Windows 7 won't boot - Please help! re: aswRvrt.sys and aswVmm.sys

[essexboy]

No just leave the tick boxes as when it opens just adding the LOP, Purity and all users ones

[Noobienoob]

Duh... you did say not to change any settings... 

[essexboy]

Looks like your only problem was adware, if you get that again then come here and we will remove it safely

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL

• Under the Custom Scans/Fixes box at the bottom, paste in the following
  
  
  

Code: [Select]

:Commands
[CREATERESTOREPOINT]

:OTL
DRV - [2011/04/01 02:22:04 | 000,017,152 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Program Files (x86)\Lavasoft\Ad-Aware\kernexplorer64.sys -- (Lavasoft Kernexplorer)
IE - HKU\S-1-5-21-151721948-3701362946-3784329648-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = 127.0.0.1:9421;<local>;*.local
[2012/10/15 18:09:37 | 000,000,000 | ---D | M] (Lavasoft Search Plugin) -- C:\Users\Marlene\AppData\Roaming\Mozilla\Firefox\Profiles\4kp0ws3w.default\extensions\jid1-yZwVFzbsyfMrqQ@jetpack
[2012/10/15 18:09:37 | 000,000,000 | ---D | M] (Lavasoft Search Plugin) -- C:\Users\Marlene\AppData\Roaming\Mozilla\Firefox\Profiles\7gcbibsj.default-1345488266755\extensions\jid1-yZwVFzbsyfMrqQ@jetpack
O4 - HKLM..\RunOnceEx: [Flags] Reg Error: Invalid data type. File not found
O4 - HKLM..\RunOnceEx: [Title] UnHackMe Rootkit Check File not found
[2013/11/20 13:00:28 | 000,000,408 | ---- | M] () -- C:\Windows\tasks\Ad-Aware Update (Weekly).job
[2013/11/19 17:35:54 | 000,023,112 | ---- | M] () -- C:\Windows\SysNative\drivers\hitmanpro35.sys
[2012/10/15 18:08:48 | 000,000,000 | ---D | M] -- C:\Users\Marlene\AppData\Roaming\Ad-Aware Antivirus
[2012/10/12 18:16:31 | 000,000,298 | ---- | C] () -- C:\Windows\Tasks\Hitman Pro 3.5 Boot Task.job

:Files
C:\Program Files (x86)\Lavasoft

:Commands
[resethosts]
[emptytemp]
[Reboot]

• Then click the Run Fix button at the top
  
• Let the program run unhindered, reboot the PC when it is done
• Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

[Noobienoob]

Okay here's the result of the quick scan...

[essexboy]

Is the computer behaving itself now ?

[Noobienoob]

Purring like a kitten!!!  ( insert smiley doing a happy dance )

I would've been happy with just having windows and scrambling to save whatever I could... but fully functional AND no annoying pop-ups???

All I can say is, dude, you're awesome. I knew if anybody could help me it'd be you, after I saw you help so many others. But I never, ever thought it would be to this extent. Not by a long shot.

Thank you! Thank you! Thank you!!!!!! 
( Shhh let me gush, lol. )

Seriously, you're the greatest. I'm beyond ecstatic. You have no idea(!) the weeks you've saved me....
( I'd offer you my first born, but trust me, you don't want her. She can be a real pain, haha. )
But hey, if you ever need anything... a logo or avatar or banner or something, I'm your girl. 

And if I can ask you one more thing... I see Ad-aware and Ad-aware Browsing Protection in my program files. I noticed a lot of the things that were removed said "adaware" etc.  Should I remove them?  And do I need to keep Google chrome and the software updater thingy ( because tbh it's kind of annoying lol. )
But if you say keep, I keep. 

[essexboy]

Thankee for the kind words

Reference Ad-Aware, remove that as it will conflict with Avast ..  I just removed the conflicting parts.  Personally I dislike Chrome (and Firefox come to that )  but, the option is yours as to whether or not you keep it..

For the software updater you can remove that from Avast by doing the following :

Go to Control Panel > Programs and Features
Select Avast
On the dialogue that appears select Change and click Continue


Then remove the tick from Software Updater


Select Continue and then reboot when told

If you are now happy let me know and I will remove my rubbish that you downloaded

[Noobienoob]

                

Happier than I ever expected to be!

Thanks again, Essexboy. You're the greatest.

[essexboy]

In that case methinks I will send you on your merry way

Subject to no further problems   

I will remove my tools now and give some recommendations, but, I would like you to run for 24 hours or so and come back if you have any problems 

Now the best part of the day ----- Your log now appears clean  :thumbsup:

A good workman always cleans up after himself so..The following will implement some cleanup procedures as well as reset  System Restore points:

Run OTL and hit the cleanup button.  It will remove all the programmes we have used plus itself. 

Clear Restore Points

Go Start > All Programmes > Accessories > System tools
Right click Disc Cleanup and select run as administrator
When it pops up at the first prompt select OK after it has done some calculations the tabs will appear
Select More Options tab
Press Sytem Restore and Shadow Copies Cleanup button



: Keep Java Updated :

WARNING: Java is the #1 exploited program at this time. The Department of Homeland Security recommends that computer users disable Java
See this article and this article.
I would recommend that you completely uninstall Java unless you need it to run an important software.
In that instance I would recommend that you disable Java in your browsers until you need it for that software and then enable it. (See How to diasble Java in your web browser and How to unplug Java from the browser)

Now that you are clean, to help protect your computer in the future I recommend that you get the following free programmes:

CryptoPrevent install this programme to lock down and prevent crypto ransome ware



Malwarebytes.

Update and run weekly to keep your system clean

Download and install FileHippo update checker and run it monthly it will show you which programmes on your system need updating and give a download link
It is critical to have both a firewall and anti virus to protect your system and to keep them updated.

To learn more about how to protect yourself while on the internet read our little guide  How did I get infected in the first place ?Keep safe  :wave:

[Noobienoob]

Okay... I ran OTL and it removed itself but not JRT...( It's still on my desktop )

Re: Java -  I never update or do anything Java-related when I'm notified, just because I had a bad experience with that years ago ( doing an update, that is. ) I didn't know there were actually good reasons for doing that, though. But the truth is, I don't know if I use anything that requires it. The most important softwares I use are Photoshop CS5 and itunes... So I googled and I see there may be some issues? Although what I'm reading is very, very confusing and waaaaaaay over my tiny wee pea-brained head. :-((

So I guess I'll disable it and see what happens. ;-) Thanks for the heads-up regarding this!

I already regularly use Malwarebytes to scan things etc., but I'll install the others. Thanks for that, too
....and the homework/reading material. :-D
Hopefully they will be more intelligible to me than the stuff I'm seeing re: Apple/Adobe/Java , lol.

And once more...Thanks again!  :-) :-) :-)

[essexboy]

Just delete JRT from the desktop

Any further questions then just shout

[Noobienoob]

I feel like I'm being such a pain, and you've already helped me so much... :-/

But I take your advice very seriously and want to do exactly what you recommend... so...

Re: CryptoPrevent - There's 2 versions on that page. The 1st is portable ( Cryptoprevent.zip ) and the 2nd is with an installer ( CryptoPrevent Installer.exe ). I did the first one and pressed "apply". Did I pick the correct one?
Is this a one-time thing or do I need to periodically check for updates etc.? 

Re: FileHippo - Downloaded and installed it and nothing happens when I click the desktop shortcut. An hour glass flashes for maybe a nanosecond. Is that what it's supposed to do?

Thanks again! ( embarrassed smiley )

[essexboy]

For the crypto prevent then either is ok as one is zipped and you need to unzip it run.  Whereas the other is in an easy installer package.  Check for updates every few months and that should be OK 

I will check out Filehippo ... Back later