Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: JJDJ on January 16, 2014, 05:56:49 PM

Title: ASWRVRT.sys freezes in "safe mode" in Vista 64
Post by: JJDJ on January 16, 2014, 05:56:49 PM
Hello,

I am having some "safe mode" issues with an AVAST file.

I can't boot in Safe Mode... and when Windows does boot up, I get the "pipe" error when I try to do anything related to recovery, adding user names, running setup.exe files, etc.  I can't right click and "run as administrator" with  anything or get to restore points. I suspect I have a virus.

First and foremost, I'd like to delete AVAST.  Is there a tool to get me to boot to a USB and then run a tool to just delete AVAST?

What's the process to create a bootable USB that has some "removal" software?
Would "avastclear.exe" work from a bootable USB?

I believe once AVAST is gone I will be able to boot in "safe mode" and then use my VISTA (64) disk to do any repair/recovery that may be necessary?


Thank you!
Title: Re: ASWRVRT.sys freezes in "safe mode" in Vista 64
Post by: essexboy on January 16, 2014, 07:07:09 PM
Are you able to get into normal mode ?
Would you be able to run a programme there or does it need to be USB based

As you have the CD we could run FRST from the recovery console

Download to a USB :
 Farbar Recovery Scan Tool x64 (http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/) 

Boot the computer using the CD

When you reboot you will  see this.
 Click repair my computer  
(http://i1224.photobucket.com/albums/ee362/Essexboy3/RepairVista_7275.jpg) 
 
Select your operating system  
(http://i1224.photobucket.com/albums/ee362/Essexboy3/RepairVista_7277202.jpg) 
 
Select Command prompt 
(http://i1224.photobucket.com/albums/ee362/Essexboy3/RepairVista_7277.jpg) 

Insert the USB with FRST
 
At the command prompt type the following  :
 
notepad and press Enter. 
The notepad opens. Under File menu select Open. 
Select "Computer" and find your flash drive letter and close the notepad. 
In the command window type e:\frst64.exe and press Enter 
Note: Replace letter e with the drive letter of your flash drive. 
The tool will start to run. 
When the tool opens click Yes to disclaimer. 
(https://dl.dropbox.com/u/73555776/FRST%20Start%20scan.gif)
Press Scan button. 
It will make a log (FRST.txt) on the flash drive. Please copy and paste it to your reply.
Title: Re: ASWRVRT.sys freezes in "safe mode" in Vista 64
Post by: JJDJ on January 16, 2014, 08:01:30 PM
Thank you for your response... I will try what you suggest.
To answer your question... I CAN boot in "normal mode"... but it is compromised.


I can't "run" any executables.  I get some "pipe" error.
I can't run anything as Administrator... I can't run a restore, or add a new user, or run CCleaner or disk defrag, or any other "imporant" system tools.

So, I suspect I have a virus as well.

I cannot boot up from the DVD when I put in the Windows Vista DVD.  (I did set the BIOS to boot from the CD first).
When it boots from the DVD, I just get a blue background.  Almost looks like a windows setup screen, but without any of the options.

I'd like to remove AVAST for the time being and see if I can get that "pipe" error to go away.
My research about this error often points to an issue with the virus software.

At this point, I'm just shooting in the dark.

Thanks

Title: Re: ASWRVRT.sys freezes in "safe mode" in Vista 64
Post by: essexboy on January 16, 2014, 08:47:41 PM
I do not believe it is Avast causing that.  In normal mode could you download and run this programme..  I will be an apparent screensaver and not an exe :)

 Download OTL (http://oldtimer.geekstogo.com/OTL.scr)  to your Desktop
Secondary link (http://www.itxassociates.com/OT-Tools/OTL.scr)
(https://dl.dropboxusercontent.com/u/73555776/OTL_Main_Tutorial.gif)

netsvcs
BASESERVICES
%SYSTEMDRIVE%\*.exe
c:\program files (x86)\Google\Desktop
c:\program files\Google\Desktop
dir "%systemdrive%\*" /S /A:L /C
/md5start
rpcss.dll
/md5stop
CREATERESTOREPOINT