Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: avastuniverse on October 23, 2013, 09:51:02 PM

Title: After updating Avast engine and definitions, windows crashed and won't re-start
Post by: avastuniverse on October 23, 2013, 09:51:02 PM
Good afternoon-

Hoping someone/anyone here can help.

Was updating the Avast engine and definitions... was just about done and then the computer crashed and went blue screen.

When the computer attempted reboot, I got the following message:

"Windows failed to start - a recent hardware or software change might be the cause."


File: Windows/sytem32/Drivers/aswVmm.sys
status:  0xc000000d

Windows failed to load because a critical driver is missing or corrupt.


Please note I cannot boot at all - not in normal mode nor safe mode.  And of course, I didn't make a recovery disk.  Can anyone help?

Using Windows 7

Thanks for your help!

Title: Re: After updating Avast engine and definitions, windows crashed and won't re-start
Post by: Para-Noid on October 23, 2013, 10:12:08 PM
I will PM another member who knows where to download an ISO on a  flashdrive for Win7x64.
Have some patience please.
Title: Re: After updating Avast engine and definitions, windows crashed and won't re-start
Post by: Alikhan on October 23, 2013, 10:13:52 PM
Have you tried clean boot mode and last known good configuration? Is it possible to get to startup repair and do a system restore?
Title: Re: After updating Avast engine and definitions, windows crashed and won't re-start
Post by: avastuniverse on October 23, 2013, 10:25:17 PM
Alikhan - Thanks for the idea, but I already tried that.  No luck.  Can't get into anything that even looks like windows including system repair or last known config.

Para-Noid.  Thanks - waiting for advice.

Any and all other suggestions are most welcome!
Title: Re: After updating Avast engine and definitions, windows crashed and won't re-start
Post by: essexboy on October 23, 2013, 11:43:13 PM
http://forum.avast.com/index.php?topic=53253.0  go to this thread and scroll down to the section

If you cannot  Boot the computer

Please print these instruction out so that you know what you are doing

•Download OTLPENet.exe  to your desktop

•Download Farbar Recovery Scan Tool and save it to a flash drive.


I will then remove the corrupt driver for you
Title: Re: After updating Avast engine and definitions, windows crashed and won't re-start
Post by: avastuniverse on October 24, 2013, 12:39:54 PM
Thanks Essex!  OK, will do.
Title: Re: After updating Avast engine and definitions, windows crashed and won't re-start
Post by: avastuniverse on October 24, 2013, 06:43:57 PM
Essex - Should I just run it - or is there anything else?
Thanks!
Title: Re: After updating Avast engine and definitions, windows crashed and won't re-start
Post by: essexboy on October 24, 2013, 07:53:25 PM
If you use the reatogo CD to run FRST and attach that log here I can remove the corrupted file and its registry entries so that you can boot and repair Avast
Title: Re: After updating Avast engine and definitions, windows crashed and won't re-start
Post by: avastuniverse on November 05, 2013, 01:47:40 AM
Essexboy -
Thank you again for your help.  Will post in multiple entries since file exceeds post limit.
Here's the file - sorry it took so long - hadn't used the CD drive in a year.  Thought it was broken too... turns out it was just came unseated.  Please guide me through the rest Obi Wan!

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 23-10-2013 01
Ran by SYSTEM on REATOGO on 04-11-2013 20:38:03
Running from F:\
Windows 7 Ultimate (X86) OS Language: English(US)
Internet Explorer Version 8
Boot Mode: Recovery

The current controlset is ControlSet001
ATTENTION!:=====> If the system is bootable FRST could be run from normal or Safe mode to create a complete log.


ATTENTION!:=====> THE OPERATING SYSTEM IS A X64 SYSTEM BUT THE BOOT DISK THAT IS USED TO BOOT TO RECOVERY ENVIRONMENT IS A X86 SYSTEM DISK.
==================== Registry (Whitelisted) ==================

HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [112512 2010-03-13] (Microsoft Corporation)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKU\Default\...\Run: [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\Default User\...\Run: [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\KG\...\Run: [SkyDrive] - C:\Users\KG\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [ 2013-08-15] (Microsoft Corporation)
HKU\KG\...\Run: [GoogleDriveSync] - C:\Program Files (x86)\Google\Drive\googledrivesync.exe [ 2013-09-25] (Google)
HKU\KG\...\Run: [AdobeBridge] -

========================== Services (Whitelisted) =================

S2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [65640 2013-05-11] (Adobe Systems Incorporated)
S3 AdobeFlashPlayerUpdateSvc; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [257416 2013-10-11] (Adobe Systems Incorporated)
S2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2013-03-28] (Advanced Micro Devices, Inc.)
S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
S3 clr_optimization_v2.0.50727_64; C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe [89920 2009-06-10] (Microsoft Corporation)
S3 FontCache3.0.0.0; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [42840 2009-06-10] (Microsoft Corporation)
S2 gupdate; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [136176 2010-10-17] (Google Inc.)
S3 gupdatem; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [136176 2010-10-17] (Google Inc.)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation)
S3 idsvc; C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe [856384 2009-06-10] (Microsoft Corporation)
S3 MozillaMaintenance; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [118680 2013-10-01] (Mozilla Foundation)
S4 NetTcpPortSharing; C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe [116560 2009-06-10] (Microsoft Corporation)
S3 ose64; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [174440 2010-01-09] (Microsoft Corporation)
S3 PerfHost; C:\Windows\SysWow64\perfhost.exe [20992 2009-07-13] (Microsoft Corporation)
S3 RalinkRegistryWriter; C:\Program Files (x86)\Ralink\Common\RaRegistry.exe [374112 2010-11-11] (Ralink Technology, Corp.)
S3 RalinkRegistryWriter64; C:\Program Files (x86)\Ralink\Common\RaRegistry64.exe [451936 2010-11-11] (Ralink Technology, Corp.)
S2 RaMediaServer; C:\Program Files (x86)\Ralink\Common\RaMediaServer.exe [619872 2010-12-31] ()
S2 SkypeUpdate; C:\Program Files (x86)\Skype\Updater\Updater.exe [162672 2013-07-25] (Skype Technologies)
S3 Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [411432 2010-09-20] (Valve Corporation)
S4 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
S3 CrashPlanService; "G:\Windows7\Program Files\CrashPlan\CrashPlanService.exe"
S4 djangostackPostgreSQL; M:/BitNami/POSTGR~1/bin/pg_ctl.exe runservice -N "djangostackPostgreSQL" -D "M:/BitNami/POSTGR~1/data"
S4 djangostackPostgreSQL-1; C:/PROGRA~1/BITNAM~1/POSTGR~1/bin/pg_ctl.exe runservice -N "djangostackPostgreSQL-1" -D "C:/PROGRA~1/BITNAM~1/POSTGR~1/data"

==================== Drivers (Whitelisted) ====================

S3 amdiox64; C:\Windows\System32\DRIVERS\amdiox64.sys [46136 2010-02-18] (Advanced Micro Devices)
S3 androidusb; C:\Windows\System32\Drivers\androidusb.sys [32768 2010-04-29] (Google Inc)
S2 AODDriver4.2; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [57472 2012-04-09] (Advanced Micro Devices)
S2 aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [38984 2013-10-23] (AVAST Software)
S2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [84328 2013-10-23] (AVAST Software)
S1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-10-23] (AVAST Software)
S0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-10-23] ()
S1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1032416 2013-10-23] (AVAST Software)
S1 aswSP; C:\Windows\system32\drivers\aswSP.sys [409832 2013-10-23] (AVAST Software)
S1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [65264 2013-10-23] (AVAST Software)
S0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [205320 2013-10-23] ()
S3 AtiHDAudioService; C:\Windows\System32\drivers\AtihdW76.sys [96768 2013-02-14] (Advanced Micro Devices)
S3 b06bdrv; C:\Windows\system32\DRIVERS\bxvbda.sys [468480 2009-06-10] (Broadcom Corporation)
S3 b57nd60a; C:\Windows\System32\DRIVERS\b57nd60a.sys [270848 2009-06-10] (Broadcom Corporation)
S0 CLFS; C:\Windows\System32\CLFS.sys [367696 2009-07-13] (Microsoft Corporation)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
S3 IntcAzAudAddService; C:\Windows\System32\drivers\RTKVHD64.sys [2242720 2010-01-19] (Realtek Semiconductor Corp.)
S3 ksthunk; C:\Windows\system32\drivers\ksthunk.sys [20992 2009-07-13] (Microsoft Corporation)
S3 LEqdUsb; C:\Windows\System32\DRIVERS\LEqdUsb.Sys [74320 2010-08-24] (Logitech, Inc.)
S3 LHidEqd; C:\Windows\System32\DRIVERS\LHidEqd.Sys [13392 2010-08-24] (Logitech, Inc.)
S3 LUsbFilt; C:\Windows\System32\Drivers\LUsbFilt.Sys [41040 2010-08-24] (Logitech, Inc.)
S3 RTL8167; C:\Windows\System32\DRIVERS\Rt64win7.sys [215040 2009-05-22] (Realtek                                            )
S3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [31232 2011-04-26] (The OpenVPN Project)
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [51712 2010-09-28] (Apple, Inc.)
S3 motandroidusb; System32\Drivers\motoandroid.sys
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys
S5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [59904 2009-07-13] (Microsoft Corporation)
Title: Re: After updating Avast engine and definitions, windows crashed and won't re-start
Post by: avastuniverse on November 05, 2013, 01:48:03 AM

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-11-04 20:36 - 2013-11-04 20:36 - 00000000 ____D C:\FRST
2013-10-23 14:01 - 2013-10-23 14:01 - 00001970 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-10-16 13:17 - 2013-10-16 13:17 - 00000000 ____D C:\Users\KG\Documents\Fax
2013-10-11 17:16 - 2013-10-11 17:16 - 00002102 _____ C:\Users\KG\Desktop\nowintheusa2.html
2013-10-11 17:07 - 2013-10-11 17:07 - 00072364 _____ C:\Users\KG\Desktop\ARCHRISTY.ttf

==================== One Month Modified Files and Folders =======

2013-11-04 20:36 - 2013-11-04 20:36 - 00000000 ____D C:\FRST
2013-11-04 20:36 - 2013-04-26 15:43 - 00000000 ____D C:\users\KG
2013-10-23 14:01 - 2013-10-23 14:01 - 00001970 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-10-23 14:00 - 2013-04-26 17:14 - 01032416 _____ (AVAST Software) C:\Windows\System32\Drivers\aswSnx.sys
2013-10-23 14:00 - 2013-04-26 17:14 - 00409832 _____ (AVAST Software) C:\Windows\System32\Drivers\aswSP.sys
2013-10-23 14:00 - 2013-04-26 17:14 - 00205320 _____ C:\Windows\System32\Drivers\aswVmm.sys
2013-10-23 14:00 - 2013-04-26 17:14 - 00092544 _____ (AVAST Software) C:\Windows\System32\Drivers\aswRdr2.sys
2013-10-23 14:00 - 2013-04-26 17:14 - 00084328 _____ (AVAST Software) C:\Windows\System32\Drivers\aswMonFlt.sys
2013-10-23 14:00 - 2013-04-26 17:14 - 00065776 _____ C:\Windows\System32\Drivers\aswRvrt.sys
2013-10-23 14:00 - 2013-04-26 17:14 - 00065264 _____ (AVAST Software) C:\Windows\System32\Drivers\aswTdi.sys
2013-10-23 14:00 - 2013-04-26 17:14 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2013-10-23 14:00 - 2013-04-26 17:14 - 00038984 _____ (AVAST Software) C:\Windows\System32\Drivers\aswFsBlk.sys
2013-10-23 14:00 - 2011-01-17 10:45 - 00334648 _____ (AVAST Software) C:\Windows\System32\aswBoot.exe
2013-10-23 14:00 - 2010-09-27 01:27 - 01572828 _____ C:\Windows\WindowsUpdate.log
2013-10-23 13:58 - 2010-09-27 18:32 - 00000000 _____ C:\Windows\SysWOW64\config.nt
2013-10-23 13:56 - 2013-04-29 15:34 - 00000000 ___RD C:\Users\KG\SkyDrive
2013-10-23 13:55 - 2013-04-26 18:20 - 00005022 _____ C:\Windows\setupact.log
2013-10-21 11:37 - 2010-09-28 00:52 - 00803384 ____H C:\Windows\SysWOW64\mlfcache.dat
2013-10-21 08:58 - 2009-07-13 23:45 - 00016944 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-10-21 08:58 - 2009-07-13 23:45 - 00016944 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-10-21 08:54 - 2009-07-14 00:13 - 00718346 _____ C:\Windows\System32\PerfStringBackup.INI
2013-10-21 08:48 - 2009-07-13 23:45 - 09811672 _____ C:\Windows\System32\FNTCACHE.DAT
2013-10-21 08:47 - 2013-04-26 20:13 - 00006108 _____ C:\Windows\PFRO.log
2013-10-17 09:30 - 2010-09-27 19:39 - 00000000 ____D C:\Windows\Minidump
2013-10-16 13:18 - 2009-07-14 00:32 - 00000000 ____D C:\Windows\System32\FxsTmp
2013-10-16 13:17 - 2013-10-16 13:17 - 00000000 ____D C:\Users\KG\Documents\Fax
2013-10-14 16:08 - 2009-07-13 22:20 - 00000000 ___RD C:\Program Files (x86)
2013-10-11 17:20 - 2013-09-19 11:37 - 00000000 ____D C:\Users\KG\AppData\Roaming\FileZilla
2013-10-11 17:16 - 2013-10-11 17:16 - 00002102 _____ C:\Users\KG\Desktop\nowintheusa2.html
2013-10-11 17:08 - 2013-04-26 15:43 - 00569280 _____ C:\Users\KG\AppData\Local\GDIPFONTCACHEV1.DAT
2013-10-11 17:07 - 2013-10-11 17:07 - 00072364 _____ C:\Users\KG\Desktop\ARCHRISTY.ttf
2013-10-11 16:06 - 2013-04-26 17:32 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-10-11 16:06 - 2011-06-01 16:55 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-10-11 16:06 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\SysWOW64

==================== Known DLLs (Whitelisted) ============



==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe
[2011-04-28 07:19] - [2011-02-26 01:23] - 2870272 ____A (Microsoft Corporation) 0862495E0C825893DB75EF44FAEA8E93

C:\Windows\System32\winlogon.exe
[2010-09-27 01:40] - [2009-10-28 01:24] - 0389632 ____A (Microsoft Corporation) DA3E2A6FA9660CC75B471530CE88453A

C:\Windows\System32\wininit.exe
[2009-07-13 18:52] - [2009-07-13 20:39] - 0129024 ____A (Microsoft Corporation) 94355C28C1970635A31B3FE52EB7CEBA

C:\Windows\System32\svchost.exe
[2009-07-13 18:31] - [2009-07-13 20:39] - 0027136 ____A (Microsoft Corporation) C78655BC80301D76ED4FEF1C1EA40A7D

C:\Windows\System32\services.exe
[2009-07-13 18:19] - [2009-07-13 20:39] - 0328704 ____A (Microsoft Corporation) 24ACB7E5BE595468E3B9AA488B9B4FCB

C:\Windows\System32\User32.dll
[2009-07-13 18:38] - [2009-07-13 20:41] - 1008640 ____A (Microsoft Corporation) 72D7B3EA16946E8F0CF7458150031CC6

C:\Windows\System32\userinit.exe
[2009-07-13 18:50] - [2009-07-13 20:39] - 0030208 ____A (Microsoft Corporation) 6F8F1376A13114CC10C0E69274F5A4DE

C:\Windows\System32\Drivers\volsnap.sys
[2009-07-13 18:20] - [2009-07-13 20:45] - 0294992 ____A (Microsoft Corporation) 58F82EED8CA24B461441F9C3E4F0BF5C


==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK

==================== Restore Points  =========================

1
Restore point made on: 2013-10-23 13:59:43

==================== Memory info ===========================

Percentage of memory in use: 11%
Total physical RAM: 3071.23 MB
Available physical RAM: 2731.36 MB
Total Pagefile: 2895.88 MB
Available Pagefile: 2823.43 MB
Total Virtual: 2047.88 MB
Available Virtual: 1994.65 MB

==================== Drives ================================

Drive b: (RAMDisk) (Fixed) (Total:0.06 GB) (Free:0.06 GB) NTFS
Drive c: (Home) (Fixed) (Total:59.53 GB) (Free:13.44 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (Dev) (Fixed) (Total:49.29 GB) (Free:49.12 GB) NTFS
Drive e: (Office External 1TB) (Fixed) (Total:931.51 GB) (Free:477.06 GB) NTFS
Drive f: () (Removable) (Total:0.93 GB) (Free:0.93 GB) FAT
Drive g: (Programs) (Fixed) (Total:24.41 GB) (Free:24.28 GB) NTFS
Drive h: (Storage) (Fixed) (Total:159.18 GB) (Free:81.22 GB) NTFS
Drive x: (ReatogoPE) (CDROM) (Total:0.43 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 60 GB) (Disk ID: 359E015C)
Partition 1: (Active) - (Size=60 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 233 GB) (Disk ID: 1F6589C5)
Partition 1: (Not Active) - (Size=49 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=24 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=159 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (MBR Code: Windows XP) (Size: 932 GB) (Disk ID: 7F8A7D50)
Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS)

========================================================
Disk: 3 (Size: 963 MB) (Disk ID: 04DD5721)
Partition 1: (Active) - (Size=957 MB) - (Type=06)


LastRegBack: 2013-10-21 09:09

==================== End Of Log ============================
Title: Re: After updating Avast engine and definitions, windows crashed and won't re-start
Post by: essexboy on November 05, 2013, 03:21:16 PM
This will remove the registry entries for Avast and the corrupt file

On completion reboot and you will need to repair Avast.  Initially I would recommend trying repair from the control panel

Download the attached fixlist.txt to the same location as FRST
Run FRST as before and press fix.
On completion reboot

 
Title: Re: After updating Avast engine and definitions, windows crashed and won't re-start
Post by: avastuniverse on November 05, 2013, 05:21:07 PM
Thank you Essexboy!!  The computer is back up and running - and now with a brand spankin' new Avast 2014!
Title: Re: After updating Avast engine and definitions, windows crashed and won't re-start
Post by: essexboy on November 05, 2013, 06:55:12 PM
Grand, so all is now well :)
Title: Not quite fixed....Re: After updating Avast engine/definitions, windows crashed
Post by: avastuniverse on November 07, 2013, 09:16:41 PM
Essex - I spoke just a little too soon....
Now that I've re-installed Avast, it won't quite load. Everything seems to be installed, but despite registering etc. I'm "unprotected" and when I click "resolve all" or "start" from the status screen, nothing happens. Nothing - as if it doesn't know those are clickable.  And when I try to "connect" installation to my account, it keeps  telling me to that it could not connect to my device and to try again later...
Any ideas?
Title: Re: After updating Avast engine and definitions, windows crashed and won't re-start
Post by: essexboy on November 07, 2013, 11:24:26 PM
I may have damaged it more that I thought

Download Avast clear (http://www.avast.com/en-gb/uninstall-utility) to your Desktop.
Download the correct version of Avast 
Avast Free (http://files.avast.com/iavs9x/avast_free_antivirus_setup.exe)
Avast Pro (http://files.avast.com/iavs9x/avast_pro_antivirus_setup.exe)
Avast Internet Security (http://files.avast.com/iavs9x/avast_internet_security_setup.exe)
Avast Premier (http://files.avast.com/iavs9x/avast_premier_antivirus_setup.exe)
Disconnect from the net
Uninstall Avast via control panel

----------
Title: Re: After updating Avast engine and definitions, windows crashed and won't re-start
Post by: avastuniverse on November 08, 2013, 09:13:31 PM
OK!!  Now we're good.  Thanks again.
Title: Re: After updating Avast engine and definitions, windows crashed and won't re-start
Post by: essexboy on November 08, 2013, 09:50:55 PM
My pleasure :)
Title: Re: After updating Avast engine and definitions, windows crashed and won't re-start
Post by: bobskisan on January 29, 2014, 12:52:08 AM
I have the same problem. I have the log file so what do I do with it to fix the problem?
Title: Re: After updating Avast engine and definitions, windows crashed and won't re-start
Post by: thekochs on January 29, 2014, 01:24:32 AM
I have the same problem. I have the log file so what do I do with it to fix the problem?

....look at reply #4........
•Press Scan button.
•It will make a log (FRST.txt) on the flash drive. Please copy and paste it to your reply.


Post (attach) the log file.
I PMed Essexboy.
Title: Re: After updating Avast engine and definitions, windows crashed and won't re-start
Post by: bobskisan on January 29, 2014, 01:58:42 AM
Below is log.
thanks

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 28-01-2014
Ran by SYSTEM on REATOGO on 29-01-2014 11:44:25
Running from D:\
Windows 7 Ultimate (X86) OS Language: English(US)
Internet Explorer Version 11
Boot Mode: Recovery

The current controlset is ControlSet001
ATTENTION!:=====> If the system is bootable FRST could be run from normal or Safe mode to create a complete log.


ATTENTION!:=====> THE OPERATING SYSTEM IS A X64 SYSTEM BUT THE BOOT DISK THAT IS USED TO BOOT TO RECOVERY ENVIRONMENT IS A X86 SYSTEM DISK.

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Apoint] - C:\Program Files\DellTPad\Apoint.exe [342528 2009-06-18] (Alps Electric Co., Ltd.)
HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [AutoKMS] - C:\Windows\AutoKMS.exe [615936 2013-07-15] ()
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444904 2012-09-19] (Adobe Systems Incorporated)
HKLM\...\Run: [tvncontrol] - C:\Program Files\TightVNC\tvnserver.exe [2179056 2013-07-18] (GlavSoft LLC.)
HKLM\...\Run: [IntelliPoint] - c:\Program Files\Microsoft IntelliPoint\ipoint.exe [2417032 2011-07-31] (Microsoft Corporation)
HKLM\...\Run: [NVHotkey] - C:\Windows\system32\nvHotkey.dll [91240 2010-03-16] (NVIDIA Corporation)
HKU\Bob\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [ 2013-11-14] (Skype Technologies S.A.)
HKU\Bob\...\Run: [uTorrent] - C:\Users\Bob\AppData\Roaming\uTorrent\uTorrent.exe [ 2013-11-15] (BitTorrent Inc.)
HKU\Bob\...\Run: [DellSystemDetect] - C:\Users\Bob\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dell\Dell System Detect.appref-ms
HKU\Bob\...\Run: [OfficeSyncProcess] - C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE [ 2013-04-21] (Microsoft Corporation)
HKU\Bob\...\Run: [AdobeBridge] -
HKU\Bob\...\Run: [GarminExpressTrayApp] - C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [ 2013-12-29] (Garmin Ltd or its subsidiaries)
HKU\Bob\...\RunOnce: [Application Restart #0] - C:\Program Files\Microsoft Office\Office15\OUTLOOK.EXE [ 2013-12-02] (Microsoft Corporation)
HKU\Bob\...\RunOnce: [Application Restart #1] - C:\Users\Bob\AppData\Roaming\uTorrent\uTorrent.exe [ 2013-11-15] (BitTorrent Inc.)
HKU\Bob\...\RunOnce: [Application Restart #2] - C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE [ 2013-04-21] (Microsoft Corporation)
AppInit_DLLs: acaptuser64.dll => C:\Windows\system32\acaptuser64.dll [119160 2008-06-11] (Adobe Systems, Inc.)

========================== Services (Whitelisted) =================

S2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [65432 2013-12-21] (Adobe Systems Incorporated)
S3 AdobeFlashPlayerUpdateSvc; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [257416 2013-12-11] (Adobe Systems Incorporated)
S2 Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [43336 2014-01-06] (Apple Inc.)
S3 aspnet_state; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [51808 2013-09-11] (Microsoft Corporation)
S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-01-27] ()
S2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2255064 2013-10-28] (Broadcom Corporation.)
S3 clr_optimization_v2.0.50727_64; C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe [89920 2009-06-10] (Microsoft Corporation)
S2 clr_optimization_v4.0.30319_64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [124088 2013-09-11] (Microsoft Corporation)
S3 FontCache3.0.0.0; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [42856 2010-11-20] (Microsoft Corporation)
S2 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [250712 2013-12-29] (Garmin Ltd or its subsidiaries)
S2 gupdate; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [116648 2013-07-16] (Google Inc.)
S3 gupdatem; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [116648 2013-07-16] (Google Inc.)
S3 idsvc; C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe [856400 2010-11-20] (Microsoft Corporation)
S3 MozillaMaintenance; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [119408 2013-12-23] (Mozilla Foundation)
S4 NetMsmqActivator; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [139856 2013-09-11] (Microsoft Corporation)
S4 NetPipeActivator; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [139856 2013-09-11] (Microsoft Corporation)
S4 NetTcpActivator; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [139856 2013-09-11] (Microsoft Corporation)
S4 NetTcpPortSharing; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [139856 2013-09-11] (Microsoft Corporation)
S3 ose64; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [178824 2012-10-01] (Microsoft Corporation)
S3 PerfHost; C:\Windows\SysWow64\perfhost.exe [20992 2009-07-13] (Microsoft Corporation)
S2 ReflectService.exe; C:\Program Files\Macrium\Reflect\ReflectService.exe [1141360 2013-11-07] (Paramount Software UK Ltd)
S2 Skype C2C Service; C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3275136 2013-10-08] (Skype Technologies S.A.)
S2 SkypeUpdate; C:\Program Files (x86)\Skype\Updater\Updater.exe [171680 2013-09-04] (Skype Technologies)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-18] (Adobe Systems Incorporated)
S2 tvnserver; C:\Program Files\TightVNC\tvnserver.exe [2179056 2013-07-18] (GlavSoft LLC.)
S2 vncserver; C:\Program Files\RealVNC\VNC Server\vncserver.exe [4774208 2013-03-03] (RealVNC Ltd)
Title: Re: After updating Avast engine and definitions, windows crashed and won't re-start
Post by: bobskisan on January 29, 2014, 02:00:56 AM
Next page

==================== Drivers (Whitelisted) ====================

S3 ampa; C:\Windows\system32\ampa.sys [17008 2013-11-28] ()
S3 asmthub3; C:\Windows\system32\drivers\asmthub3.sys [139592 2012-11-08] (ASMedia Technology Inc)
S3 asmtxhci; C:\Windows\system32\drivers\asmtxhci.sys [418632 2012-11-08] (ASMedia Technology Inc)
S2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [78648 2014-01-27] (AVAST Software)
S1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2014-01-27] (AVAST Software)
S0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-01-27] ()
S1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1038072 2014-01-27] (AVAST Software)
S1 aswSP; C:\Windows\system32\drivers\aswSP.sys [421704 2014-01-27] ()
S3 aswStm; C:\Windows\system32\drivers\aswStm.sys [80184 2014-01-27] ()
S0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2014-01-27] ()
S3 b06bdrv; C:\Windows\system32\drivers\bxvbda.sys [529448 2012-01-24] (Broadcom Corporation)
S3 b06diag; C:\Windows\system32\drivers\bxdiaga.sys [88104 2012-03-08] (Broadcom Corporation)
S3 b57nd60a; C:\Windows\System32\DRIVERS\b57nd60a.sys [270848 2009-06-10] (Broadcom Corporation)
S3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [170712 2013-10-28] (Broadcom Corporation.)
S3 bcm44amd64; C:\Windows\System32\DRIVERS\b44amd64.sys [87552 2009-06-10] (Broadcom Corporation)
S3 BFN7x64; C:\Windows\system32\drivers\Xeno7x64.sys [157288 2012-02-22] (Bigfoot Networks, Inc.)
S3 btwampfl; C:\Windows\System32\DRIVERS\btwampfl.sys [166104 2013-10-28] (Broadcom Corporation.)
S3 bxfcoe; C:\Windows\system32\drivers\bxfcoe.sys [178216 2012-02-22] (Broadcom Corporation)
S3 bxois; C:\Windows\system32\drivers\bxois.sys [539176 2012-02-22] (Broadcom Corporation)
S3 ddmdrv; C:\Windows\system32\ddmdrv.sys [15288 2011-06-15] ()
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3341904 2012-03-25] (Broadcom Corporation)
S3 EtronHub3; C:\Windows\System32\Drivers\EtronHub3.sys [65152 2012-07-24] (Etron Technology Inc)
S3 EtronSTOR; C:\Windows\System32\Drivers\EtronSTOR.sys [32512 2012-07-24] (Etron Technology Inc)
S3 EtronXHCI; C:\Windows\System32\Drivers\EtronXHCI.sys [88832 2012-07-24] (Etron Technology Inc)
S3 ioatdma1; C:\Windows\System32\Drivers\qd162x64.sys [40144 2009-11-16] (Intel Corporation)
S3 ioatdma2; C:\Windows\System32\Drivers\qd262x64.sys [42192 2009-11-16] (Intel Corporation)
S3 iusb3hub; C:\Windows\system32\drivers\iusb3hub.sys [366216 2012-12-21] (Intel Corporation)
S3 iusb3xhc; C:\Windows\system32\drivers\iusb3xhc.sys [786056 2012-12-21] (Intel Corporation)
S3 ksthunk; C:\Windows\system32\drivers\ksthunk.sys [20992 2009-07-13] (Microsoft Corporation)
S3 NETwLv64; C:\Windows\System32\DRIVERS\NETwLv64.sys [7533568 2010-10-07] (Intel Corporation)
S3 nusb3hub; C:\Windows\system32\drivers\nusb3hub.sys [96768 2011-10-25] (Renesas Electronics Corporation)
S3 nusb3xhc; C:\Windows\system32\drivers\nusb3xhc.sys [213504 2011-10-25] (Renesas Electronics Corporation)
S3 Point64; C:\Windows\System32\DRIVERS\point64.sys [45416 2011-07-31] (Microsoft Corporation)
S0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56208 2011-11-02] (Rovi Corporation)
S2 rimmptsk; C:\Windows\System32\DRIVERS\rimmpx64.sys [55808 2007-03-18] (REDC)
S2 rimsptsk; C:\Windows\System32\DRIVERS\rimspx64.sys [54784 2009-09-03] (REDC)
S2 rismxdp; C:\Windows\System32\DRIVERS\rixdpx64.sys [57856 2009-09-03] (REDC)
S3 SrvHsfHDA; C:\Windows\System32\DRIVERS\VSTAZL6.SYS [292864 2009-06-10] (Conexant Systems, Inc.)
S3 SrvHsfV92; C:\Windows\System32\DRIVERS\VSTDPV6.SYS [1485312 2009-06-10] (Conexant Systems, Inc.)
S3 SrvHsfWinac; C:\Windows\System32\DRIVERS\VSTCNXT6.SYS [740864 2009-06-10] (Conexant Systems, Inc.)
S3 vncmirror; C:\Windows\System32\DRIVERS\vncmirror.sys [4608 2013-03-03] (RealVNC Ltd.)
S3 WDC_SAM; C:\Windows\System32\DRIVERS\wdcsam64.sys [14464 2008-05-06] (Western Digital Technologies)
S4 kl1; system32\DRIVERS\kl1.sys
S4 KLIF; system32\DRIVERS\klif.sys
S4 kltdi; system32\DRIVERS\kltdi.sys
S4 kneps; system32\DRIVERS\kneps.sys
S3 VGPU; System32\drivers\rdvgkmd.sys
S5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [59904 2009-07-13] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================
Title: Re: After updating Avast engine and definitions, windows crashed and won't re-start
Post by: bobskisan on January 29, 2014, 02:02:12 AM
next

==================== One Month Created Files and Folders ========

2014-01-29 10:00 - 2014-01-29 10:00 - 00000000 ____D C:\FRST
2014-01-27 22:58 - 2014-01-27 22:58 - 00353208 _____ C:\Windows\Minidump\012814-17347-01.dmp
2014-01-27 22:57 - 2014-01-27 22:57 - 01038072 _____ (AVAST Software) C:\Windows\System32\Drivers\aswSnx.sys
2014-01-27 22:57 - 2014-01-27 22:57 - 00421704 _____ C:\Windows\System32\Drivers\aswSP.sys
2014-01-27 22:57 - 2014-01-27 22:57 - 00334136 _____ C:\Windows\System32\aswBoot.exe
2014-01-27 22:57 - 2014-01-27 22:57 - 00207904 _____ C:\Windows\System32\Drivers\aswVmm.sys
2014-01-27 22:57 - 2014-01-27 22:57 - 00092544 _____ (AVAST Software) C:\Windows\System32\Drivers\aswRdr2.sys
2014-01-27 22:57 - 2014-01-27 22:57 - 00080184 _____ C:\Windows\System32\Drivers\aswStm.sys
2014-01-27 22:57 - 2014-01-27 22:57 - 00078648 _____ (AVAST Software) C:\Windows\System32\Drivers\aswMonFlt.sys
2014-01-27 22:57 - 2014-01-27 22:57 - 00065776 _____ C:\Windows\System32\Drivers\aswRvrt.sys
2014-01-27 22:57 - 2014-01-27 22:57 - 00043152 _____ C:\Windows\avastSS.scr
2014-01-27 22:57 - 2014-01-27 22:57 - 00000000 ____D C:\Program Files\AVAST Software
2014-01-27 22:52 - 2014-01-27 22:55 - 90578216 _____ (AVAST Software) C:\Users\Bob\Downloads\avast_free_antivirus_setup.exe
2014-01-27 15:24 - 2014-01-27 15:24 - 08126774 _____ C:\Users\Bob\Downloads\2014_01_27_Mon.avi
2014-01-26 23:03 - 2014-01-26 23:03 - 11538030 _____ C:\Users\Bob\Downloads\2014_01_25_Sat.avi
2014-01-26 23:02 - 2014-01-26 23:02 - 03866398 _____ C:\Users\Bob\Downloads\2014_01_27_Sun.avi
2014-01-26 22:14 - 2014-01-27 17:49 - 05016596 _____ C:\Users\Bob\Downloads\Hourly.mpg
2014-01-26 16:55 - 2014-01-26 16:55 - 00001783 _____ C:\Users\Public\Desktop\iTunes.lnk
2014-01-26 16:54 - 2014-01-26 16:55 - 00000000 ____D C:\Program Files\iTunes
2014-01-26 16:54 - 2014-01-26 16:54 - 00000000 ____D C:\Program Files\iPod
2014-01-22 16:56 - 2014-01-22 16:56 - 00005175 _____ C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log
2014-01-22 16:56 - 2013-12-18 05:04 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-01-22 01:18 - 2014-01-22 01:18 - 00000301 _____ C:\Windows\SynInst.log
2014-01-22 00:30 - 2014-01-22 00:30 - 00000000 ____H C:\Windows\System32\Drivers\Msft_Kernel_SynTP_01009.Wdf
2014-01-22 00:30 - 2014-01-22 00:30 - 00000000 ____D C:\Program Files\Synaptics
2014-01-22 00:24 - 2014-01-22 00:27 - 30754096 _____ C:\Users\Bob\Downloads\R230390.exe
2014-01-20 18:22 - 2014-01-20 18:22 - 00000000 ____D C:\Users\Bob\Downloads\PC World USA - January 2014
2014-01-20 18:17 - 2014-01-20 18:25 - 00000000 ____D C:\Users\Bob\Downloads\Scientific American - Full Year 2013 Issues Collection
2014-01-20 18:15 - 2014-01-20 18:15 - 00000000 ____D C:\Users\Bob\Downloads\Hacking - Firewalls And Networks How To Hack Into Remote Computers
2014-01-20 17:41 - 2014-01-20 17:41 - 00000000 ____D C:\Users\Bob\Downloads\Ключи к антивирусам Касперского 21.11.2013
2014-01-20 17:29 - 2014-01-20 18:40 - 00000000 ____D C:\Users\Bob\Downloads\Blood.Type.Unknown.2013.UNRATED.HDRiP.XViD.AC3-FiRE
2014-01-20 17:27 - 2014-01-20 17:51 - 00000000 ____D C:\Users\Bob\Downloads\The Hunger Games Catching Fire (2013) DVDRip XviD-MAXSPEED
2014-01-20 17:27 - 2014-01-20 17:28 - 00000000 ____D C:\Users\Bob\Downloads\Reasonable Doubt (2014) HDRiP XViD NODOUBT
2014-01-19 01:30 - 2014-01-19 01:30 - 00000000 ____D C:\Users\Bob\Downloads\Kaspersky Daily Activation Keys 04 January 2014 For Pure & Intenet Sequirity-T.R
2014-01-16 21:52 - 2014-01-16 22:19 - 00071452 _____ C:\Users\Bob\Documents\WARNING PLACARD WEIGHT 472.5.ai
2014-01-16 03:38 - 2014-01-16 04:03 - 00000000 ____D C:\Users\Bob\Downloads\Cloudy with a Chance of Meatballs 2 (2013) [3D] [HSBS]
2014-01-16 01:29 - 2014-01-16 01:44 - 00000000 ____D C:\Users\Bob\Documents\Garmin Aera 500
2014-01-16 01:27 - 2014-01-16 01:27 - 03749888 _____ C:\Users\Bob\Downloads\jaera-pac-1401.exe
2014-01-16 01:10 - 2014-01-16 01:10 - 00000000 ____D C:\Program Files\Garmin GPS Plugin
2014-01-16 01:08 - 2014-01-16 01:08 - 18864072 _____ C:\Users\Bob\Downloads\CommunicatorPlugin_410.exe
2014-01-16 01:04 - 2014-01-16 01:11 - 00000000 ____D C:\Users\Bob\AppData\Roaming\Garmin
2014-01-16 00:55 - 2014-01-16 00:55 - 00000000 ____D C:\Users\Bob\Documents\Garmin
2014-01-16 00:53 - 2014-01-16 00:53 - 00001888 _____ C:\Users\Public\Desktop\Garmin Express.lnk
2014-01-16 00:53 - 2014-01-16 00:53 - 00000000 ____D C:\Users\Bob\AppData\Local\Garmin
2014-01-16 00:50 - 2014-01-16 00:52 - 12160392 _____ (Garmin Ltd or its subsidiaries) C:\Users\Bob\Downloads\GarminExpress.exe
2014-01-15 19:57 - 2014-01-15 19:57 - 00000000 ____D C:\Users\Bob\Downloads\Video
2014-01-15 19:57 - 2014-01-15 19:57 - 00000000 ____D C:\Users\Bob\Downloads\Compressed
2014-01-15 05:41 - 2014-01-15 05:41 - 11758214 _____ C:\Users\Bob\Downloads\2014_01_15_Wed.avi
2014-01-14 18:01 - 2013-11-26 20:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbhub.sys
2014-01-14 18:01 - 2013-11-26 20:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbport.sys
2014-01-14 18:01 - 2013-11-26 20:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbccgp.sys
2014-01-14 18:01 - 2013-11-26 20:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbehci.sys
2014-01-14 18:01 - 2013-11-26 20:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbuhci.sys
2014-01-14 18:01 - 2013-11-26 20:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbohci.sys
2014-01-14 18:01 - 2013-11-26 20:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbd.sys
2014-01-14 18:01 - 2013-11-26 06:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\netio.sys
2014-01-14 18:01 - 2013-11-26 05:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\System32\win32k.sys
2014-01-14 05:34 - 2014-01-14 05:34 - 11774850 _____ C:\Users\Bob\Downloads\2014_01_14_Tue.avi
2014-01-13 22:32 - 2014-01-13 22:32 - 00000000 ____D C:\Users\Bob\AppData\Roaming\OpenCandy
2014-01-13 22:32 - 2014-01-13 22:32 - 00000000 ____D C:\Program Files\DriverPack Solution Installer 13
2014-01-13 22:30 - 2009-09-03 02:14 - 00057856 _____ (REDC) C:\Windows\System32\Drivers\rixdpx64.sys
2014-01-13 22:30 - 2009-09-03 01:59 - 00054784 _____ (REDC) C:\Windows\System32\Drivers\rimspx64.sys
2014-01-13 22:30 - 2007-07-24 22:48 - 00172032 _____ (Ricoh Company,Ltd) C:\Windows\System32\rixdicon.dll
2014-01-13 22:26 - 2014-01-13 22:29 - 06029935 _____ (Kuzyakov Artur) C:\Users\Bob\Downloads\Ricoh-WinAll-8xx_6.10.01.05-drp.exe
2014-01-12 16:22 - 2014-01-12 16:22 - 04812567 _____ (Tim Kosse) C:\Users\Bob\Downloads\FileZilla_3.7.3_win32-setup.exe
2014-01-12 00:10 - 2014-01-12 00:10 - 00000017 _____ C:\Users\Bob\AppData\Local\resmon.resmoncfg
2014-01-12 00:04 - 2014-01-12 00:05 - 09812520 _____ C:\Users\Bob\Downloads\R244796.exe
2014-01-11 23:54 - 2014-01-11 23:55 - 00001366 _____ C:\Windows\Synaptics.log
2014-01-11 23:50 - 2014-01-11 23:53 - 123787854 _____ C:\Users\Bob\Downloads\Synaptics_v17_0_19_C_XP32_Vista32_Win7-32_XP64_Vista64_Win7-64_Acme_Inc.zip
2014-01-10 05:53 - 2014-01-10 05:53 - 00000000 ____D C:\Users\Bob\AppData\Local\LogMeIn
2014-01-10 05:11 - 2014-01-10 05:11 - 00000000 ____D C:\Users\Bob\AppData\Local\LogMeIn Client
2014-01-09 19:36 - 2014-01-09 19:36 - 00000238 _____ C:\Users\Bob\Desktop\Filesiding spring url.txt.URL
2014-01-07 20:44 - 2014-01-07 20:44 - 00543992 _____ C:\Windows\Minidump\010814-13525-01.dmp
2014-01-07 01:25 - 2014-01-07 01:25 - 00506384 _____ C:\Windows\Minidump\010714-13197-01.dmp
2014-01-06 22:59 - 2014-01-06 23:22 - 00000000 ____D C:\Users\Bob\Downloads\Vikingdom (2013) [3D] [HSBS]
2014-01-06 22:00 - 2014-01-06 22:01 - 00000000 ____D C:\Users\Bob\Downloads\Carrie (2013) DVDRip XviD-MAXSPEED
2014-01-06 17:21 - 2014-01-08 04:56 - 00001024 ____H C:\AMTAG.BIN
2014-01-06 17:19 - 2014-01-06 17:19 - 00001305 _____ C:\Users\Public\Desktop\AOMEI Partition Assistant Pro Edition 5.5 (DEMO).lnk
2014-01-06 17:19 - 2013-11-29 04:42 - 01806960 _____ C:\Windows\ampa.exe
2014-01-06 17:19 - 2013-11-28 18:31 - 00017008 _____ C:\Windows\SysWOW64\ampa.sys
2014-01-06 17:19 - 2013-11-28 18:31 - 00017008 _____ C:\Windows\System32\ampa.sys
2014-01-06 17:17 - 2014-01-06 17:17 - 00000000 ____D C:\Users\Bob\AppData\Roaming\Mael
2014-01-06 17:16 - 2014-01-06 17:16 - 00001071 _____ C:\Users\Public\Desktop\AOMEI Dynamic Disk Manager Pro Edition.lnk
2014-01-06 17:16 - 2012-07-25 23:39 - 01293240 _____ C:\Windows\ddmmain.exe
2014-01-06 17:16 - 2011-06-15 05:10 - 00015288 _____ C:\Windows\System32\ddmdrv.sys
2014-01-06 17:16 - 2011-06-15 05:09 - 00012728 _____ C:\Windows\SysWOW64\ddmdrv.sys
2014-01-06 17:15 - 2014-01-06 17:16 - 19319584 _____ C:\Users\Bob\Downloads\DM_ProDemo.zip
2014-01-06 17:10 - 2014-01-06 17:10 - 00000885 _____ C:\Users\Public\Desktop\HxD.lnk
2014-01-06 17:09 - 2014-01-06 17:09 - 00872029 _____ C:\Users\Bob\Downloads\HxDSetupEN.zip
2014-01-06 15:31 - 2014-01-06 15:31 - 03846322 _____ C:\Users\Bob\Downloads\PCRange7800NV6_1.06h(2).afw
2014-01-04 20:52 - 2014-01-04 20:52 - 00000127 _____ C:\Users\Bob\Documents\PingScan.bat
2014-01-03 06:04 - 2014-01-03 06:04 - 00000000 ____D C:\Users\Bob\Documents\birth certificates
2014-01-03 04:39 - 2014-01-03 04:39 - 00000000 ____D C:\Users\Bob\Documents\Paragliding
Title: Re: After updating Avast engine and definitions, windows crashed and won't re-start
Post by: bobskisan on January 29, 2014, 02:04:02 AM
Next

==================== One Month Modified Files and Folders =======

2014-01-29 10:00 - 2014-01-29 10:00 - 00000000 ____D C:\FRST
2014-01-29 10:00 - 2013-07-15 04:54 - 00000000 ____D C:\users\Bob
2014-01-29 10:00 - 2009-07-13 22:20 - 00000000 ___RD C:\users\Public
2014-01-28 18:15 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\System32\LogFiles
2014-01-27 23:04 - 2013-07-16 05:57 - 00000000 ____D C:\Users\Bob\AppData\Roaming\uTorrent
2014-01-27 23:04 - 2013-07-15 16:54 - 00000000 ____D C:\Users\Bob\Documents\Outlook Files
2014-01-27 23:04 - 2013-07-15 04:39 - 01767519 _____ C:\Windows\WindowsUpdate.log
2014-01-27 23:04 - 2009-07-13 22:20 - 00000000 ___RD C:\Program Files (x86)
2014-01-27 23:03 - 2009-07-13 23:45 - 00026576 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-27 23:03 - 2009-07-13 23:45 - 00026576 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-27 23:02 - 2009-07-14 00:13 - 00782470 _____ C:\Windows\System32\PerfStringBackup.INI
2014-01-27 22:59 - 2013-07-16 05:50 - 00000000 ____D C:\Users\Bob\AppData\Roaming\Skype
2014-01-27 22:58 - 2014-01-27 22:58 - 00353208 _____ C:\Windows\Minidump\012814-17347-01.dmp
2014-01-27 22:58 - 2013-09-16 17:58 - 00000000 ____D C:\Users\Bob\AppData\Local\Deployment
2014-01-27 22:58 - 2013-07-16 19:47 - 00000000 ____D C:\Windows\Minidump
2014-01-27 22:58 - 2013-07-16 19:46 - 591515955 _____ C:\Windows\MEMORY.DMP
2014-01-27 22:58 - 2010-11-20 22:47 - 00376822 _____ C:\Windows\PFRO.log
2014-01-27 22:58 - 2009-07-13 23:51 - 00011824 _____ C:\Windows\setupact.log
2014-01-27 22:57 - 2014-01-27 22:57 - 01038072 _____ (AVAST Software) C:\Windows\System32\Drivers\aswSnx.sys
2014-01-27 22:57 - 2014-01-27 22:57 - 00421704 _____ C:\Windows\System32\Drivers\aswSP.sys
2014-01-27 22:57 - 2014-01-27 22:57 - 00334136 _____ C:\Windows\System32\aswBoot.exe
2014-01-27 22:57 - 2014-01-27 22:57 - 00207904 _____ C:\Windows\System32\Drivers\aswVmm.sys
2014-01-27 22:57 - 2014-01-27 22:57 - 00092544 _____ (AVAST Software) C:\Windows\System32\Drivers\aswRdr2.sys
2014-01-27 22:57 - 2014-01-27 22:57 - 00080184 _____ C:\Windows\System32\Drivers\aswStm.sys
2014-01-27 22:57 - 2014-01-27 22:57 - 00078648 _____ (AVAST Software) C:\Windows\System32\Drivers\aswMonFlt.sys
2014-01-27 22:57 - 2014-01-27 22:57 - 00065776 _____ C:\Windows\System32\Drivers\aswRvrt.sys
2014-01-27 22:57 - 2014-01-27 22:57 - 00043152 _____ C:\Windows\avastSS.scr
2014-01-27 22:57 - 2014-01-27 22:57 - 00000000 ____D C:\Program Files\AVAST Software
2014-01-27 22:55 - 2014-01-27 22:52 - 90578216 _____ (AVAST Software) C:\Users\Bob\Downloads\avast_free_antivirus_setup.exe
2014-01-27 17:49 - 2014-01-26 22:14 - 05016596 _____ C:\Users\Bob\Downloads\Hourly.mpg
2014-01-27 15:24 - 2014-01-27 15:24 - 08126774 _____ C:\Users\Bob\Downloads\2014_01_27_Mon.avi
2014-01-27 15:23 - 2013-07-16 17:44 - 00002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2014-01-26 23:03 - 2014-01-26 23:03 - 11538030 _____ C:\Users\Bob\Downloads\2014_01_25_Sat.avi
2014-01-26 23:02 - 2014-01-26 23:02 - 03866398 _____ C:\Users\Bob\Downloads\2014_01_27_Sun.avi
2014-01-26 23:02 - 2013-07-16 20:52 - 00000000 ____D C:\Users\Bob\AppData\Roaming\FileZilla
2014-01-26 16:55 - 2014-01-26 16:55 - 00001783 _____ C:\Users\Public\Desktop\iTunes.lnk
2014-01-26 16:55 - 2014-01-26 16:54 - 00000000 ____D C:\Program Files\iTunes
2014-01-26 16:55 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\SysWOW64
2014-01-26 16:54 - 2014-01-26 16:54 - 00000000 ____D C:\Program Files\iPod
2014-01-22 16:56 - 2014-01-22 16:56 - 00005175 _____ C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log
2014-01-22 01:30 - 2013-07-15 04:58 - 00040784 _____ C:\Windows\DPINST.LOG
2014-01-22 01:30 - 2013-07-15 04:58 - 00000000 ____D C:\Program Files\DellTPad
2014-01-22 01:18 - 2014-01-22 01:18 - 00000301 _____ C:\Windows\SynInst.log
2014-01-22 01:18 - 2013-07-15 04:54 - 00000000 ____D C:\Users\Bob\AppData\Local\VirtualStore
2014-01-22 00:30 - 2014-01-22 00:30 - 00000000 ____H C:\Windows\System32\Drivers\Msft_Kernel_SynTP_01009.Wdf
2014-01-22 00:30 - 2014-01-22 00:30 - 00000000 ____D C:\Program Files\Synaptics
2014-01-22 00:27 - 2014-01-22 00:24 - 30754096 _____ C:\Users\Bob\Downloads\R230390.exe
2014-01-21 22:20 - 2013-07-16 06:50 - 00000000 ____D C:\Users\Bob\AppData\Roaming\vlc
2014-01-20 18:49 - 2013-07-18 18:42 - 00002140 _____ C:\Users\Public\Desktop\Adobe FormsCentral.lnk
2014-01-20 18:49 - 2013-07-18 18:42 - 00002026 _____ C:\Users\Public\Desktop\Adobe Acrobat XI Pro.lnk
2014-01-20 18:40 - 2014-01-20 17:29 - 00000000 ____D C:\Users\Bob\Downloads\Blood.Type.Unknown.2013.UNRATED.HDRiP.XViD.AC3-FiRE
2014-01-20 18:25 - 2014-01-20 18:17 - 00000000 ____D C:\Users\Bob\Downloads\Scientific American - Full Year 2013 Issues Collection
2014-01-20 18:22 - 2014-01-20 18:22 - 00000000 ____D C:\Users\Bob\Downloads\PC World USA - January 2014
2014-01-20 18:15 - 2014-01-20 18:15 - 00000000 ____D C:\Users\Bob\Downloads\Hacking - Firewalls And Networks How To Hack Into Remote Computers
2014-01-20 17:51 - 2014-01-20 17:27 - 00000000 ____D C:\Users\Bob\Downloads\The Hunger Games Catching Fire (2013) DVDRip XviD-MAXSPEED
2014-01-20 17:41 - 2014-01-20 17:41 - 00000000 ____D C:\Users\Bob\Downloads\Ключи к антивирусам Касперского 21.11.2013
2014-01-20 17:28 - 2014-01-20 17:27 - 00000000 ____D C:\Users\Bob\Downloads\Reasonable Doubt (2014) HDRiP XViD NODOUBT
2014-01-19 05:51 - 2013-12-28 18:07 - 00000000 ____D C:\Users\Bob\AppData\Roaming\newnext.me
2014-01-19 04:53 - 2013-12-28 18:07 - 00000000 ____D C:\Users\Bob\AppData\Local\genienext
2014-01-19 03:31 - 2013-11-25 17:50 - 00008779 _____ C:\Users\Bob\Documents\Flight Log.xlsx
2014-01-19 01:30 - 2014-01-19 01:30 - 00000000 ____D C:\Users\Bob\Downloads\Kaspersky Daily Activation Keys 04 January 2014 For Pure & Intenet Sequirity-T.R
2014-01-16 22:19 - 2014-01-16 21:52 - 00071452 _____ C:\Users\Bob\Documents\WARNING PLACARD WEIGHT 472.5.ai
2014-01-16 13:06 - 2009-07-13 23:45 - 05060552 _____ C:\Windows\System32\FNTCACHE.DAT
2014-01-16 12:49 - 2013-07-18 00:19 - 00000000 ____D C:\Windows\System32\MRT
2014-01-16 12:49 - 2009-07-13 21:34 - 00000478 _____ C:\Windows\win.ini
Title: Re: After updating Avast engine and definitions, windows crashed and won't re-start
Post by: bobskisan on January 29, 2014, 02:04:49 AM
2014-01-16 12:47 - 2013-07-15 04:50 - 86054176 _____ (Microsoft Corporation) C:\Windows\System32\MRT.exe
2014-01-16 04:03 - 2014-01-16 03:38 - 00000000 ____D C:\Users\Bob\Downloads\Cloudy with a Chance of Meatballs 2 (2013) [3D] [HSBS]
2014-01-16 01:44 - 2014-01-16 01:29 - 00000000 ____D C:\Users\Bob\Documents\Garmin Aera 500
2014-01-16 01:27 - 2014-01-16 01:27 - 03749888 _____ C:\Users\Bob\Downloads\jaera-pac-1401.exe
2014-01-16 01:11 - 2014-01-16 01:04 - 00000000 ____D C:\Users\Bob\AppData\Roaming\Garmin
2014-01-16 01:10 - 2014-01-16 01:10 - 00000000 ____D C:\Program Files\Garmin GPS Plugin
2014-01-16 01:08 - 2014-01-16 01:08 - 18864072 _____ C:\Users\Bob\Downloads\CommunicatorPlugin_410.exe
2014-01-16 00:55 - 2014-01-16 00:55 - 00000000 ____D C:\Users\Bob\Documents\Garmin
2014-01-16 00:53 - 2014-01-16 00:53 - 00001888 _____ C:\Users\Public\Desktop\Garmin Express.lnk
2014-01-16 00:53 - 2014-01-16 00:53 - 00000000 ____D C:\Users\Bob\AppData\Local\Garmin
2014-01-16 00:52 - 2014-01-16 00:50 - 12160392 _____ (Garmin Ltd or its subsidiaries) C:\Users\Bob\Downloads\GarminExpress.exe
2014-01-15 19:57 - 2014-01-15 19:57 - 00000000 ____D C:\Users\Bob\Downloads\Video
2014-01-15 19:57 - 2014-01-15 19:57 - 00000000 ____D C:\Users\Bob\Downloads\Compressed
2014-01-15 15:23 - 2013-09-05 02:06 - 00001070 _____ C:\Users\Public\Desktop\VLC media player.lnk
2014-01-15 05:41 - 2014-01-15 05:41 - 11758214 _____ C:\Users\Bob\Downloads\2014_01_15_Wed.avi
2014-01-14 05:34 - 2014-01-14 05:34 - 11774850 _____ C:\Users\Bob\Downloads\2014_01_14_Tue.avi
2014-01-14 00:02 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\Microsoft.NET
2014-01-13 22:32 - 2014-01-13 22:32 - 00000000 ____D C:\Users\Bob\AppData\Roaming\OpenCandy
2014-01-13 22:32 - 2014-01-13 22:32 - 00000000 ____D C:\Program Files\DriverPack Solution Installer 13
2014-01-13 22:32 - 2013-09-28 02:46 - 00000000 ____D C:\Program Files\DIFX
2014-01-13 22:29 - 2014-01-13 22:26 - 06029935 _____ (Kuzyakov Artur) C:\Users\Bob\Downloads\Ricoh-WinAll-8xx_6.10.01.05-drp.exe
2014-01-13 22:02 - 2013-09-16 17:59 - 00766780 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2014-01-13 20:06 - 2013-09-17 18:27 - 00000000 ____D C:\Users\Bob\AppData\Local\Apple Computer
2014-01-13 18:04 - 2011-04-12 03:28 - 00000000 ___RD C:\Users\Public\Recorded TV
2014-01-12 16:22 - 2014-01-12 16:22 - 04812567 _____ (Tim Kosse) C:\Users\Bob\Downloads\FileZilla_3.7.3_win32-setup.exe
2014-01-12 00:10 - 2014-01-12 00:10 - 00000017 _____ C:\Users\Bob\AppData\Local\resmon.resmoncfg
2014-01-12 00:05 - 2014-01-12 00:04 - 09812520 _____ C:\Users\Bob\Downloads\R244796.exe
2014-01-11 23:55 - 2014-01-11 23:54 - 00001366 _____ C:\Windows\Synaptics.log
2014-01-11 23:53 - 2014-01-11 23:50 - 123787854 _____ C:\Users\Bob\Downloads\Synaptics_v17_0_19_C_XP32_Vista32_Win7-32_XP64_Vista64_Win7-64_Acme_Inc.zip
2014-01-10 05:53 - 2014-01-10 05:53 - 00000000 ____D C:\Users\Bob\AppData\Local\LogMeIn
2014-01-10 05:11 - 2014-01-10 05:11 - 00000000 ____D C:\Users\Bob\AppData\Local\LogMeIn Client
2014-01-09 19:36 - 2014-01-09 19:36 - 00000238 _____ C:\Users\Bob\Desktop\Filesiding spring url.txt.URL
2014-01-08 04:56 - 2014-01-06 17:21 - 00001024 ____H C:\AMTAG.BIN
2014-01-07 20:44 - 2014-01-07 20:44 - 00543992 _____ C:\Windows\Minidump\010814-13525-01.dmp
2014-01-07 01:25 - 2014-01-07 01:25 - 00506384 _____ C:\Windows\Minidump\010714-13197-01.dmp
2014-01-06 23:22 - 2014-01-06 22:59 - 00000000 ____D C:\Users\Bob\Downloads\Vikingdom (2013) [3D] [HSBS]
2014-01-06 22:01 - 2014-01-06 22:00 - 00000000 ____D C:\Users\Bob\Downloads\Carrie (2013) DVDRip XviD-MAXSPEED
2014-01-06 17:19 - 2014-01-06 17:19 - 00001305 _____ C:\Users\Public\Desktop\AOMEI Partition Assistant Pro Edition 5.5 (DEMO).lnk
2014-01-06 17:17 - 2014-01-06 17:17 - 00000000 ____D C:\Users\Bob\AppData\Roaming\Mael
2014-01-06 17:16 - 2014-01-06 17:16 - 00001071 _____ C:\Users\Public\Desktop\AOMEI Dynamic Disk Manager Pro Edition.lnk
2014-01-06 17:16 - 2014-01-06 17:15 - 19319584 _____ C:\Users\Bob\Downloads\DM_ProDemo.zip
2014-01-06 17:10 - 2014-01-06 17:10 - 00000885 _____ C:\Users\Public\Desktop\HxD.lnk
2014-01-06 17:09 - 2014-01-06 17:09 - 00872029 _____ C:\Users\Bob\Downloads\HxDSetupEN.zip
2014-01-06 15:31 - 2014-01-06 15:31 - 03846322 _____ C:\Users\Bob\Downloads\PCRange7800NV6_1.06h(2).afw
2014-01-04 20:52 - 2014-01-04 20:52 - 00000127 _____ C:\Users\Bob\Documents\PingScan.bat
2014-01-03 06:04 - 2014-01-03 06:04 - 00000000 ____D C:\Users\Bob\Documents\birth certificates
2014-01-03 04:39 - 2014-01-03 04:39 - 00000000 ____D C:\Users\Bob\Documents\Paragliding

Some content of TEMP:
====================
C:\Users\Bob\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe


==================== Known DLLs (Whitelisted) ============


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe
[2013-06-16 21:24] - [2013-06-16 21:24] - 2871808 ____A (Microsoft Corporation) 332FEAB1435662FC6C672E25BEB37BE3

C:\Windows\System32\winlogon.exe
[2010-11-20 22:24] - [2010-11-20 22:24] - 0390656 ____A (Microsoft Corporation) 1151B1BAA6F350B1DB6598E0FEA7C457

C:\Windows\System32\wininit.exe
[2009-07-13 18:52] - [2009-07-13 20:39] - 0129024 ____A (Microsoft Corporation) 94355C28C1970635A31B3FE52EB7CEBA

C:\Windows\System32\svchost.exe
[2009-07-13 18:31] - [2009-07-13 20:39] - 0027136 ____A (Microsoft Corporation) C78655BC80301D76ED4FEF1C1EA40A7D

C:\Windows\System32\services.exe
[2009-07-13 18:19] - [2009-07-13 20:39] - 0328704 ____A (Microsoft Corporation) 24ACB7E5BE595468E3B9AA488B9B4FCB

C:\Windows\System32\User32.dll
[2010-11-20 22:24] - [2010-11-20 22:24] - 1008128 ____A (Microsoft Corporation) FE70103391A64039A921DBFFF9C7AB1B

C:\Windows\System32\userinit.exe
[2010-11-20 22:24] - [2010-11-20 22:24] - 0030720 ____A (Microsoft Corporation) BAFE84E637BF7388C96EF48D4D3FDD53

C:\Windows\System32\rpcss.dll
[2010-11-20 22:24] - [2010-11-20 22:24] - 0512000 ____A (Microsoft Corporation) 5C627D1B1138676C0A7AB2C2C190D123

 ATTENTION ======> If the system is having audio adware rpcss.dll is patched. Google the MD5, if the MD5 is unique the file is infected.
C:\Windows\System32\Drivers\volsnap.sys
[2010-11-20 22:23] - [2010-11-20 22:23] - 0295808 ____A (Microsoft Corporation) 0D08D2F3B3FF84E433346669B5E0F639
Title: Re: After updating Avast engine and definitions, windows crashed and won't re-start
Post by: bobskisan on January 29, 2014, 02:06:09 AM
==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK

==================== Restore Points  =========================


==================== Memory info ===========================

Percentage of memory in use: 9%
Total physical RAM: 3581.97 MB
Available physical RAM: 3233.9 MB
Total Pagefile: 3403.63 MB
Available Pagefile: 3326.03 MB
Total Virtual: 2047.88 MB
Available Virtual: 1992.71 MB

==================== Drives ================================

Drive b: (RAMDisk) (Fixed) (Total:0.06 GB) (Free:0.06 GB) NTFS
Drive c: () (Fixed) (Total:465.76 GB) (Free:161.39 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (Win7.SP1.x64.en-US.Oct2013) (Removable) (Total:7.56 GB) (Free:3.14 GB) NTFS
Drive x: (ReatogoPE) (CDROM) (Total:0.43 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 8 GB) (Disk ID: 0FC00F9C)
Partition 1: (Active) - (Size=8 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 466 GB) (Disk ID: 861F6468)
Partition 1: (Active) - (Size=466 GB) - (Type=07 NTFS)


LastRegBack: 2014-01-19 02:56

==================== End Of Log ===========================
Title: Re: After updating Avast engine and definitions, windows crashed and won't re-start
Post by: thekochs on January 29, 2014, 03:26:42 AM
OK...thx...but you can just upload the .txt file instead of having to paste all of it. :)
Essexboy is UK so he will not see until tomorrow his time.
Title: Re: After updating Avast engine and definitions, windows crashed and won't re-start
Post by: essexboy on January 29, 2014, 03:57:42 PM
You also appear to have Kaspersky on the system

Download the attached fixlist.txt to the same location as FRST
Run FRST and press FIX

Now try a reboot
Title: Re: After updating Avast engine and definitions, windows crashed and won't re-start
Post by: bobskisan on January 30, 2014, 12:40:50 AM
I have run the fix and I now get to the logon screen but the mouse will not work and I cant type the password in.
I have run FRST again and attached the FRST.txt file.
Thanks for the help
Title: Re: After updating Avast engine and definitions, windows crashed and won't re-start
Post by: essexboy on January 30, 2014, 03:05:55 PM
Is it a USB mouse ?   
Title: Re: After updating Avast engine and definitions, windows crashed and won't re-start
Post by: bobskisan on January 30, 2014, 11:05:57 PM
It's the touchpad on a Dell Inspiron 1720. Also the keyboard doesn't work at all at the logon screen. Both work properly when I boot from the DVD.
thanks
Bob
Title: Re: After updating Avast engine and definitions, windows crashed and won't re-start
Post by: essexboy on January 30, 2014, 11:26:17 PM
Can you get to safe mode ?  The mouse/keyboard should work there

Once there then restore the system to an earlier time
Title: Re: After updating Avast engine and definitions, windows crashed and won't re-start
Post by: bobskisan on February 01, 2014, 01:15:17 AM
I've tried to goto safe mode but they don't work at the logon screen there either.
It looks like I may have to reinstall windows.

Thanks
Bob
Title: Re: After updating Avast engine and definitions, windows crashed and won't re-start
Post by: thekochs on February 01, 2014, 03:43:38 AM
Essexboy, I am by far no expert but following along to learn....I'm a very techy guy though.
I looked at your Fixlist (post #26) and appears to be reg change to last....and new FRST text after from OP still showed Avast was on his system.  Shouldn't a FRST fix removing Avast be in order ?
Title: Re: After updating Avast engine and definitions, windows crashed and won't re-start
Post by: essexboy on February 01, 2014, 01:28:57 PM
I reset the system to the last registry backup

I could remove Avast but I do not feel it will fix the problem

Do you have a USB mouse that you can plugin and see if that works
Title: Re: After updating Avast engine and definitions, windows crashed and won't re-start
Post by: thekochs on February 01, 2014, 11:29:06 PM
I reset the system to the last registry backup

I could remove Avast but I do not feel it will fix the problem

Do you have a USB mouse that you can plugin and see if that works

I'm in learning mode so sorry for dumb question but OP's original issue was....
File: Windows/sytem32/Drivers/aswVmm.sys
......so since this shouldn't this driver be removed ?
I ask since it shows in his post #27 FRST list
2014-01-27 22:57 - 2014-01-27 22:57 - 00207904 _____ C:\Windows\System32\Drivers\aswVmm.sys
....like you not sure since he is now getting to login and no mouse/etc. response...... ???
Title: Re: After updating Avast engine and definitions, windows crashed and won't re-start
Post by: essexboy on February 02, 2014, 12:07:02 AM
If the driver was corrupt the last reg back would not have worked.  Hence I did not need to remove it

Also Avast has a keyboard driver so removal could stop the keyboard working

Which is why I suggested a USB mouse 
Title: Re: After updating Avast engine and definitions, windows crashed and won't re-start
Post by: bobskisan on February 02, 2014, 03:50:13 AM
I have tried a usb mouse and keyboard but they don't work either.

Bob
Title: Re: After updating Avast engine and definitions, windows crashed and won't re-start
Post by: essexboy on February 02, 2014, 01:39:34 PM
OK lets remove Avast

Download the attached fixlist.txt to the same location as FRST
Run FRST and press FIX
Then reboot
Title: Re: After updating Avast engine and definitions, windows crashed and won't re-start
Post by: bobskisan on February 03, 2014, 02:23:40 AM
Have run this fixlist but still no mouse or keyboard.
Title: Re: After updating Avast engine and definitions, windows crashed and won't re-start
Post by: essexboy on February 03, 2014, 03:17:53 PM
Could you download the following file http://www.dell.com/support/drivers/us/en/19/DriverDetails/Product/inspiron-1720?driverId=XV8FK&fileid=2731100044

1.Double-click the new icon on the desktop
2.The Self-Extracting window appears and prompts you to extract or unzip to "C:\DELL\DRIVERS\Rxxxxx". (Where 'Rxxxx' is the name of the file to be downloaded). Write down this path so the executable (I.e.Setup.exe) file can be found later.
3. The Self-Extractor window appears.
4. Click OK.
5. After completing the file extraction, if the Self-Extractor window is still open, close it.
6. Copy the entire folder to a USB drive
7. Reboot to the reatogo desktop
8. Insert the USB and copy the folder to the root C:\ drive
9. Go to "C:\DELL\DRIVERS\Rxxxxx" (where 'Rxxxx" is the name of the file) in the Open textbox and then click OK.
10. Follow the on-screen installation instructions.       
Title: Re: After updating Avast engine and definitions, windows crashed and won't re-start
Post by: bobskisan on February 06, 2014, 06:44:46 AM
I have tried this and the driver will not install. I think I will just have to reinstall windows.


Thanks for the help

Bob