Author Topic: aswRvrt.sys boot problem.  (Read 11499 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
aswRvrt.sys boot problem.
« on: August 06, 2015, 03:41:49 PM »
Hi, firstly sorry if this isnt the correct place to put this post.

My computer wouldnt start this morning so i tried to boot into safe mode but it stops at the line

Loaded:\windows\System32\Drivers\aswRvrt.sys

googling this line brung me here, not sure what else to say or what information is required but to start off i'll tell you i'm running Windows 7 Pro 64 bit and we can move on from there. Guess all i can do for now is await any replies. Hope someone can help.

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: aswRvrt.sys boot problem.
« Reply #1 on: August 06, 2015, 03:46:56 PM »
See: "If you cannot  Boot the computer"
Instructions: http://forum.avast.com/index.php?topic=53253.0


Edit: As Essexboy joined the topic, follow his advice directly.
« Last Edit: August 06, 2015, 03:54:49 PM by Asyn »
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: aswRvrt.sys boot problem.
« Reply #2 on: August 06, 2015, 03:53:21 PM »
Download the following three programmes to your desktop :
 
 
1.  Rufus 
 
For 64bit systems  
2. Windows 7 64bit RC  I will PM link
3. Farbar Recovery Scan Tool x64 
 
 
Insert the USB stick Then run Rufus
 

Select the ISO file on the desktop via the ISO icon. 
 
Press Start Burn

Then copy FRST to the same USB   
 
   
 
 
 
Insert the USB into the sick computer and start the computer.  First ensuring that the system is set to boot from USB 
Note: If you are not sure how to do that follow the instructions Here
 
Windows 7 and Vista screenshots 

When you reboot you will  see this.
 Click repair my computer  
 
 
Select your operating system  
 
 
Select Command prompt 
 
 
At the command prompt type the following  :
 
notepad and press Enter
The notepad opens. Under File menu select Open
Select "Computer" and find your flash drive letter and close the notepad. 
In the command window type e:\frst64.exe  or  e:\frst.exe dependant on system
 and press Enter 
Note: Replace letter e with the drive letter of your flash drive. 
The tool will start to run. 
When the tool opens click Yes to disclaimer. 

Press Scan button. 
It will make a log (FRST.txt) on the flash drive. Please copy and paste it to your reply.
 

REDACTED

  • Guest
Re: aswRvrt.sys boot problem.
« Reply #3 on: August 06, 2015, 04:00:03 PM »
Thanks for the reply essexboy, i'll need to wait til my gf gets home from work (around 5ish) to use her laptop to carry out your instructions, i dont know her logon password, so i'll post when its done.

REDACTED

  • Guest
Re: aswRvrt.sys boot problem.
« Reply #4 on: August 06, 2015, 06:41:18 PM »
i dont get the 'When you reboot you will see this. Click repair my computer' i get a system recovery options box that asks me to select a keyboard input method when i choose a language it then searches for a windows instalation but the window is empty? rather than blunder on not knowing what im doing ill wit for a reply to this.

sorry after some fiddling i managed it, heres the frst text

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:06-08-2015
Ran by SYSTEM on MININT-7GVHL6I (06-08-2015 17:49:30)
Running from y:\
Platform: WIN_7 (X64) Language: English (United States)
Boot Mode: Recovery
ATTENTION: Could not load system hive.
ATTENTION: System hive is missing.

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

ATTENTION: Software hive is missing.

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)


==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

==================== Known DLLs (Whitelisted) =========================


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe IS MISSING <==== ATTENTION
C:\Windows\System32\wininit.exe IS MISSING <==== ATTENTION
C:\Windows\SysWOW64\wininit.exe IS MISSING <==== ATTENTION
C:\Windows\explorer.exe IS MISSING <==== ATTENTION
C:\Windows\SysWOW64\explorer.exe IS MISSING <==== ATTENTION
C:\Windows\System32\svchost.exe IS MISSING <==== ATTENTION
C:\Windows\SysWOW64\svchost.exe IS MISSING <==== ATTENTION
C:\Windows\System32\services.exe IS MISSING <==== ATTENTION
C:\Windows\System32\User32.dll IS MISSING <==== ATTENTION
C:\Windows\SysWOW64\User32.dll IS MISSING <==== ATTENTION
C:\Windows\System32\userinit.exe IS MISSING <==== ATTENTION
C:\Windows\SysWOW64\userinit.exe IS MISSING <==== ATTENTION
C:\Windows\System32\rpcss.dll IS MISSING <==== ATTENTION
C:\Windows\System32\dnsapi.dll IS MISSING <==== ATTENTION
C:\Windows\SysWOW64\dnsapi.dll IS MISSING <==== ATTENTION
C:\Windows\System32\Drivers\volsnap.sys IS MISSING <==== ATTENTION
C:\Windows\System32\codeintegrity\Bootcat.cache IS MISSING <==== ATTENTION
C:\Windows\System32\winsrv.dll IS MISSING <==== ATTENTION

==================== Restore Points =========================


==================== Memory info ===========================

Percentage of memory in use: 6%
Total physical RAM: 16367.06 MB
Available physical RAM: 15336.68 MB
Total Virtual: 16365.21 MB
Available Virtual: 15324.22 MB

==================== Drives ================================

Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
Drive y: (Repair disc Windows 7 64-bit) (Removable) (Total:29.82 GB) (Free:29.59 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 29.8 GB) (Disk ID: 5268F47E)
Partition 1: (Active) - (Size=29.8 GB) - (Type=07 NTFS)

==================== End of log ============================
« Last Edit: August 06, 2015, 06:53:07 PM by mikbhoy »

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: aswRvrt.sys boot problem.
« Reply #5 on: August 06, 2015, 06:55:18 PM »
OK   boot to the recovery console
Select Command prompt
At the prompt type the following and press enter :

chkdsk c: /r

Once it has completed try a normal boot

REDACTED

  • Guest
Re: aswRvrt.sys boot problem.
« Reply #6 on: August 06, 2015, 07:06:26 PM »
still wont boot, it takes me to a Windows Error Recovery screen, when i select Start Windows Normally it goes to a Starting Windows screen with the logo and nothing else happens.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: aswRvrt.sys boot problem.
« Reply #7 on: August 06, 2015, 07:27:15 PM »
Try the Repair my computer option now... If that fails then try and run a fresh FRST scan please

REDACTED

  • Guest
Re: aswRvrt.sys boot problem.
« Reply #8 on: August 06, 2015, 07:45:15 PM »
i dont get the screen that has the option to repair my computer. when it starts up it asks me to choose a language then searches for an installed os but it doesnt find one.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: aswRvrt.sys boot problem.
« Reply #9 on: August 06, 2015, 08:26:22 PM »
Did chkdsk find errors as your MFT was corrupt

REDACTED

  • Guest
Re: aswRvrt.sys boot problem.
« Reply #10 on: August 06, 2015, 08:38:54 PM »
Sorry i dont know mate i never actually looked, i know stupid but i was kinda hoping it would be ok. When i get time ill run it again and record what it says. Im heading off to work soon and wont be home again until probably sunday afternoon maybe monday morning can we resume this then?

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: aswRvrt.sys boot problem.
« Reply #11 on: August 06, 2015, 08:43:57 PM »
Aye for sure

REDACTED

  • Guest
Re: aswRvrt.sys boot problem.
« Reply #12 on: August 09, 2015, 07:37:51 PM »

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: aswRvrt.sys boot problem.
« Reply #13 on: August 09, 2015, 09:29:42 PM »
Unfortunately it looks like you will need to re-install windows

Quote
then searches for an installed os but it doesnt find one
suggests that there is a major problem with the MFT

REDACTED

  • Guest
Re: aswRvrt.sys boot problem.
« Reply #14 on: August 09, 2015, 10:12:22 PM »
Kinda had the feeling that was going to be the outcome after seeing the frst log, let me ask you this, was avast responsible for this?