[amalm92]

No Success, Starting up windows actually took longer after that. Still get the white screen though.


Fixlog attached:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 07-12-2013 2
Ran by SYSTEM at 2013-12-13 23:26:31 Run:2
Running from F:\
Boot Mode: Recovery
==============================================

Content of fixlist:
*****************
LastRegBack: 2013-11-20 10:31
*****************

DEFAULT hive was successfully copied to System32\config\HiveBackup
DEFAULT hive was successfully restored from registry back up.
SAM hive was successfully copied to System32\config\HiveBackup
SAM hive was successfully restored from registry back up.
SECURITY hive was successfully copied to System32\config\HiveBackup
SECURITY hive was successfully restored from registry back up.
SOFTWARE hive was successfully copied to System32\config\HiveBackup
SOFTWARE hive was successfully restored from registry back up.
SYSTEM hive was successfully copied to System32\config\HiveBackup
SYSTEM hive was successfully restored from registry back up.

==== End of Fixlog ====

[Advertisements]

I take it you have tried a Start up Repair?

If you have tried Start up Repair then please run another scan with FRST (probably best to download the latest version to your flash drive first) and post the FRST.txt log back here.

If you haven't tried Start up Repair then here are some instructions:

If you have a retail Windows 7 installation disk go straight to the instructions at Step 2 below. If not, carry out the next instructions first.

If you have access to another Windows 7 machine of the same version you can create a repair disc and use it on your machine.

Create a Windows 7 System Repair Disc

Note: the below can only be done if your machine has a a type of CD/R or DVD/R optical drive installed. Also depending on the exact type of OEM your machine has you may be unable to actually create a SRD.

• Click on Start(Windows 7 Orb) >> Run...(or the Windows key and R together) to bring up the Run box, then copy/paste the following command into the box and click on OK:
  
  

  recdisc.exe

• Allow the UAC(User Account Control) prompt via selecting Yes.
• You should now see a menu like the below:-

• Put a blank rewritable CD/DVD in your optical(CD/DVD) drive and then click on Create disc.
• Note: If a AutoPlay window pops up, just close it.
• When the SRD has been created you will see the below:-

• Now click on Close >> OK. Leave the disc in the drive as we will be using it shortly.
• You now have a Windows 7 System Repair Disc.

Step 2

Go to the link below and follow the instructions to carry out a Start Up Repair of your machine.

http://www.sevenforu...tup-repair.html

Come back and tell me how you got on.

[emeraldnzl]

I take it you have tried a Start up Repair?

If you have tried Start up Repair then please run another scan with FRST (probably best to download the latest version to your flash drive first) and post the FRST.txt log back here.

If you haven't tried Start up Repair then here are some instructions:

If you have a retail Windows 7 installation disk go straight to the instructions at Step 2 below. If not, carry out the next instructions first.

If you have access to another Windows 7 machine of the same version you can create a repair disc and use it on your machine.

Create a Windows 7 System Repair Disc

Note: the below can only be done if your machine has a a type of CD/R or DVD/R optical drive installed. Also depending on the exact type of OEM your machine has you may be unable to actually create a SRD.

• Click on Start(Windows 7 Orb) >> Run...(or the Windows key and R together) to bring up the Run box, then copy/paste the following command into the box and click on OK:
  
  

  recdisc.exe

• Allow the UAC(User Account Control) prompt via selecting Yes.
• You should now see a menu like the below:-

• Put a blank rewritable CD/DVD in your optical(CD/DVD) drive and then click on Create disc.
• Note: If a AutoPlay window pops up, just close it.
• When the SRD has been created you will see the below:-

• Now click on Close >> OK. Leave the disc in the drive as we will be using it shortly.
• You now have a Windows 7 System Repair Disc.

Step 2

Go to the link below and follow the instructions to carry out a Start Up Repair of your machine.

http://www.sevenforu...tup-repair.html

Come back and tell me how you got on.

[amalm92]

Yep Start up repair was the first thing I did. I didn't do it 3 times as it recommends so I did that today but no luck.

Here is the new FRST log attached: (Latest version downloaded)

Attached Files

•  FRST.txt   10.97KB   149 downloads

[emeraldnzl]

Hello again amalm92,

Please copy and paste your logs into this thread unless otherwise instructed. It's easier to analyze. Also this is a teaching site and it helps the students.

Now

I am not seeing malware as a cause of this.

I did wonder whether there was a hard drive problem but chkdsk ran without incident.

There was a problem with AVAST recently that broke some machines and I see you have AVAST.

I think our next action is to remove what we can of AVAST and see whether that helps. You will need to reinstall AVAST afterward but worth the trouble I think if it is the cause.

Please download the attached fixlist.txt file to your flashdrive .

NOTE. It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

Now please enter System Recovery Options.
Run FRST64 and press the Fix button just once and wait.
The tool will make a log on the flashdrive (Fixlog.txt) please post it to your reply.

Also tell me if you are able to boot up.

[amalm92]

I was not able to boot up doing this.

Here is the fixlog.txt attached below:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 14-12-2013 01
Ran by SYSTEM at 2013-12-15 23:31:56 Run:3
Running from F:\
Boot Mode: Recovery
==============================================

Content of fixlist:
*****************
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [4858968 2013-05-09] (AVAST Software)
C:\Program Files\AVAST Software\Avast\AvastUI.exe
S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
C:\Program Files\AVAST Software
S2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-05-09] (AVAST Software)
C:\Windows\System32\Drivers\aswFsBlk.sys
S2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)
C:\Windows\system32\drivers\aswMonFlt.sys
S1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software)
C:\Windows\System32\Drivers\aswrdr2.sys
S0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()
C:\Windows\System32\Drivers\aswRvrt.sys
S1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-06-27] (AVAST Software)
C:\Windows\System32\Drivers\aswSnx.sys
S1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-06-27] (AVAST Software)
C:\Windows\System32\Drivers\aswSP.sys
S1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)
C:\Windows\System32\Drivers\aswTdi.sys
S0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-06-27] ()
C:\Windows\System32\Drivers\aswVmm.sys
*****************

HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\avast => Value deleted successfully.
C:\Program Files\AVAST Software\Avast\AvastUI.exe => Moved successfully.
avast! Antivirus => Service deleted successfully.
C:\Program Files\AVAST Software => Moved successfully.
aswFsBlk => Service deleted successfully.
C:\Windows\System32\Drivers\aswFsBlk.sys => Moved successfully.
aswMonFlt => Service deleted successfully.
C:\Windows\system32\drivers\aswMonFlt.sys => Moved successfully.
aswRdr => Service deleted successfully.
C:\Windows\System32\Drivers\aswrdr2.sys => Moved successfully.
aswRvrt => Service deleted successfully.
C:\Windows\System32\Drivers\aswRvrt.sys => Moved successfully.
aswSnx => Service deleted successfully.
C:\Windows\System32\Drivers\aswSnx.sys => Moved successfully.
aswSP => Service deleted successfully.
C:\Windows\System32\Drivers\aswSP.sys => Moved successfully.
aswTdi => Service deleted successfully.
C:\Windows\System32\Drivers\aswTdi.sys => Moved successfully.
aswVmm => Service deleted successfully.
C:\Windows\System32\Drivers\aswVmm.sys => Moved successfully.

==== End of Fixlog ====

[emeraldnzl]

Hello again amalm92,

I was not able to boot up doing this.

As mentioned before I am not seeing a malware cause for this.

The possible AVAST problem doesn't seem be a cause either.

The one indicator was the inability to run System File Checker pointing to OS corruption. This could be caused by malware but could also be caused by something that happened... say something that was done to the computer before the boot up problem.

As I see it we have two options left.

We can continue looking for a possible malware cause. This can be done with a different scan using the flash drive approach or scans using a disk we can create.

Or

We can reformat and reinstall.

I think the chances of success looking for a malware cause are low and reformat might be the quickest and simplest approach.

For the reformat option you would need to back up you data prior. I can give you some instructions to create a puppy linux disc to attempt to access your data for backup if you need to.

What would you like to do?

[amalm92]

Reformat & Reinstall seems the quicker option to me. Can you help me on how to back up my data, as this is very important for me. Thank You

Edited by amalm92, 16 December 2013 - 02:48 AM.

[emeraldnzl]

Hello again amalm92,

This might be a way for you to access the hard drive to back up your data.

These instructions come courtesey of phillpower2 from our technical section.

===================
***Required Hardware***
CD Burner (CDRW) Drive,
Blank CD,
Extra Storage Device (USB Flash Drive, External Hard Drive)
===================

1. Save these files to your Desktop/Burn Your Live CD:

• Download Latest Puppy Linux ISO (i.e.: lupu-528.iso)
  Download BurnCDCC ISO Burning Software
  
  There are instructions on how to boot from flash drive with puppy here; http://www.pendrivel...e-from-windows/
  
  
• Open BurnCDCC with Windows Explorer
• Extract All files to a location you can remember
• Double Click BurnCDCC
• Click Browse and navigate to the Puppy Linux ISO file you just downloaded
• Open/Double Click that file
  IMPORTANT: Adjust the speed bar to CD: 4x DVD: 1x
• Click Start
• Your CD Burner Tray will open automatically
• Insert a blank CD and close the tray
• Click OK

Puppy Linux Live CD will now be created
2. Set your boot priority in the BIOS to CD-ROM first, Hard Drive Second

• Start the computer/press the power button
• Immediately start tapping the appropriate key to enter the BIOS, aka "Setup"
  (Usually shown during the "Dell" screen, or "Gateway" Screen)
• Once in the BIOS, under Advanced BIOS Options change boot priority to:
  CD-ROM 1st, Hard Drive 2nd
• Open your ROM drive and insert the disk
• Press F10 to save and exit
• Agree with "Y" to continue
• Your computer will restart and boot from the Puppy Linux Live CD
  
  

3. Recover Your Data

• Once Puppy Linux has loaded, it is actually running in your computer's Memory (RAM). You will see a fully functioning Graphical User Interface similar to what you normally call "your computer". Internet access may or may not be available depending on your machine, so it is recommended you print these instructions before beginning. Also, double clicking is not needed in Puppy. To expand, or open folders/icons, just click once. Puppy is very light on resources, so you will quickly notice it is much speedier than you are used to. This is normal. Ready? Let's get started.
  
  3a. Mount Drives
• Click the Mount Icon located at the top left of your desktop.
• A Window will open. By default, the "drive" tab will be forward/highlighted. Click on Mount for your hard drive.
• Assuming you only have one hard drive and/or partition, there may be only one selection to mount.
• USB Flash Drives usually automatically mount upon boot, but click the "usbdrv" tab and make sure it is mounted.
• If using an external hard drive for the data recovery, do this under the "drive" tab. Mount it now.

3b. Transfer Files.

• At the bottom left of your desktop a list of all hard drives/partitions, USB Drives, and Optical Drives are listed with a familiar looking hard drive icon.
• Open your old hard drive i.e. sda1
• Next, open your USB Flash Drive or External Drive. i.e. sdc or sdb1
• If you open the wrong drive, simply X out at the top right corner of the window that opens. (Just like in Windows)
• From your old hard drive, drag and drop whatever files/folders you wish to transfer to your USB Drive's Window.

For The Novice: The common path to your pictures, music, video, and documents folders is: Documents and Settings >> All Users (or each idividual name of each user. CHECK All Names!) >> Documents >> You will now see My Music, My Pictures, and My Videos.

Remember to only click once! No double clicking! Once you drag and drop your first folder, you will notice a small menu will appear giving you the option to move or copy. Choose COPY each time you drag and drop.

YOU ARE DONE!!! Simply click Menu >> Mouse Over Shutdown >> Reboot/Turn Off Computer. Be sure to plug your USB Drive into another working windows machine to verify all data is there and transferred without corruption. Congratulations!





Tell me how you get on.

[amalm92]

Thanks. Do I need to have an external hard drive?

[emeraldnzl]

Just something to transfer your data too.

I guess it depends on how much data you have but a reasonable sized flash drive (say a 32GB one or maybe two or threes smaller ones) might be enough if its just your important data.

[amalm92]

Okay this has worked great for me. Thank you so much.
I've spent 5-6 hours getting everything backed up and now I'm all done. I'm ready for the next step.

[amalm92]

Hi,

I am away on holiday for one week, so will it be possible to leave this topic open please? I will reply back on the 27th December. Thanks.

Amal

[emeraldnzl]

Hello again amalm92,

I am away on holiday for one week, so will it be possible to leave this topic open please?

I will keep the topic open for you. Have a nice break.

I'm ready for the next step.

If your computer came with an installation disc then carry out the instructions at the link below:

Go to Windows 7 Repair Installation for information about how to repair your machine.

If your machine has a recovery partition (nowadays many branded machines come with recovery partitions which can be used to reset your computer back to factory condition) the tell me what make and model your machine is and I will endeavour to find the appropriate instructions for you.

[amalm92]

Thanks. I'm back now.

..

Well the brand name of my PC is: Mesh, but i cannot find the model number anywhere.
Shall i do a clean install of windows 7?

[emeraldnzl]

Shall i do a clean install of windows 7?

Short answer, yes.

If you have a Windows Installation disk provided with your PC you can carry out a clean install see the link to instructions at my last post.

Well the brand name of my PC is: Mesh, but i cannot find the model number anywhere.

I don't know whether their computers come with a recovery partition. If you have an installation disk supplied with your machine then I think not.

I found the link below that has contact details for technical support if you wish to ask them.

http://www.meshcompu...ORT_CONTACT_VII