Windows Xp hangs on aswRvrt.sys and boots to safemode

[bsat20]

I've tried to uninstall avast after an automatic update in my laptop with windows xp but in vain after that i rebooted the system, it immediately crashes after booting till windows xp logo and reboots then got the boot options like safe mode with/without networking, normal mode last known good configuration so on. then i  selected safe mode then it hangs aswRvrt.sys after some time when pressed Enter/Esc Key able to log in safe mode. Please let me know the solution as i'm newbie to these type of problems slow in grasping, detailed help is appreciated. thanks in advance

[essexboy]

Download Peazip to the desktop 
Run and install the programme
As it installs this page will show, deselect the AVG ticks
Press decline and it will then install cleanly 
 

 
Download the following files to the desktop .. Right click the links and select save as...then select desktop 
 
Rufus
 
OTLPE_standard
 
Right click OTLPE on your desktop and select  ..Open as archive 
 

 
 
Select OTLPE standard 
 

 
Click Extract, ensure that desktop is selected 
 

 
Insert the USB stick Then run Rufus
 
Select the ISO file on the desktop via the ISO icon.

Press Start Burn


Once the USB has burnt then

• Download Farbar Recovery Scan Tool and save it to the flash drive.
  
  
  • Reboot your system using the boot USB you just created.
  Note : If you do not know how to set your computer to boot from USB follow the steps here
  
• As the  Programme needs to detect your hardware and load the operating system, I would recommend a nice cup of tea whilst it loads  :)
• Your system should now display a Reatogo desktop.
• Locate the flash drive and run FSRT
• The tool will start to run.

• When the tool opens click Yes to disclaimer.
• Press Scan button.
  
• It will make a log (FRST.txt) on the flash drive. Please copy and paste it to your reply.

[bsat20]

C:\Documents and Settings\Admin\Desktop\OTLPEStd.exe could not be saved, because the source file could not be read.

Try again later, or contact the server administrator.

I'm getting the following error when trying to download OTLPE_Standard. First step has be executed sucessful.

[essexboy]

I will download and extract the ISO for you and then place it in my dropbox for collection

All you need to do then is download the ISO to the desktop and burn it to the USB .. No need to extract

I will PM the link when done

[bsat20]

R u done with extraction of ISO ? just reminder in case you have forgotten. am not in urgency.. take ur time if ur busy..

[essexboy]

No, not forgotten.  Dropbox appears to have throttled my uploads and it is taking forever to get there. 

[essexboy]

OK change of tack we will use the windows recovery console as I already have that uploaded

Download the XP recovery console to the desktop
Run Rufus and burn to a USB drive
Copy FRST to the same USB drive
Insert the USB and boot the sick computer from that
This will start the recovery console..

At the command prompt type the following  :
 
In the command window type e:\frst.exe and press Enter 
Note: Replace letter e with the drive letter of your flash drive. 
The tool will start to run. 
When the tool opens click Yes to disclaimer. 

Press Scan button. 
It will make a log (FRST.txt) on the flash drive. Please copy and paste it to your reply.

[bsat20]

  Followed the steps:Download the iso and burn to usb using rufus, next rebooted then pressed F9 to change boot device selected the kingston usb drive and tried to boot from usb but getting message master bootloader press Alt+clt+del. Am i wrong in execution

[essexboy]

OK lets try XPUD, you can use the same USB for this 

Download http://unetbootin.sourceforge.net/unetbootin-xpud-windows-latest.exe & http://noahdfear.net/downloads/bootable/xPUD/xpud-0.9.2.iso to the desktop of your clean computer

• Insert your USB drive
• Press Start > My Computer > right click your USB drive > choose Format > Quick format
  
• Double click the unetbootin-xpud-windows-387.exe that you just downloaded
  
• Press Run then OK
  
• Select the DiskImage option then click the browse button located on the right side of the textbox field.
• Browse to and select the xpud-0.9.2.iso file you downloaded
  
• Verify the correct drive letter is selected for your USB device then click OK
• It will install a little bootable OS on your USB device
• Once the files have been written to the device you will be prompted to reboot ~ do not reboot and instead just Exit the UNetbootin interface

Download http://noahdfear.net/downloads/rst.sh to the USB drive

• Boot the Sick computer to xPUD
• Press File
  
• Expand mnt
  
• Expand your USB (sdb1)
  
• Confirm that you see rst.sh that you downloaded there
  
• Press Tool at the top
  
• Choose Open Terminal
  
• Type bash rst.sh
  
• Press Enter
  
• After it has finished a report will be located in the USB drive (sdb1) named enum.log
  
• Plug that USB back into the clean computer and open it
• Then post the contents here

[bsat20]

Sorry for delayed response. I was on a trip . I followed the steps suggested and this time successful in execution. Here is the contents in enum.log:

30.5M Jan 11 08:38 /mnt/sda1/WINDOWS/system32/config/software
6.8M Jan 11 08:38 /mnt/sda1/WINDOWS/system32/config/system

30.1M Nov  1 16:05 /sda1/~/RP243/~SOFTWARE
30.1M Nov  2 09:12 /sda1/~/RP244/~SOFTWARE
30.1M Nov  3 10:41 /sda1/~/RP245/~SOFTWARE
30.1M Nov  4 10:57 /sda1/~/RP246/~SOFTWARE
30.1M Nov  5 11:28 /sda1/~/RP247/~SOFTWARE
30.1M Nov  5 17:14 /sda1/~/RP248/~SOFTWARE
30.1M Nov  6 17:48 /sda1/~/RP249/~SOFTWARE
30.1M Nov  7 18:13 /sda1/~/RP250/~SOFTWARE
30.1M Nov  8 18:20 /sda1/~/RP251/~SOFTWARE
30.1M Nov  9 18:56 /sda1/~/RP252/~SOFTWARE
30.1M Nov 11 03:35 /sda1/~/RP253/~SOFTWARE
30.1M Nov 12 04:05 /sda1/~/RP254/~SOFTWARE
30.1M Nov 12 16:35 /sda1/~/RP255/~SOFTWARE
30.1M Nov 13 17:05 /sda1/~/RP256/~SOFTWARE
30.1M Nov 15 06:54 /sda1/~/RP257/~SOFTWARE
30.1M Nov 16 07:12 /sda1/~/RP258/~SOFTWARE
30.1M Nov 17 08:01 /sda1/~/RP259/~SOFTWARE
30.1M Nov 18 08:04 /sda1/~/RP260/~SOFTWARE
30.1M Nov 19 08:36 /sda1/~/RP261/~SOFTWARE
30.1M Nov 19 13:46 /sda1/~/RP262/~SOFTWARE
30.2M Nov 21 02:33 /sda1/~/RP263/~SOFTWARE
30.2M Nov 22 03:14 /sda1/~/RP264/~SOFTWARE
30.2M Nov 23 06:56 /sda1/~/RP265/~SOFTWARE
30.2M Nov 24 14:20 /sda1/~/RP266/~SOFTWARE
30.2M Nov 26 19:06 /sda1/~/RP267/~SOFTWARE
30.2M Nov 28 03:26 /sda1/~/RP268/~SOFTWARE
30.2M Nov 29 17:41 /sda1/~/RP269/~SOFTWARE
30.2M Dec  1 06:02 /sda1/~/RP270/~SOFTWARE
30.2M Dec  2 09:57 /sda1/~/RP271/~SOFTWARE
30.2M Dec  3 15:32 /sda1/~/RP272/~SOFTWARE
30.2M Dec  4 16:39 /sda1/~/RP273/~SOFTWARE
30.2M Dec  5 17:13 /sda1/~/RP274/~SOFTWARE
30.2M Dec  7 22:49 /sda1/~/RP275/~SOFTWARE
30.2M Dec  8 11:35 /sda1/~/RP277/~SOFTWARE
30.2M Dec  8 11:46 /sda1/~/RP278/~SOFTWARE
30.2M Dec  8 12:02 /sda1/~/RP279/~SOFTWARE
6.4M Nov  1 16:05 /sda1/~/RP243/~SYSTEM
6.4M Nov  2 09:12 /sda1/~/RP244/~SYSTEM
6.4M Nov  3 10:41 /sda1/~/RP245/~SYSTEM
6.4M Nov  4 10:57 /sda1/~/RP246/~SYSTEM
6.4M Nov  5 11:28 /sda1/~/RP247/~SYSTEM
6.4M Nov  5 17:14 /sda1/~/RP248/~SYSTEM
6.4M Nov  6 17:48 /sda1/~/RP249/~SYSTEM
6.4M Nov  7 18:13 /sda1/~/RP250/~SYSTEM
6.4M Nov  8 18:20 /sda1/~/RP251/~SYSTEM
6.4M Nov  9 18:56 /sda1/~/RP252/~SYSTEM
6.4M Nov 11 03:35 /sda1/~/RP253/~SYSTEM
6.4M Nov 12 04:05 /sda1/~/RP254/~SYSTEM
6.4M Nov 12 16:35 /sda1/~/RP255/~SYSTEM
6.4M Nov 13 17:05 /sda1/~/RP256/~SYSTEM
6.4M Nov 15 06:54 /sda1/~/RP257/~SYSTEM
6.4M Nov 16 07:12 /sda1/~/RP258/~SYSTEM
6.4M Nov 17 08:01 /sda1/~/RP259/~SYSTEM
6.4M Nov 18 08:04 /sda1/~/RP260/~SYSTEM
6.4M Nov 19 08:36 /sda1/~/RP261/~SYSTEM
6.4M Nov 19 13:46 /sda1/~/RP262/~SYSTEM
6.4M Nov 21 02:33 /sda1/~/RP263/~SYSTEM
6.4M Nov 22 03:14 /sda1/~/RP264/~SYSTEM
6.4M Nov 23 06:56 /sda1/~/RP265/~SYSTEM
6.4M Nov 24 14:20 /sda1/~/RP266/~SYSTEM
6.4M Nov 26 19:06 /sda1/~/RP267/~SYSTEM
6.4M Nov 28 03:26 /sda1/~/RP268/~SYSTEM
6.4M Nov 29 17:41 /sda1/~/RP269/~SYSTEM
6.4M Dec  1 06:02 /sda1/~/RP270/~SYSTEM
6.4M Dec  2 09:57 /sda1/~/RP271/~SYSTEM
6.4M Dec  3 15:32 /sda1/~/RP272/~SYSTEM
6.5M Dec  4 16:39 /sda1/~/RP273/~SYSTEM
6.5M Dec  5 17:13 /sda1/~/RP274/~SYSTEM
6.5M Dec  7 22:49 /sda1/~/RP275/~SYSTEM
6.5M Dec  8 11:35 /sda1/~/RP277/~SYSTEM
6.5M Dec  8 11:46 /sda1/~/RP278/~SYSTEM
6.5M Dec  8 12:02 /sda1/~/RP279/~SYSTEM

[essexboy]

• Reboot your system using the xPUD bootable USB you just created.

Note : If you do not know how to set your computer to boot from USB follow the steps [color="#FF0000"]here[/color][/i][/b]

• Your system should now display a xPUD desktop.
• Select on the File icon; on the right pane click on the "mnt" folder and highlight "sdb1" - this is your USB device.
  
• Click on the "Tool" menu and select Open Terminal
  
  
• In the open terminal window, type in the following

bash rst.sh -r

• You will be asked for the number of the Restore Point  to use, type in 243 then press "Enter".
  243 corresponds to System Restore done dated Nov  1 16:05 -
  
• The program is finished when it say's "Done".
  
• Type "Exit" and uninsert your USB stick.
  
• Click on the "Home" icon and then click on "Power Off". Choose "Restart"
• Reboot into Windows normal mode

[bsat20]

  Unable to find sdb1 in mnt.do I need to remove enum.log and boot sick computer

[bsat20]

Rebooted again xPUD now sucessful in finding the folder.executed the process will get back once done.

[bsat20]

Done RP243
SOFTWARE hive restored from RP243
SYSTEM hive restored from RP243
SECURITY hive restored from RP243
SAM hive restored from RP243
And rebooted the sick machine but still error persist after windows logo stop at 0x0000007e(...) and when entered safe mode with networking hangs at multi(0)disk(0)rdisk(0)partition(1)\windows\system32\DRIVERS\aswRvrt.sys Press Esc/Enter to cancel loading d344bus.sys and enters login in safe mode.

[essexboy]

Press Esc/Enter to cancel loading d344bus.sys and enters login in safe mode.

So you are now able to get to safe mode ?   and the erring driver is d344bus.sys is that correct