2b198f99-8a65-423b-b8d4-ac79c615c31e.exe [180184 2013-11-27] (AVAST Software) ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software) S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-01] (AVAST Software) S2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [29816 2013-05-01] (AVAST Software) S2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [66336 2013-05-01] (AVAST Software) S1 aswRdr; C:\Windows\System32\Drivers\aswRdr.sys [49760 2013-05-01] (AVAST Software) S0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [49376 2013-05-01] () S1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [765736 2013-05-01] (AVAST Software) S1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [368944 2013-05-01] (AVAST Software) S1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [56080 2013-05-01] (AVAST Software) S0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [174664 2013-05-02] () End

Regarding the existing system restore points, they all are from 2013 year (the latest point is at 2013-11-29). We can try that if you will, non of personal files would not be lost. Only installed program or setting in the meanwhile.
Do you agree to try to preform restore point if above script does not solve the problem?

9

I will try the fix your recommend. If that does not work, I am definitely open to trying a system restore. This PC hasn’t been used since, at least, last November or before. I can’t thank you enough for all of your help and patience with this issue.

Todd

10

The fix does not appear to have worked. I am attaching the Fix Log. Please let me know something when you can. Thanks for your help.

Todd

11

Ok, let’s try that …


Start
RP: -> 2013-11-29 17:17 - 024576 _restore{0852CA01-7D04-4806-9D62-B1D0A9968E6F}\RP48
End

This FixList shall tell FRST to force Windows to preform the system restore on 2013-11-29 at 17:17. Post here the created FixLog.
Is problem fixed?

12

Attached is the fix log. Will windows restart and restore on it’s own or do I need to restart the PC manually and then it will take effect?

Best Regards,

Todd

13

Hi,

You need to restart the computer by yourself.

14

I went ahead and restarted the computer like you said, but it goes right back into that restart loop. Curious. Please let me know something when you can. Thanks again.

Todd

15

I’m running out of tricks … :frowning:

First try this FixList. It shall do the same but with attempt to some older restore point.

Start
RP: -> 2013-11-28 16:17 - 024576 _restore{0852CA01-7D04-4806-9D62-B1D0A9968E6F}\RP47 
End

Restart the computer and check if Windows boots up normaly?

— — — — — —

If that fail … uh … one last attempt. Create this FixList and it shall have the tast to rewrite the existing MBR code with default one.

Start
CMD: FixMBR
End

Restart the computer and check if Windows boots up normaly?

— — — — — —

If all fails, post me the fresh FRST.txt logfile so I can see what else I can do.