Avast WEBforum
Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: REDACTED on August 06, 2015, 03:41:49 PM
-
Hi, firstly sorry if this isnt the correct place to put this post.
My computer wouldnt start this morning so i tried to boot into safe mode but it stops at the line
Loaded:\windows\System32\Drivers\aswRvrt.sys
googling this line brung me here, not sure what else to say or what information is required but to start off i'll tell you i'm running Windows 7 Pro 64 bit and we can move on from there. Guess all i can do for now is await any replies. Hope someone can help.
-
See: "If you cannot Boot the computer"
Instructions: http://forum.avast.com/index.php?topic=53253.0
Edit: As Essexboy joined the topic, follow his advice directly.
-
Download the following three programmes to your desktop :
1. Rufus (http://rufus.akeo.ie/)
For 64bit systems
2. Windows 7 64bit RC I will PM link
3. Farbar Recovery Scan Tool x64 (http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/)
Insert the USB stick Then run Rufus
(https://dl.dropbox.com/u/73555776/RufusISO.JPG)
Select the ISO file on the desktop via the ISO icon.
Press Start Burn
Then copy FRST to the same USB
(http://dl.dropbox.com/u/73555776/frstwintoboot.JPG)
Insert the USB into the sick computer and start the computer. First ensuring that the system is set to boot from USB
Note: If you are not sure how to do that follow the instructions Here (http://lifehacker.com/5991848/how-to-boot-from-a-cd-or-usb-drive-on-any-pc)
Windows 7 and Vista screenshots
When you reboot you will see this.
Click repair my computer
(http://i1224.photobucket.com/albums/ee362/Essexboy3/RepairVista_7275.jpg)
Select your operating system
(http://i1224.photobucket.com/albums/ee362/Essexboy3/RepairVista_7277202.jpg)
Select Command prompt
(http://i1224.photobucket.com/albums/ee362/Essexboy3/RepairVista_7277.jpg)
At the command prompt type the following :
notepad and press Enter.
The notepad opens. Under File menu select Open.
Select "Computer" and find your flash drive letter and close the notepad.
In the command window type e:\frst64.exe or e:\frst.exe dependant on system
and press Enter
Note: Replace letter e with the drive letter of your flash drive.
The tool will start to run.
When the tool opens click Yes to disclaimer.
(https://dl.dropboxusercontent.com/u/73555776/frst.JPG)
Press Scan button.
It will make a log (FRST.txt) on the flash drive. Please copy and paste it to your reply.
-
Thanks for the reply essexboy, i'll need to wait til my gf gets home from work (around 5ish) to use her laptop to carry out your instructions, i dont know her logon password, so i'll post when its done.
-
i dont get the 'When you reboot you will see this. Click repair my computer' i get a system recovery options box that asks me to select a keyboard input method when i choose a language it then searches for a windows instalation but the window is empty? rather than blunder on not knowing what im doing ill wit for a reply to this.
sorry after some fiddling i managed it, heres the frst text
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:06-08-2015
Ran by SYSTEM on MININT-7GVHL6I (06-08-2015 17:49:30)
Running from y:\
Platform: WIN_7 (X64) Language: English (United States)
Boot Mode: Recovery
ATTENTION: Could not load system hive.
ATTENTION: System hive is missing.
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
ATTENTION: Software hive is missing.
==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
===================== Drivers (Whitelisted) ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
==================== Known DLLs (Whitelisted) =========================
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe IS MISSING <==== ATTENTION
C:\Windows\System32\wininit.exe IS MISSING <==== ATTENTION
C:\Windows\SysWOW64\wininit.exe IS MISSING <==== ATTENTION
C:\Windows\explorer.exe IS MISSING <==== ATTENTION
C:\Windows\SysWOW64\explorer.exe IS MISSING <==== ATTENTION
C:\Windows\System32\svchost.exe IS MISSING <==== ATTENTION
C:\Windows\SysWOW64\svchost.exe IS MISSING <==== ATTENTION
C:\Windows\System32\services.exe IS MISSING <==== ATTENTION
C:\Windows\System32\User32.dll IS MISSING <==== ATTENTION
C:\Windows\SysWOW64\User32.dll IS MISSING <==== ATTENTION
C:\Windows\System32\userinit.exe IS MISSING <==== ATTENTION
C:\Windows\SysWOW64\userinit.exe IS MISSING <==== ATTENTION
C:\Windows\System32\rpcss.dll IS MISSING <==== ATTENTION
C:\Windows\System32\dnsapi.dll IS MISSING <==== ATTENTION
C:\Windows\SysWOW64\dnsapi.dll IS MISSING <==== ATTENTION
C:\Windows\System32\Drivers\volsnap.sys IS MISSING <==== ATTENTION
C:\Windows\System32\codeintegrity\Bootcat.cache IS MISSING <==== ATTENTION
C:\Windows\System32\winsrv.dll IS MISSING <==== ATTENTION
==================== Restore Points =========================
==================== Memory info ===========================
Percentage of memory in use: 6%
Total physical RAM: 16367.06 MB
Available physical RAM: 15336.68 MB
Total Virtual: 16365.21 MB
Available Virtual: 15324.22 MB
==================== Drives ================================
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
Drive y: (Repair disc Windows 7 64-bit) (Removable) (Total:29.82 GB) (Free:29.59 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 29.8 GB) (Disk ID: 5268F47E)
Partition 1: (Active) - (Size=29.8 GB) - (Type=07 NTFS)
==================== End of log ============================
-
OK boot to the recovery console
Select Command prompt
At the prompt type the following and press enter :
chkdsk c: /r
Once it has completed try a normal boot
-
still wont boot, it takes me to a Windows Error Recovery screen, when i select Start Windows Normally it goes to a Starting Windows screen with the logo and nothing else happens.
-
Try the Repair my computer option now... If that fails then try and run a fresh FRST scan please
-
i dont get the screen that has the option to repair my computer. when it starts up it asks me to choose a language then searches for an installed os but it doesnt find one.
-
Did chkdsk find errors as your MFT was corrupt
-
Sorry i dont know mate i never actually looked, i know stupid but i was kinda hoping it would be ok. When i get time ill run it again and record what it says. Im heading off to work soon and wont be home again until probably sunday afternoon maybe monday morning can we resume this then?
-
Aye for sure
-
(http://i57.tinypic.com/21n34n8.jpg)
-
Unfortunately it looks like you will need to re-install windows
then searches for an installed os but it doesnt find one
suggests that there is a major problem with the MFT
-
Kinda had the feeling that was going to be the outcome after seeing the frst log, let me ask you this, was avast responsible for this?
-
No it is just that the last driver loaded was one of Avasts... Google mup.sys for systems without Avast and you will find that it affects all system from XP on
-
Can you maybe help me understand what happened here then, one day everything was fine and next day my pc wont boot and requires a reinstall. Im not looking to place blame im just trying to understand what happened, like i said in my op a google search brought me here so i assumed it was an issue with avast, am i wrong in assuming so?
-
Could that CHKDSK above be in the wrong partition? It's only 30GB, 15 files.
I'm just trying to understand... If that is the OS partition, where are all the files?
-
The file locations are recorded on the MFT http://ntfs.com/ntfs-mft.htm
Each file on an NTFS volume is represented by a record in a special file called the master file table (MFT). NTFS reserves the first 16 records of the table for special information.
The first record of this table describes the master file table itself, followed by a MFT mirror record.
If the first MFT record is corrupted, NTFS reads the second record to find the MFT mirror file, whose first record is identical to the first record of the MFT. The locations of the data segments for both the MFT and MFT mirror file are recorded in the boot sector.
If that is corrupt then there is no location information for the location on the disc of the boot files
Chkdsk if it finds the MFT corrupt will try to find the mirror (backup) copy and use that, if that is corrupt then it might as well be an empty disc
Disk: 0 (Size: 29.8 GB) (Disk ID: 5268F47E)
Partition 1: (Active) - (Size=29.8 GB) - (Type=07 NTFS)
This is the only disc that FRST can see
Can you maybe help me understand what happened here then, one day everything was fine and next day my pc wont boot and requires a reinstall. Im not looking to place blame im just trying to understand what happened, like i said in my op a google search brought me here so i assumed it was an issue with avast, am i wrong in assuming so?
Not even MS has been able to determine what causes this error. There are many different ways of fixing this from resetting the BIOS to read from SATA or IDE (dependant on the current setting) To removing any low level installed programmes via chkdsk. But, the MS answer is always re-install
-
ok np. thanks for trying to help. my friend did a reinstall and im back up and running again.
-
Sorry we could not resolve this any other way
-
The file locations are recorded on the MFT http://ntfs.com/ntfs-mft.htm
Each file on an NTFS volume is represented by a record in a special file called the master file table (MFT). NTFS reserves the first 16 records of the table for special information.
The first record of this table describes the master file table itself, followed by a MFT mirror record.
If the first MFT record is corrupted, NTFS reads the second record to find the MFT mirror file, whose first record is identical to the first record of the MFT. The locations of the data segments for both the MFT and MFT mirror file are recorded in the boot sector.
If that is corrupt then there is no location information for the location on the disc of the boot files
Chkdsk if it finds the MFT corrupt will try to find the mirror (backup) copy and use that, if that is corrupt then it might as well be an empty disc
Disk: 0 (Size: 29.8 GB) (Disk ID: 5268F47E)
Partition 1: (Active) - (Size=29.8 GB) - (Type=07 NTFS)
This is the only disc that FRST can see
Can you maybe help me understand what happened here then, one day everything was fine and next day my pc wont boot and requires a reinstall. Im not looking to place blame im just trying to understand what happened, like i said in my op a google search brought me here so i assumed it was an issue with avast, am i wrong in assuming so?
Not even MS has been able to determine what causes this error. There are many different ways of fixing this from resetting the BIOS to read from SATA or IDE (dependant on the current setting) To removing any low level installed programmes via chkdsk. But, the MS answer is always re-install
Thanks for the info. The thing that bothers me though is that CHKDSK says it "found no problems"