Hey there. My laptop suddenly won’t boot properly. It happened after I restarted when I noticed that it was suddenly laggy and slow. I’m sure I have all the latest updates from avast, but I didn’t notice any warnings about an infection so I’m perplexed as to what happened
.
I have an Asus G75VW running Windows 7 64-bit. It has two 750gb 5400rpm hard drives, 8gb of ram, GTX 670M, and i7-3630QM.
I tried accessing safe mode but it always gets stuck at aswrvrt.sys. Using the repair your computer option only resulted in a black screen with the mouse pointer. Using the normal boot option, I was stuck at the Windows logo. Please help. I need to access my files ASAP.
[*]Restart the computer and press F8 repeatedly until the Advanced Options Menu appears.
[*]Select Repair your computer.
[*]Select Language and click Next
[*]Enter password (if necessary) and click OK, you should now see the screen below …
[*]Select the Command Prompt option.
[*]A command window will open.
[*]Type notepad then hit Enter.
[]Notepad will open.
[list]
[*]Click File > Open then select Computer.
[*]Note down the drive letter for your USB Drive.
[]Close Notepad.[/list]
[*]Back in the command window …
[*]Type e:/frst.exe
(or type e:/frst64.exeIf you download the FRST for 64-bit windows) and hit Enter
(where e: is replaced by the drive letter for your USB drive)
[*]FRST will start to run.
[list]
[*]When the tool opens click Yes to disclaimer.
[*]Press Scan button.
[*]When finished scanning it will make a log FRST.txt on the flash drive.[/list]
[*]Next
[*]Type explorer.exe;winlogon.exe into the Search: field in FRST then click the Search File(s) button.
[*]FRST will search your computer for files and when finished it will produce a log Search.txt on the flash drive.
[*]Exit FRST.
[*]Close the command window.
[*]Boot back into normal mode and post me the FRST.txt and Search.txt logs please.
So I selected Repair your computer. It’s still giving me the blank black screen with only the mouse pointer as I’ve said in the first post.
Edit: although a few hours ago when I tried the option Repair your computer, it was able to go to a command prompt but I had to wait really really long and I couldn’t type anything on it. What’s happening. >__<
Please print these instruction out so that you know what you are doing
[*]Download OTLPENet.exe to your desktop
[*]Ensure that you have a blank CD in the drive
[*]Double click OTLPENet.exe and this will then open imgburn to burn the file to CD
[*]Reboot your system using the boot CD you just created. Note : If you do not know how to set your computer to boot from CD follow the steps here
[*]As the CD needs to detect your hardware and load the operating system, I would recommend a nice cup of tea whilst it loads
[*]Your system should now display a Reatogo desktop. Note : as you are running from CD it is not exactly speedy
[*]Double-click on the OTLPE icon.
[*]Select the Windows folder of the infected drive if it asks for a location
[*]When asked “Do you wish to load the remote registry”, select Yes
[*]When asked “Do you wish to load remote user profile(s) for scanning”, select Yes
[*]Ensure the box “Automatically Load All Remaining Users” is checked and press OK
[]OTL should now start.
[]Drag and drop this attached scan.txt into the Custom scans and fixes box
[attachment=64806:scan.txt]
[*]Press Run Scan to start the scan.
[*]When finished, the file will be saved in drive C:\OTL.txt
[*]Copy this file to your USB drive if you do not have internet connection on this system.
[*]Right click the file and select send to : select the USB drive.
[*]Confirm that it has copied to the USB drive by selecting it
[*]You can backup any files that you wish from this OS
[*]Please post the contents of the C:\OTL.txt file in your reply.
I probably won’t be able to do that immediately. It’s almost 12 midnight here where I’m at, and I can’t burn a CD right now. I’ll do it first thing in the morning. Right now I’m on a different laptop (with no CD drive/burner, so there’s that). I’ll have access to a burner tomorrow morning.
Thanks for helping argus. I’ll get back to this after finishing (if I can) all the steps you mentioned.
Update on my situation: so I now have access to a burner. I double clicked OTLPENet.exe as you said but apparently the PC didn’t have enough memory to do it. After double clicking it it only showed the command prompt with a message saying that the program was too big and the memory can’t handle it.
So I tried burning OTLPENet.exe itself to the CD, but it obviousy didn’t work. I’d assume that OTLPENet.exe is only there to burn the temporary OS to the CD, and isn’t the OS itself. So yeah.
So I suppose you could give me the file that OTLPENet.exe will burn and I will burn it manually myself?
Will following essexboy’s instructions lead me to the same result you want me to, argus? I’m talking about the one using Rufus and and ISO of Windows 7 RC.
If it matters, I also now have a USB flash drive to use.
Okay, so I now got up to the point that I opened FRST64. It’s now been on the “The tool is setting up itself to read Local Disk. Please wait…” window for several minutes. Is this normal? Please reply. I know what’s left after this is just to scan and give you the report so you can give me back the fix.
If you can’t run FRST, follow instructions posted above for creating and running OTLPE live CD.
You need to create OTLPE live CD on healthy computer. Then boot OTLPE on infected computer.
I need to see or FRST.txt or OTL.txt log. Without thouse I can not help you.
Yes, I realize as much. I followed the instructions that lead to running FRST, but indeed it was stuck “The tool is setting up itself to read Local Disk. Please wait…”
Can I put OTLPE on a USB flash drive? Thanks again for trying to help me sir.
Edit 2:
I think the problem on my OTLPENet file download. I only have 28mb. Is this the right file size?
If it isn’t, I guess that’s why it won’t burn earlier when I tried to. It was probably correct. I’ll redownload it now. It also won’t open as an archive when using 7zip, so I guess it’s really a broken file.
Wooo! Finally booted to Reatogo! I changed in the BIOS the SATA configuration from ACHI to IDE. I also used PetoUSB to mount.
I’ll be posting scan results soon.
Edit:[s] I should select the Windows folder right? The one that’s usually in C:\Windows ? Because I can’t seem to find it. The HDDs are lettered differently, and I’d assume my C:\ drive is now B:\ with the name changed to RAMDisk. However, I don’t see any Windows folder there.
I only see:
bin
Documents and Settings
Logs
Programs
AppEvent.Evt
init.log
SecEvent.Evt
SysEvent.Evt[/s]
^Those are Reatogo’s files. Silly me. >__<
If this doesn’t work I guess I’ll have to download the 32-bit version of FRST (I DLed the 64-bit one not expecting that Reatogo was 32-bit) and try to run that.
Edit 2: One of my hard drives isn’t shown. I have two partitions there named C:OS and D:Programs and Games and both aren’t shown. I’ll open my laptop up and try reconnecting it.
Dammit. I think my hard drive died. It’s so new I wouldn’t have expected it. Not to mention it’s only 5400rpm. SMART analysis even said that status was good.
I swapped the two hard drives’ connectors and my main drive with the OS still won’t show up. Do you think my hard drive really is dead or is there some other explanation?
Strangely enough it is when a drive is really new (or really old and you start getting errors) that it may fail, after that they generally last for years. If it has failed so soon you should be able to get it replaced. This obviously doesn’t help with possible data loss, unless you have been backing up your data to an alternative 2nd HDD or external.
