Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: jakefred on July 29, 2013, 04:12:51 PM

Title: Can't boot Windows 7 - aswVmm.sys is missing or corrupted - help please!
Post by: jakefred on July 29, 2013, 04:12:51 PM
Hello All,

I have a problem that others also seem to have experienced recently: Windows 7 won't boot (in any mode) because the aswVmm.sys file is either missing or corrupted.

System recovery doesn't work, Samsung Recovery doesn't work, I can't use a Windows system repair disk as I don't have a cd or dvd drive...  I'm a little stuck!

I have already copied all data I wanted to keep from the hard drive, so I'm prepared to sacrifice everything else (but I would like to keep certain programs - Word, Excel, etc).

Can anyone help please?  Thanks!  I noticed that Essexboy suggested something in a previous post; would that work for me?

For info, I was using a relatively recent free version of Avast (installed in May or June I think).

Jakefred
Title: Re: Can't boot Windows 7 - aswVmm.sys is missing or corrupted - help please!
Post by: essexboy on July 29, 2013, 07:44:59 PM
Yes as I can delete the driver key for that file.  Is it a 32 or 64 bit system ?
Title: Re: Can't boot Windows 7 - aswVmm.sys is missing or corrupted - help please!
Post by: Eddy on July 29, 2013, 10:25:06 PM
Quote
System recovery doesn't work, Samsung Recovery doesn't work.... I can't use a Windows system repair disk as I don't have a cd or dvd drive.
Ok, so you can't boot and have no cd/dvd drive.
How do you know a system recovery won't work?
Without booting (either from hd/dvd/cd/floppy) you can't even tell.

Samsung recovery?
That means there is a "special partition" on the hd that has a image of the file system as it was when you bought the system.
If that doesn't work, it is a strong indication that there is a hardware problem.
Title: Re: Can't boot Windows 7 - aswVmm.sys is missing or corrupted - help please!
Post by: jakefred on July 30, 2013, 08:47:35 AM
Thanks for your replies.

Essexboy - thanks!  As it's Windows 7 Starter, I think it must be 32-bit.  Is there any way to check?

Eddy - sorry, probably used the wrong terminology...  I have tried startup repair and system restore, neither of which work.  As for Samsung Recovery, I can conduct a Basic Restore (but still can't boot).  When I try the Complete Recovery, it says I can return to the computer initial status (as at October 2010), but when I click "next" I'm told that the Windows partition can't be found (in French: "lecteur ou partition Windows introuvable").
Might be a hardware problem, but did a Windows Memory Diagnostic, which didn't report any problems.  Do you know whether I can try a system recovery from a USB stick and whether it stands a chance of succeeding?  Thanks.
Title: Re: Can't boot Windows 7 - aswVmm.sys is missing or corrupted - help please!
Post by: essexboy on July 30, 2013, 03:35:08 PM
I will give 32 and 64 bit links just in case :)

Download the following three programmes to your desktop :
 
 
1.  Rufus (http://rufus.akeo.ie/downloads/rufus_v1.3.2.exe) 
 
For 64bit systems  
2.  Windows Vista 64bit RC (https://dl.dropbox.com/u/73555776/Vista%2064bit%20rc.iso)
3.  Farbar Recovery Scan Tool x64 (http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/) 
 
For 32bit systems
2.  Windows Vista RC (https://dl.dropbox.com/u/73555776/vista32%20rc.iso)
3.  Farbar Recovery Scan Tool (http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/) 
 
 
Insert the USB stick Then run Rufus
 (https://dl.dropbox.com/u/73555776/rufus.JPG)
Select the ISO file on the desktop via the ISO icon. 
 
Press Start Burn
(https://dl.dropbox.com/u/73555776/RufusISO.JPG)
Then copy FRST to the same USB   
 
(http://dl.dropbox.com/u/73555776/frstwintoboot.JPG)   
 
 
 
Insert the USB into the sick computer and start the computer.  First ensuring that the system is set to boot from USB 
Note: If you are not sure how to do that follow the instructions Here (http://lifehacker.com/5991848/how-to-boot-from-a-cd-or-usb-drive-on-any-pc)
 
 
When you reboot you will  see this.
 Click repair my computer  
(https://dl.dropboxusercontent.com/u/73555776/W7%20repair.png) 
 
Select your operating system  
 
Select Command prompt 
(https://dl.dropboxusercontent.com/u/73555776/W7%20Command.png)
 
At the command prompt type the following  :
 
notepad and press Enter
The notepad opens. Under File menu select Open
Select "Computer" and find your flash drive letter and close the notepad. 
In the command window type e:\frst64.exe and press Enter 
Note: Replace letter e with the drive letter of your flash drive. 
The tool will start to run. 
When the tool opens click Yes to disclaimer. 
(https://dl.dropbox.com/u/73555776/FRST%20Start%20scan.gif)
Press Scan button. 
It will make a log (FRST.txt) on the flash drive. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.
Title: Re: Can't boot Windows 7 - aswVmm.sys is missing or corrupted - help please!
Post by: jakefred on July 30, 2013, 07:09:31 PM
Great, thanks!  Just wanted to check that you sent the right link - Windows Vista RC, and not Windows 7?  Thanks again.
Title: Re: Can't boot Windows 7 - aswVmm.sys is missing or corrupted - help please!
Post by: essexboy on July 30, 2013, 07:45:03 PM
My apologies a blonde moment I read that as Vista Duh

For 64bit systems  
2.  Windows 8 64bit RC (https://dl.dropbox.com/u/73555776/64win8RC.iso)
2.  Windows Vista 64bit RC (https://dl.dropbox.com/u/73555776/Vista%2064bit%20rc.iso)
2.  Windows 7 64bit RC (https://dl.dropbox.com/u/73555776/win7%2064bit%20rc.iso)
3.  Farbar Recovery Scan Tool x64 (http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/) 
 
For 32bit systems
2.  Windows Vista RC (https://dl.dropbox.com/u/73555776/vista32%20rc.iso)
2.  Windows 7 RC (https://dl.dropbox.com/u/73555776/win7-32bit%20rc.iso)
3.  Farbar Recovery Scan Tool (http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/) 
Title: Re: Can't boot Windows 7 - aswVmm.sys is missing or corrupted - help please!
Post by: jakefred on July 30, 2013, 11:57:47 PM
Hi,

Thanks a lot; nothing blonde about what you've said so far.  Quite the opposite!

Here's the frst report (but no sign of an addition.txt report...  Is that a problem?).  Text below and file attached.

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 30-07-2013 04
Ran by SYSTEM on 30-07-2013 23:49:21
Running from G:\
Windows 7 Starter (X86) OS Language: English(US)
Internet Explorer Version 8
Boot Mode: Recovery

The current controlset is ControlSet001
ATTENTION!:=====> FRST is updated to run from normal or Safe mode to produce a full FRST.txt log and Addition.txt log.

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [8555040 2010-04-06] (Realtek Semiconductor)
HKLM\...\Run: [ETDWare] - C:\Program Files\Elantech\ETDCtrl.exe [1891720 2010-03-25] (ELAN Microelectronics Corp.)
HKLM\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [35696 2009-02-27] (Adobe Systems Incorporated)
HKLM\...\Run: [UCam_Menu] - C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM\...\Run: [DATAMNGR] - C:\PROGRA~1\SEARCH~1\Datamngr\DATAMN~1.EXE
HKLM\...\Run: [PDFPrint] - C:\Program Files\PDF24\pdf24.exe [162856 2013-02-19] (Geek Software GmbH)
HKLM\...\Run: [Ad-Aware Browsing Protection] - C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe [542632 2013-01-31] (Lavasoft)
HKLM\...\Run: [SearchProtection] - C:\ProgramData\Search Protection\_run.bat
HKLM\...\Run: [Ad-Aware Antivirus] - "C:\Program Files\Ad-Aware Antivirus\AdAwareLauncher" --windows-run
HKLM\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software)
HKLM\...\RunOnce: [*Restore] - C:\windows\system32\rstrui.exe /RUNONCE [262656 2009-07-13] (Microsoft Corporation)
HKLM\...\InprocServer32: [Default-cscui]  <==== ATTENTION!
HKU\Tiph\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [ 2013-02-28] (Skype Technologies S.A.)

========================== Services (Whitelisted) =================

S2 Ad-Aware Service; C:\Program Files\Ad-Aware Antivirus\AdAwareService.exe [1236336 2013-03-17] (Lavasoft Limited)
S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
S2 SBAMSvc; C:\Program Files\Ad-Aware Antivirus\SBAMSvc.exe [3677000 2012-09-19] (GFI Software)

==================== Drivers (Whitelisted) ====================

S2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [29816 2013-05-09] (AVAST Software)
S2 aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [66336 2013-05-09] (AVAST Software)
S1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [61680 2013-05-09] (AVAST Software)
S0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [49376 2013-05-09] ()
S1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [770344 2013-06-27] (AVAST Software)
S1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [369584 2013-06-27] (AVAST Software)
S1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [56080 2013-05-09] (AVAST Software)
S0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [6602 2013-06-27] ()
S3 ETD; C:\Windows\System32\DRIVERS\ETD.sys [109056 2010-03-31] (ELAN Microelectronics Corp.)
S3 gfiark; C:\Windows\System32\drivers\gfiark.sys [41584 2013-04-11] (ThreatTrack Security)
S0 gfibto; C:\Windows\System32\drivers\gfibto.sys [13560 2013-04-10] (GFI Software)
S1 RapportCerberus_55550; C:\ProgramData\Trusteer\Rapport\store\exts\RapportCerberus\baseline\RapportCerberus32_55550.sys [330960 2013-06-17] ()
S1 RapportEI; C:\Program Files\Trusteer\Rapport\bin\RapportEI.sys [148688 2013-06-19] (Trusteer Ltd.)
S3 RapportIaso; c:\programdata\trusteer\rapport\store\exts\rapportms\baseline\rapportiaso.sys [56464 2013-06-17] (Trusteer Ltd.)
S1 RapportPG; C:\Program Files\Trusteer\Rapport\bin\RapportPG.sys [222192 2013-06-19] (Trusteer Ltd.)
S3 rtport; C:\windows\system32\drivers\rtport.sys [15656 2010-08-04] (Windows (R) 2003 DDK 3790 provider)
S1 SABI; C:\windows\system32\Drivers\SABI.sys [10752 2009-05-27] (SAMSUNG ELECTRONICS)
S2 sbapifs; C:\Windows\System32\DRIVERS\sbapifs.sys [66344 2012-09-12] (GFI Software)
S3 yukonw7; C:\Windows\System32\DRIVERS\yk62x86.sys [315392 2009-09-28] ()
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys
S1 SBRE; \SystemRoot\system32\drivers\SBREDrv.sys

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-07-01 21:05 - 2009-11-19 11:15 - 02824704 _____ (Askey Computer Corporation.) C:\Windows\System32\AInst3141.exe
2

==================== One Month Modified Files and Folders =======

2013-07-04 01:54 - 2010-10-17 11:50 - 00000000 ____D C:\users\Tiph
2013-07-01 21:07 - 2009-07-13 18:37 - 00000000 ____D C:\Windows\System32\com
2013-07-01 21:06 - 2009-07-13 18:37 - 00000000 ____D C:\Windows\IME
2013-07-01 16:29 - 2009-07-13 18:37 - 00000000 ____D C:\Windows\System32\wfp
2013-07-01 16:28 - 2009-07-13 18:37 - 00000000 ____D C:\Windows\registration

==================== Known DLLs (Whitelisted) ============


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK

==================== Restore Points  =========================


==================== Memory info ===========================

Percentage of memory in use: 37%
Total physical RAM: 1013.3 MB
Available physical RAM: 637.49 MB
Total Pagefile: 1013.3 MB
Available Pagefile: 637.24 MB
Total Virtual: 2047.88 MB
Available Virtual: 1926.81 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:85 GB) (Free:6.64 GB) NTFS
Drive d: () (Fixed) (Total:125.78 GB) (Free:11.78 GB) NTFS
Drive f: (RECOVERY) (Fixed) (Total:20 GB) (Free:6.43 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive g: (ReatogoPE) (Removable) (Total:0.49 GB) (Free:0.32 GB) NTFS
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
Drive y: (SYSTEM) (Fixed) (Total:0.08 GB) (Free:0.05 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 233 GB) (Disk ID: E472D3C2)
Partition 1: (Not Active) - (Size=20 GB) - (Type=27)
Partition 2: (Active) - (Size=84 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=85 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=128 GB) - (Type=OF Extended)

========================================================
Disk: 1 (Size: 502 MB) (Disk ID: 003C4754)
Partition 1: (Active) - (Size=501 MB) - (Type=07 NTFS)


LastRegBack: 2013-06-24 00:34

==================== End Of Log ============================
Title: Re: Can't boot Windows 7 - aswVmm.sys is missing or corrupted - help please!
Post by: essexboy on July 31, 2013, 03:43:34 PM
You appear to be running AdAware antivirus as well, this will totally disable Avast so it will need to be repaired/reinstalled afterwards
There are also several ad type programmes on the computer

Download the attached fixlist.txt to the same USB as FRST
Run FRST as before and press FIX

Reboot to normal windows. 
Title: Re: Can't boot Windows 7 - aswVmm.sys is missing or corrupted - help please!
Post by: jakefred on July 31, 2013, 11:28:07 PM
Essexboy, you're a star!  Thanks a million.  I'm writing this reply from my newly-repaired computer...  Long may it last.  Thanks again for your help and your time.
Title: Re: Can't boot Windows 7 - aswVmm.sys is missing or corrupted - help please!
Post by: essexboy on July 31, 2013, 11:40:45 PM
OK could you run Adwcleaner to remove the adware I noticed


Download AdwCleaner from here (http://general-changelog-team.fr/en/downloads/finish/20-outils-de-xplode/2-adwcleaner) to your desktop
Run AdwCleaner and select Delete

(https://dl.dropbox.com/u/73555776/AdwCleaner.GIF)

Once done it will ask to reboot, allow this
On reboot a log will be produced please attach that
Title: Re: Can't boot Windows 7 - aswVmm.sys is missing or corrupted - help please!
Post by: jakefred on August 01, 2013, 09:31:00 AM
Ok, here's the log.  Thanks for your continued assistance!
Title: Re: Can't boot Windows 7 - aswVmm.sys is missing or corrupted - help please!
Post by: essexboy on August 01, 2013, 03:18:38 PM
How is the computer behaving now ? Is Avast functional ?
Title: Re: Can't boot Windows 7 - aswVmm.sys is missing or corrupted - help please!
Post by: jakefred on August 02, 2013, 04:32:35 PM
For now, everything's running pretty smoothly.  I uninstalled both Lavasoft and Avast, but am not sure I want to reinstall them after the problems I've just had!  I don't imagine you can recommend any alternatives, but if you can, I'd be happy to follow your advice.  Thanks again for all your help. 
Title: Re: Can't boot Windows 7 - aswVmm.sys is missing or corrupted - help please!
Post by: essexboy on August 02, 2013, 04:53:32 PM
As the file was corrupted then mayhap a fresh install of Avast would work
Title: Re: Can't boot Windows 7 - aswVmm.sys is missing or corrupted - help please!
Post by: Eddy on August 07, 2013, 02:17:38 PM
You may want/need to run AswClear (http://www.avast.com/uninstall-utility) before trying to install Avast again.
When it comes to security, I would say run Avast as real time defence.
Run a scan e.g. once a week with MalwareBytes (http://www.malwarebytes.org/)

When it comes to a firewall you have two options.
1) A hardware firewall (very much recommended)
2) A software firewall.

You may already have the first one without noticing it. Nowadays they are often build into the router/modem that people are using.
To find out, check the specifications/manual of your modem/router.
Title: Re: Can't boot Windows 7 - aswVmm.sys is missing or corrupted - help please!
Post by: jakefred on August 10, 2013, 08:56:20 AM
Apologies for the delayed response; I was out of town for a week or so.  Thanks for your replies; I'll no doubt follow your guidance!
Title: Re: Can't boot Windows 7 - aswVmm.sys is missing or corrupted - help please!
Post by: Eddy on August 21, 2013, 01:14:22 PM
No apologies needed. Getting away from a computer, especially a troubled one, can be really nice at times :-)
Title: Re: Can't boot Windows 7 - aswVmm.sys is missing or corrupted - help please!
Post by: Lucas26 on August 23, 2014, 11:01:21 AM
Hi there  :D

I seem to have quite the same problem.
Essexboy, could you (or anyone else) give me the good fixlist corresponding to the frst.txt attached here?

Thanks in advance.
Title: Re: Can't boot Windows 7 - aswVmm.sys is missing or corrupted - help please!
Post by: essexboy on August 23, 2014, 12:57:37 PM
What happened prior to the non boot ?

Download the attached fixlist.txt to the same USB as FRST
Run FRST as before and press FIX

Reboot to normal windows. 
Title: Re: Can't boot Windows 7 - aswVmm.sys is missing or corrupted - help please!
Post by: Lucas26 on August 23, 2014, 02:16:10 PM
Well, I don't ealy know because it's not my own comp that we're talking about, but apparently, the system froze a few times, and the user finally hard shut down by holding power button. maybe during an update.

Actually trying your fixlit, ashamed that i didn't think about this simple solution by myself   :-[
Anyway, many thx for such a quick response.
Title: Re: Can't boot Windows 7 - aswVmm.sys is missing or corrupted - help please!
Post by: essexboy on August 23, 2014, 02:23:48 PM
Let me know if it works
Title: Re: Can't boot Windows 7 - aswVmm.sys is missing or corrupted - help please!
Post by: Lucas26 on August 23, 2014, 03:00:20 PM
No, sorry. Will try with another restore point ( sorry if I don't say it right, I'm french ) and I'll let you know.

Edit :
I tried to restore directly from the Windows setup repairing Tools, the first restore points I choose ( 01/28/2014 and 01/22/2014 ) ended on a fail, due to adobe CS3.
Title: Re: Can't boot Windows 7 - aswVmm.sys is missing or corrupted - help please!
Post by: Lucas26 on August 23, 2014, 03:24:03 PM
Same error again.

Let me try to translate :
The system restoration couldn't replace the file c:\Adobe\Adobe Version Cue CS2\data\nanolaf-PC.pid) with its original copy from restore point.
An undefined error occured ( 0x80070002 )

I joined a fixlist.txt I tried to build by myself, removing avast and adobe cs2 drivers and apps.
Still have the same issue ( black screen with mouse pointer ). Now the safe mode hangs to CLASSPNP.sys.

I think I'll have to reinstall windows and all the software needed on this comp...  :(
Title: Re: Can't boot Windows 7 - aswVmm.sys is missing or corrupted - help please!
Post by: essexboy on August 23, 2014, 07:12:07 PM
Do you have any data that needs backing up ?  If so use the reatogo desktop.  Details here  https://forum.avast.com/index.php?topic=53253.0  scroll down to If you cannot  Boot the computer
An use OTLPE
Title: Re: Can't boot Windows 7 - aswVmm.sys is missing or corrupted - help please!
Post by: Lucas26 on August 23, 2014, 09:23:19 PM
Oh, I had only a few data (music, videos, documents) to back up, and I used one of your wonderfull tips ( found in another post ) to recover it.

I wish I was able to fix the old windows instead of re-installing and updating it, and reinstall all softwares ( MB  and graphic card drivers, microsoft office, adobe CS2, ... ) but this comp seemed to be in such a big mess. In any case I have hours to spend before it runs again  :-\

Anyway, many thanks to your knowledge and patience.
Title: Re: Can't boot Windows 7 - aswVmm.sys is missing or corrupted - help please!
Post by: essexboy on August 23, 2014, 09:49:07 PM
Sorry we could not get a happy resolution
Title: Re: Can't boot Windows 7 - aswVmm.sys is missing or corrupted - help please!
Post by: bob3160 on August 24, 2014, 12:16:35 AM
Once you get everything re-installed, create an Image Backup to an external device. That way, the next time something like this happens,
you can simply go back to the last Image you created.
You know what they say about an ounce of prevention....
Title: Re: Can't boot Windows 7 - aswVmm.sys is missing or corrupted - help please!
Post by: SUNIL31 on June 07, 2020, 11:17:08 AM
Hello Mr. Essexboy,

I am also facing same problem can you please let me know how to proceed further.

below is the FRST.txt report

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 06-06-2020
Ran by SYSTEM on MININT-LE29ETM (07-06-2020 13:00:07)
Running from H:\
Platform: WIN_7 Service Pack 1 (X86) Language: English (United States)
Boot Mode: Recovery
ATTENTION: Could not load system hive.
The operation completed successfully.

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Winlogon: [Userinit]  <==== ATTENTION
HKLM\...\Winlogon: [Shell]  [ ] <=== ATTENTION
HKLM\...\InprocServer32: [Default-wbemess]  <==== ATTENTION
HKLM\...D6A79037F57F\InprocServer32: [Default-fastprox]  <==== ATTENTION
HKLM\Software\...\Winlogon\GPExtensions: [{827D319E-6EAC-11D2-A4EA-00C04F79F83A}] -> scecli.dll
SubSystems: [Windows] => "" <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ===================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-06-07 12:59 - 2020-06-07 13:00 - 000000000 ____D C:\FRST

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)


==================== KnownDLLs (Whitelisted) =========================


==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll IS MISSING <==== ATTENTION
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\dnsapi.dll => MD5 is legit
C:\Windows\System32\dllhost.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
C:\Windows\System32\codeintegrity\Bootcat.cache IS MISSING <==== ATTENTION

==================== Association (Whitelisted) =============

HKLM\...\.exe:  =>  <==== ATTENTION
HKLM\...\exefile\DefaultIcon:  <==== ATTENTION
HKLM\...\exefile\shell\open\command:  <==== ATTENTION

==================== Restore Points  =========================


==================== Memory info ===========================

Percentage of memory in use: 14%
Total physical RAM: 2998.85 MB
Available physical RAM: 2578.75 MB
Total Virtual: 2997.14 MB
Available Virtual: 2578.44 MB

==================== Drives ================================

Drive c: (other) (Fixed) (Total:166.16 GB) (Free:142.71 GB) NTFS ==>[drive with boot components (obtained from BCD)]
Drive d: () (Fixed) (Total:0.1 GB) (Free:0.08 GB) NTFS
Drive e: (New Volume) (Fixed) (Total:41.58 GB) (Free:41.45 GB) NTFS
Drive f: (OS) (Fixed) (Total:90.25 GB) (Free:63.06 GB) NTFS
Drive h: (WIN7AIO) (Removable) (Total:7.21 GB) (Free:3.36 GB) NTFS
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS


==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 298.1 GB) (Disk ID: 5C151F09)
Partition 1: (Not Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Active) - (Size=166.2 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=41.6 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=90.2 GB) - (Type=07 NTFS)

==========================================================
Disk: 1 (Size: 7.2 GB) (Disk ID: 00EB95C0)
Partition 1: (Active) - (Size=7.2 GB) - (Type=07 NTFS)
==================== End of FRST.txt ========================

Title: Re: Can't boot Windows 7 - aswVmm.sys is missing or corrupted - help please!
Post by: Pondus on June 07, 2020, 11:40:15 AM
@SUNIL31 you are posting in a topic from 2013/2014 and @Essexboy has retired



Title: Re: Can't boot Windows 7 - aswVmm.sys is missing or corrupted - help please!
Post by: SUNIL31 on June 07, 2020, 11:48:03 AM
Hello Pondus,

Can you please advise on this I am also facing subject issue
Title: Re: Can't boot Windows 7 - aswVmm.sys is missing or corrupted - help please!
Post by: DavidR on June 07, 2020, 11:50:51 AM
@ SUNIL31

Start your own new topic in the Viruses & Worms forum, don't hijack an old one almost 6 years old.

Attach logs rather than copy and paste, it makes it easier for whomever is trying to help.  Essexboy hasn't been active in the forums for some considerable time and you can't elect who you want to help, that is down to availability.