Computer Support Forum

Spyware that removes msconfig and disables Add/Remove Programs, even in safe mode

Question: Spyware that removes msconfig and disables Add/Remove Programs, even in safe mode

Spyware that removes msconfig and disables Add/Remove Programs, even in safe mode. simple as that. and adaware does not find it at all. what would you guys do? websearch is on there, and so is the homesearch hijacker. any thoughts?

Relevance 100%
Preferred Solution: Spyware that removes msconfig and disables Add/Remove Programs, even in safe mode

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link (This link will automatically start a download of Reimage that you can save to your computer.)

Answer: Spyware that removes msconfig and disables Add/Remove Programs, even in safe mode

Hi, Your first step, if you can get it to run, is to post a Hijackthis log--

Make a new folder somewhere like Program the file to that folder and run it from there. Hit the Scan button, when the Save Log button shows, save the log as hijackthis.txt and copy/paste it to a blank reply here at your thread.

2 more replies
Relevance 81.59%

Hi, I seem to have a nasty fake-antivirus calling its-self 'Malware Protection'. It is preventing me running any programmes from my computer such as malwarebytes, task manager, combofix, Regedit.exe and so on. The only thing I seem to be able to run is McAfee - which doesn't get it. It also prevents me from opening in safe mode: the computer shuts down as windows is opening every time I do this. Anyone know how to deal with this?Thanks

Answer:how to remove spyware without safe mode?

by the way - does anyone know if it is possible for me to run malwarebytes from another computer if I remove my hard drive and connect it via usb? would this risk infecting another machine?Thanks

5 more replies
Relevance 81.18%

Hi, my laptop is a Dell Inspiron E1505 and I am using Windows XP

Problems (in order of appearance):
- Cannot perform System Restore (haven't been able to in a long time)
- Search engine redirects
- Cannot run Safe Mode (this has happened before, but that was due to a missing file, which I re-installed, and this time it's a different error... "A problem has been detected and windows has been shut down to prevent damage to your computer")
- Pop-ups (search engines ex. StopSearchClick, virus protection)
- Can't run Spybot: Search and Destroy, Malwarebytes' Anti-Malware, or HijackThis
--> "Windows cannot access the specified device, path, or file. You may not have the appropriate permissions to access the item."
- Both IE and Firefox are crashing frequently

Things I may have done to exacerbate problems while trying to fix them:
- deleting (newly created) files in system32, temp and system folders

I've done a decent job of getting rid of problems in the past, by running searches (and finding great sites/forums like this one) or figuring out what to do on my own (ex. I've been able to locate those ridiculous and merciless pseudo- "virus protection" programs and delete them on my own), but I probably got overzealous and now I have too many problems to be able to find one solution for all of them. Please help? I greatly appreciate any time or assistance (it's amazing what people do on forums like this one to help o... Read more

Answer:Can't run Safe Mode or any spyware-removal programs

Please download and save to your desktop.Extract (unzip) the file to its own folder such as C:\Gmer. (Click here for information on how to do this if not sure.) Disconnect from the Internet and close all running programs.Temporarily disable any real-time active protection so your security program drivers will not conflict with gmer's driver.Click on this link to see a list of programs that should be disabled.Double-click on gmer.exe to start the program.Allow the gmer.sys driver to load if asked.You may be prompted to scan immediately if GMER detects rootkit activity.If you are prompted to scan your system click "Yes" to begin the scan.If not prompted, click the "Rootkit/Malware" tab.On the right-side, all items to be scanned should be checked by default except for "Show All". Leave that box unchecked.Select all drives that are connected to your system to be scanned.Click the Scan button to begin. (Please be patient as it can take some time to complete)When the scan is finished, click Save to save the scan results to your Desktop.Save the file as gmer.log and copy/paste the contents in your next reply.Exit GMER and re-enable all active protection when done.

5 more replies
Relevance 79.54%

Can someone please help me out with a recommendation?

I would like to find an anti-virus program and an anti-spyware program that allow the user to both install and run the program while in safe mode.

I try to help people clean up their bogged-down computers, and I have found that the best way to do this is to boot into safe mode in the beginning and then start the clean-up process.

I usually edit msconfig, then I use Wincleaner Orange 1-Click Cleanup to get rid of the junk and clean up the registry. But then I like to scan for viruses and spyware. I really like Spybot and AVG but neither of those programs will allow you to install and/or run them while in safe mode.

Can someone please recommend some (free or trial version) quick but powerful virus and spyware removal programs? I say "quick" because I have a limited amount of time for each computer, and I can't sit around and wait an hour for each program to scan through a bogged-down, virus-laden hard drive.

I know this might be asking a lot, but I figured if anyone knew about such things, it would be you guys. You've helped me so much in the past.

Thanks in advance!


More replies
Relevance 75.03%


customer has this trojan on win xp svcpack 3 PC workstation. am familiar with standard fixes that involve safe mode to run malwarebytes or similar programs.

this appears to have evolved by disabling the safe mode (safe mode, safe mode w/ command, safe mode with networking) so that when F8 selection of any safe mode, it runs like regular safe mode, but then fails and reboots to normal start up (and the virus).

i was able to apparently remove the trojan by running windows defender offline, hitman pro and malwarebytes (as far as i can tell) but am unable to find instructions how to restore the safe mode capabilities).

thoughts, suggestions welcomed. thank you.

More replies
Relevance 75.03%

I was recently called to help a friend with a spyware attack. The visible threat was a version of the Internet Security Suite 2010.

Safe-Mode was disabled, taskmanager was disabled, the installed AV/Firewal/Spyware product was "running" but had obviously been compromised (Trend Micro Internet Security Suite).

MBAM was having trouble getting installed, even after re-naming the file (I see now that your 'site has added an "mbam.exe" download). I had previously found a link to your ComboFix app, and had downloaded it (I see now that you guys have added a lot of warnings about using it). I ran ComboFix and it worked superbly (Thanks!). And I will be getting MBAM running on it to double-check the cleaning process, as ComboFix reported rootkit issues.

Upon returning to your site I now see all the warnings about using ComboFix. I'll certainly be a lot more circumspect about using it in the future. But after all that I have a few questions.

1. What issues are you seeing as a result of ComboFix being run on Windows XP systems?
2. Is Vista more tempermental than XP for a ComboFix attempt?
3. If the threat worked-around the installed Trend Micro Internet Security Suite in the first place, is that software any good now, post-infection? Or does it have to be replaced/re-installed to have any chance of being effective again?
4. Are you seeing any problems with AVG 9.0 / ZoneAlarm/ Ad-Aware/ MBAM (free)?
5. Do you recommend doubling/tripling-... Read more

Answer:Malware suite disables safe-mode & MBAM

Forgot to ask: Are you seeing any issues with using USB drives to install the fix-it tools? Can the USB drive be compromised itself?

I used to burn CD's of the tools, figuring it was a safe method to use to install the tools, but with the updates coming so fast, I was going CD's like mad, and the USB drive is so dang handy...

1 more replies
Relevance 75.03%

Ok so I am running Vista on a lenovo pc

Once I boot in safe mode it shutdowns and restarts autmatically after a few seconds

I have a cd that I can boot into windows xp with some software like OTLPE and others.

If I boot into xp with this CD I can navigate around for about 15 mins then my video shutsdown

If reboot to it again right away my video lasts for about 2 mins

I tried running Malwarebytes (already installed) but a runtime error 13 mismatch shuts it down

I can't get to system recovery from f8 on this pc I only have the options listed below
Safe Mode
safe mode with Networking
safe mode command prompt

enable boot logging
enable low res video
directory services restore mode
debugging mode
disable system restrt onfailure
diable driver sig enforcement


Thanks for any help you can give

Answer:FBI Virus Disables Safe mode, and shuts down video

What about safe mode with command prompt

7 more replies
Relevance 74.62%

Hi guys,

My problem is somewhat complex so please bear with me. I had malware and adware on my laptop which was really annoying and I tried really hard to get rid of it. So I decided I was going to do a system restore. The system restore kept saying "System restore is initializing". I tried it three times and it didn't work. I looked around on the internet, and someone suggested to do the system restore while in safe mode. This is where I made my mistake. I set safe mode in msconfig.exe (not knowing you could go into safe mode while booting). msconfig forces the computer to boot into safe mode everytime, but my safe mode won't boot. I get a b;ack screen with a cursor. I have noticed that the cursor gets reset to the middle of the screen every five seconds or so. I also see the words safe mode flash in all four corners sometimes. I have tried re-installing windows 8.1 from a bootable usb, but whenever I change the boot priority, it doesn't seem to save my settings. Please tell me what my options are. Will replacing my hard drive do the trick. Thank you in advance.

Answer:I set safe mode in msconfig.exe and safe mode won't boot.

Can you restart and get into your log in screen ? If you can, enter safe mode by pressing the power button icon (lower right corner) then Shift + restart. That gets you to Advanced Settings where Safe Mode and, if that fails, Reset PC to orig settings. If you can't, try a hard reset by removing battery and all external usb attachments and then pressing and holding power button until it shuts down. Repeat a few more times to drain memory, then see if powering up will get you to log on screen.

A system restore in safe mode will just restore the malware. You need to boot into safe mode and run your anti-virus or malware program and have them quarantine and then remove them while in safe mode. Use Malwarebytes free or Adwcleaner or Hitman to clean the system. If that does the trick, manually create a system restore point that you know is clean after the system is to your satisfaction.

12 more replies
Relevance 74.21%

My wife clicked on something on a Kardashain (sp?) website a few days ago, and got our Windows XP computer a very nasty infection. If I boot in regular mode, our background is replaced with a big message in red that says "your system is infected", and we get the constant pop-ups, etc. There are small red circles with white "x" in the middle on teh bottom right, and the popup says "click here to protect your computer from spyware"- it then runs "advanced virus remover' and "protection system" (icons look liek windows security center and it pops up fake windows security center messages) and "protection system suppport" (icon looks like a life preserver).

I tried in safe mode, and the virus has disabled Avast, spybot, and windows defender. i tried to install hijackthis, and it seems to have removed access to the program. When I try to run windows defender, or spyhunter, i get "windows cannot access the specified device,path , or file. You may not have the appropriate permissions to access the item".

In safe mode, I did get spyhunter to work for a minute, and it said that it had detected a rootkit, so i rebooted using the spyhunter mini OS, and after that was at least able to run spybot and spyhunter, but they both just closed in the middle of scans, I assume due to the virus that we have.

IT also redirects websites to "" but eventually gets to the right site.

I am ... Read more

Answer:Nasty infeciton- disables every antivirus program even in safe mode

Hi mc7977,

Sorry for the delay in looking into your log, as we are extremely busy in this section of the forums. If you still require assistance and are not seeking help elsewhere, then please carry out my instructions.

Please subscribe to this thread so that you are notified when you receive a reply. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Add Subscription.

** Note: Please stick with me until I declare that your system is free from malware. Even though your system may not have any symptoms of malware, it may still be infected. **


Download GMER Rootkit Scanner from HereNote: You are downloading a randomly named EXE because some malware won't let gmer.exe launch
Double click on the randomly named gmer executable (.exe) . If asked to allow gmer.sys driver to load, please consent .
If it gives you a warning about rootkit activity and asks if you want to run on NO, then use the following settings for a more complete scan..

Click the image to enlarge it

In the right panel, you will see several boxes that have been checked. Uncheck the following ... Sections
Drives/Partition other than Systemdrive (typically C:\)
Show All (don't miss this one)

Then click the Scan button & wait for it to finish.
Once done click on the [Save..] button, and in the File name area, t... Read more

3 more replies
Relevance 74.21%

anybody know what i can do?

Answer:Why does msconfig shut off in normal mode but not in safe mode?

7 more replies
Relevance 72.16%

I have a Dell Inspiron 6000 with Windows XP. I changed the msconfig settings to safe mode to try to remove a virus. When I try to turn it on i get a blue screen informing me that there is a reason that will not let windows start and to restart my computer, when i restart again, I get the same blue screen. No matter what option I choose; safe mode, safe mode with networking, start windows regularly, or last known good configuration, I get that same blue screen, and I was wondering if there is a way I can change the msconfig back to regular boot even though i can not get passed the blue error screen.

Answer:Msconfig set to safe mode

Bobbye said:

You are looking for Errors that correspond to the time of the BSOD. Try to find Error from the last normal Mode.

You will see Errors that are specific to Safe Mode and don't give us the information we need- such as "DCOM didn't start. DCOM won't start in Safe Mode." You are the second person in two days who enabled Safe Mode using msconfig instead of booting into safe Mode using the F8 key. It most like will be an Error in the System Log.

Start> Run> type in eventvwr

Do this on each the System and the Applications logs:
[1]. Click to open the log>
[2]. Look for the Error>
[3] .Right click on the Error> Properties>
[4]. Click on Copy button, top right, below the down arrow >
[5]. Paste here (Ctrl V)
You can ignore Warnings and Information Events.
If you have a recurring Error with same ID#, same Source and same Description, only one copy is needed.
You don't need to include the lines of code in the box below the Description, if any.
Please do not copy the entire Event log.

Errors are time coded. Check the computer clock on freeze.

IF you continue on this old thread, only those who have subscribed to it or who open it will see your post.Click to expand...


2 more replies
Relevance 71.75%


I use Firefox on Windows Vista. Every time I use Google search engine, the links redirect to "" which then redirects to an advertisement website. The only links that do go through are for wikipedia sites. I can type the address in manually to get to a website, usually. (There are some exceptions: I can't get to in any way; when I try to go there it says "Address not found")

I've attempted to download Spybot S+D, which fails to install properly. Whenever I try, it says: "Error Sending Request; The server name or address could not be resolved." I also downloaded Malware, but am unable to run it either in safe or normal mode. I downloaded Spyware Doctor, but the Smart Update feature is not working, saying that it's unable to connect to the server also.


- Joyce

Answer:Google redirects, disables anti-spyware programs, blocks websites

Please download Malwarebytes Anti-Malware (v1.36) and save it to your desktop.alternate download link 1alternate download link 2MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan.If an update is found, the program will automatically update itself. Press the OK button to close that box and continue.If you encounter any problems while downloading the definition updates, manually download them from here and just double-click on mbam-rules.exe to install.On the Scanner tab:Make sure the "Perform Quick Scan" option is selected.Then click on the Scan button.If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button. The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.When the scan is finished, a message box will... Read more

1 more replies
Relevance 71.34%

I'm in the process of following instructions to eliminate some spyware and used the symantec msconfig procedure referenced here to boot into safe mode. Unfortunately I now know that my system will not boot into safe mode. Since I used msconfig to get into safe mode and not the F8 key I'm stuck.

How do I get to a place where I can modify msconfig back to normal boot? I have the reinstallation cd provided by Dell when I bought my system but don't really want to reinstall windows if I don't have to.

Specifics of what happens when I boot:
Basic Dell bios load screen and then windows splash.
Black screen with "safe mode" in the 4 corners of the screen
Windows is startup up... screen
Login screen with all user accounts showing.
I log in as administrator or another account with admin privileges.
Loading personal settings screen.
Black screen with "safe mode" in the 4 corners.
Dialog box with "Windows is running in safe mode, etc." appears briefly and then goes away. Quickly clicking yes doesn't make a difference.
Then nothing. I'm sitting with a black screen, safe mode in the 4 corners, MS Windows XP...SP2 on the top, a mouse cursor and nothing else. The only thing I can do is press "windows-key L", which presents me with a "Unlock Computer - this computer is in use and has been locked" window. If I use the account I originally c... Read more

Answer:safe mode via msconfig - now won't boot

When you log in using safemode try hitting Ctrl-Alt-Del and look at the task manager

In the task manager hit File -> New Task(Run) and type in msconfig

If you can get this working you can reconfigure msconfig.

3 more replies
Relevance 71.34%

I did the one thing that was not recommended. I changed the config to load up in safemode. I am running windows XP, and I do not have an XP disc because I bought the computer used. Now nothing happens. The system wont even load into safe mode. I just get a black screen. Any help that would get me to boot back into normal mode would be really appreciated. :-o

Answer:Tried to boot in safe mode using Msconfig

I had this happen to me and the way I fixed it was editing boot.ini file from recovery console but you don't have the XP CD.

One way would be to download a Linux Live CD (I like Linux Mint). You would burn the .iso file to a CD as an image file. Then start the computer from the CD. It will load a Linux desktop and give you access to your C: drive. Browse to C:\boot.ini then edit the boot.ini file deleting the /safeboot part of the line that looks like this:

multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP" /safeboot

to this:

multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP" /fastdetect

The Linux Mint CD is very easy to use. If you know how to burn an iso file you should have no problem.

36 more replies
Relevance 71.34%


I'll get straight to the issue in hand

I have a virus on my laptop, i was in the process of sorting this out, however i clicked on run - Msconfig - Boot - safe boot and selected minimal. I re-started and the computer loaded automatically in safe mode, however it got to the blue screen and the computer shut down automatically.

I take it i need to de-select this option, but i can't even get beyond this blue screen which keeps shutting the computer down. There is an option on my windows 7 Operating system to use CMD as part of the recovery process, however i've tried to open MSCONFIG in there but to no avail. I dont have any system restore points set up either, so all i have is the Regedit option as i can get into Regedit.

My two questions are quite simply: Can i open MSCONFIG in cmd? and Why is safe mode not loading and shutting the computer down? Is this virus related?

I guess a third question would also be, what can i do besides reverting back to default factory settings?

Kind regards, your help is much obliged


Answer:Not being able to open MSCONFIG in CMD or safe mode!

What happens if you keep F8 pressed immediately after starting? Do you get the screen with starting options.

If yes then try and start in the Safe Mode with Command Prompt. You might be able to open msconfig in this environment. I have been able to reach msconfig in this way often.

3 more replies
Relevance 71.34%

Ok, here's the deal. I ran msconfig, and checked "safe boot" just like I used to do in XP when I wanted to restart my computer in vista. It started in safe mode and worked.

But now, I can't uncheck it! When I run msconfig again and "uncheck" safe boot, It automatically goes to "Selective Startup." And when I select "Normal Startup" it always rechecks "safe boot" automatically, so basically if I want windows to start properly, it HAS to me a selective boot, because thats the only option that allows me to uncheck safe boot. For some reason, Vista thinks that safe mode in normal lol. I'd like to get it back to where normal startup has safe boot unchecked in msconfig. Anyone have a clue???? Thanks


Answer:Stuck in Safe Mode because I used msconfig?


5 more replies
Relevance 70.93%

Hello my computer(Asus notebook running windows 7 64 bit) is showing that I am using 1.5 gb of RAM when I close everything.
I have a lot of 'processes' that are running and i'm afraid to kill an important one, of course manually killing each one of them will be useless since they will start up everytime i turn my computer on, so I made a screenshot of what programs autorun and want to know which are safe to disable.
Any more information that would help you help me ? :P

Answer:Safe to remove startup in msconfig

Most are safe to turn off apart from Anti Virus, however if you turn something off and you lose functionality, just go back and enable it!!

msconfig - boot faster and crash less.

1. Click on the Windows 7 start icon in the bottom left corner of your screen.

2. Type msconfig in the search box and then either press enter on your keyboard or double-click on the msconfig program that appears in the search results.

3. Windows 7 will launch Microsoft's System Configuration Utility. Click on the Startup tab.

4. This takes you to a page with a list of "startup items." Startup items are programs that are automatically loaded every time you turn on your computer. Some startup programs are absolutely necessary e.g Anti Virus, others are simply a waste of RAM.

5. Click on the OK button.

6. A message will pop up telling you that you must restart your computer before these changes will take effect. Click on "Restart" and your computer will automatically reboot.

7. That's it! Your computer should now boot faster and crash less.

If you ever want to turn on any of the startup items you disabled with msconfig , just run msconfig again.

Most are safe to turn off apart from Anti Virus, however if you turn something off and you lose functionality, just go back and enable it!!

2 more replies
Relevance 70.52%

Well, I've been scouring Google on our secondary computer all night, and I'm stumped. I'm also not completely tech savvy, so please forgive me.

My computer shut down by itself while I was typing an email. Rebooted and no exe files would open except IE 64 bit (as of six hours later, now that won't open either - opens, flashes, closes and says IE crashed). It has gone through numerous "windows won't start, repairing" screens. It has tried to system restore, but it doesn't fix the problem.

I cannot open in safe mode, and Task Manager is missing. I can open regedit but not msconfig (this is bothersome because I found a workaround for getting the system to reopen in safe mode by changing some configurations, but...) Can't open device manager as one option suggested looking for the possible virus culprit in the tools/drivers section.

I found a site that had an exe repair fix to either merge or import into the registry, but it keeps saying it can't do it because there are "processes running." Those boards suggested trying to the merge/import in safe mode, but as above..can't open in safe mode. Also since I have no task manager available, I can't manually end or suspend any processes.

Windows Defender runs but says everything is a-ok (clearly not).

Because I don't feel comfortable deleting anything from the registry, that's the only thing I haven't tried. Oh, I did find something that said to check the shell and one other place in the registry, bu... Read more

Answer:No exe files will open, nor msconfig or safe mode

Okay, I restarted and finally was able to get into msconfig. I set it up so the computer automatically starts in Safe Mode. Tried importing/merging that exe file again, and nope, says "other processes are running." Went into services through msconfig and shut down all services - still didn't work.

I also find a possible solution to create a new user - won't let me. Sigh....

4 more replies
Relevance 70.52%


I'll get straight to the issue in hand

I have a virus on my laptop, i was in the process of sorting this out, however i clicked on run - Msconfig - Boot - safe boot and selected minimal. I re-started and the computer loaded automatically in safe mode, however it got to the blue screen and the computer shut down automatically.

I take it i need to de-select this option, but i can't even get beyond this blue screen which keeps shutting the computer down. There is an option on my windows 7 Operating system to use CMD as part of the recovery process, however i've tried to open MSCONFIG in there but to no avail. I dont have any system restore points set up either, so all i have is the Regedit option as i can get into Regedit.

My two questions are quite simply: Can i open MSCONFIG in cmd? and Why is safe mode not loading and shutting the computer down? Is this virus related?

I guess a third question would also be, what can i do besides reverting back to default factory settings?

Kind regards, your help is much obliged


More replies
Relevance 70.52%


I booted into the safe mode using the msconfig .
But iam stucked while booting in safe mode,the system gets hanged and also i could not log in normal mode also..please help


Answer:Problem after booting in Safe mode using MSconfig

7 more replies
Relevance 70.52%

Main Goal:  gain access to my files so I can save them without doing anything that would damage or erase my files because the files are what's important to me, I don't mind if I have to reformat as long as I can save the files first.Hello everyone, this is my first post on here and I would greatly appreciate any help.I want to give as much information as possible so you have a more accurate picture and you don't have to drag information out of me but at the same time I just experienced, over the last few days, a slew of problems with my laptop and have been recovering little by little over the last 3 days.  So I want to just address the Subject (Can't Boot Into Safe Mode or Open msconfig) I entered first instead of writing a novel about how after my laptop powered down:(1)CHKDSK started after a restart, did a bunch of crazy stuff including "Replacing invalid security id with default security id for file XXXX."  Did this on nearly 400,000 files.(2)Then windows wouldn't boot so I did a boot repair that didn't work.(3)Then tried to do a system restore but the first one didn't work and was "damaged or deleted" in the process.  I thought the second one didn't work either and tried it twice since I didn't get the "damaged" message on this restore point and then gave up for the night (the "novel" will include the error messages I received each time).(4)Then when I turned on my co... Read more

Answer:Can't Boot Into Safe Mode or Open msconfig

There are two ways to do this that I can think of.First way - do you have either a desktop PC you could hook the drive up to, or another PC of any description with a USB to SATA converter?  If so, you could hook the drive up that way, and copy your files off.Second way - do you have a Windows 7 install disk?  Not a restore disk, but a full install disk?  If so, you can install Windows back onto the C: drive, and your old install will be saved into a folder named windows.old.  Your files will still be there, so you will be able to copy them off and then delete the windows.old folder afterwards.Oh, bonus way - if you can download and burn a Linux LiveCD, you could boot from that, and try to copy your files from there.  Puppy Linux is what I usually use as it's quite easy to use, and has enough tools to be useful without being overwhelming for a Linux novice like myself.Regardless of the method you use, I'd be inclined to do a format and clean install of the laptop after you have your files safely stored away, sounds like something's gone really haywire there and even if you could get it up and running normally, I wouldn't trust it myself because you never know what else may be lurking.Hope this makes sense, if there's anything you're unsure about just ask, oh and welcome to the forums!

5 more replies
Relevance 70.52%

I am try do safe mode at windows 8, but monitor tell out of range.
and now I even can not login to windows 8..
what I can do? need help asap, bozz pc.
now I hate win8

Answer:Safe Mode from msconfig, Out of range, cannot login

It should not state that with Safe Mode. Try pressing the Auto Calibrate button on your monitor.

11 more replies
Relevance 70.52%

I'm running Windows 8.1x64. I booted to safe mode today by changing the boot options in msconfig.exe. Now, msconfig won't let me change back to Normal startup, and I'm stuck in safe mode. When I check the Normal Startup box under the General Tab in msconfig and hit OK, I receive this message:

"System Configuration cannot save the original boot configuration for later restoration. Boot changes will be reverted.

"The system cannot find the file specified."

No file is specified.

I've booted to safe mode on other occasions but never have experienced this problem. Windows 8.1 has been running normally with no problems. The reason I went into safe mode is that a non-bootable drive has disappeared from Explorer and I wanted to see if it showed up in Safe Mode.

Answer:In Safe Mode, msconfig won't allow normal startup

Hello John,

You might see if you may be able to use one of the options in the tutorial below to boot back into normal mode.

Safe Mode - Start Windows 8 in

3 more replies
Relevance 70.52%

is there someway to get back to msconfig when I am caught in this limbo state between starting up in safe mode and normal mode? I would love to change the setting back to normal start up in msconfig.Just to help here are some more details on my problem. When the computer boots it tries to start up in safe mode and has a problem with agp.440.sys then goes back to the screen where you can select to start in safe mode, or regular mode, etc. If I choose safe mode it will have the same problem and go back to the selection screen. If I select start in regular mode it will try then fault and go back to the same selection screen again. I can't get beyond this screen. I believe this is happening because I have selected safe mode in msconfig and now I can't get at it to change the setting. I didn't have any booting problems before doing this

Answer:i used MSCONFIG process and got strucked in safe mode,help m

MSCONFIG has nothing to do with it.

2 more replies
Relevance 70.52%


My laptop was having some iexplorer bugs so I ran a virus scan with symnatec, and was then advised to log in via safe mode and run the scan again. I turned on safe mode in msconfig and restarted, but when the log in screen appeared in safe mode, my mouse or keyboard did not work so I can't get in.

If I try holding F8 and choosing to boot normaly or under any other condition it reverts to safe mode, presumably because of the msconfig change, so I can't get back to msconfig to chane the setting back.

Any idea how I can get round this?



Answer:XP Safe Mode / Msconfig / Keyboard problem

Forget about Symantec. Run your next scan with Avast or Avira, then SuperAntispyware and MalwareBytes...
You are apparently using USB mouse and USB keyboard which have not installed yet in the install run.

22 more replies
Relevance 70.52%

I have a few remaining programs which I would like to disable, however, do not want to disable any programs which will result in me losing some functionality.

I'm mostly unsure about the HP programs, but that seem to me, just some form of OEM bloatware.



Please see attached screenshot:

Answer:Which programs are safe to disable with MSCONFIG Startup tab?

Have just rebooted after making changes to msconfig , and everything is working fine, here's another screenshot:

4 more replies
Relevance 69.7%

Running XP, SP3. Have run avast antivirus in both regular and doot scan with no results. Tried to run MalwareBytes but it hangs when trying to update definitions.
When I reboot and select Safe Mode it hangs while loading files.
Can't find files like Syetem Restore or msconfig.
Ran Unhide with following results:
Unhide by Lawrence Abrams (Grinler)
Copyright 2008-2013
More Information about Unhide.exe can be found at this link:
Program started at: 11/23/2013 02:45:10 PM
Windows Version: Windows XP
Please be patient while your files are made visible again.
Processing the A:\ drive
Finished processing the A:\ drive. 0 files processed.
Processing the C:\ drive
Finished processing the C:\ drive. 186756 files processed.
Processing the E:\ drive
Finished processing the E:\ drive. 1234 files processed.
The C:\DOCUME~1\Owner\LOCALS~1\Temp\smtmp\ folder does not exist!!
Unhide cannot restore your missing shortcuts!!
Please see this topic in order to learn how to restore default
Start Menu shortcuts:
Searching for Windows Registry changes made by FakeHDD rogues.
 - Checking HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
 - Checking HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
 - Checking HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\polic... Read more

Answer:Can't get to Safe Mode, System Restore msconfig or Malwarebytes

Hello John, please try this, it will create a shortcut to your system restore.
Right-click the desktop
Choose New-Shortcut
For the location of the item, enter:%SYSTEMROOT%\System32\restore\rstrui.exe
Click “Next”
Enter a name for the shortcut
Click “Finish” 
After that try to restore your PC. I hope this will help. Give us updates.

5 more replies
Relevance 69.7%

First off let me start by saying hello. I am a newbie and would greatly appreciate any help or advice that the forum can give.

I am running windows xp on an older dell desktop.

While following the bc tutorial "remove antispyware soft" I was directed to the "how to start windows in safemode" tutorial. This tutorial instructed me to start computer in safe mode using MSconfig. Upon doing so my computer gets stuck in a re-boot cycle that I cannot get out of. According to the tutorial this is because of the malware, (see section titled, "Problems that can occur by forcing Safe Mode using the System Configuration Utility", unfortunately this section is at the very bottom and not sequential. It should be at the top for morons like me). The tutorial recommends using boot disk to reboot my computer. Unfortunately this is my old computer and I no longer have any XP associated disks. Can I fix this problem without any xp boot disk? I have no floppy disk drive (its been broken for years), but my cd-rom drive works. Again any help would be greatly appreciated.

Answer:safe mode loop using msconfig, no floppy bootdisk

Hello, we can create a bootable disk that allows you to access the Recovery Console.

However, first I would like to know what exactly happens when you try to boot. Does safe mode automatically load (you see the drivers rolling over the screen) and then you get a blue screen/reboot?

36 more replies
Relevance 69.7%

A friend brought me a computer because Anitvirus Security Pro would keep running on his moms laptop. I have had probably 5 different computers that have had this on them and have been able to clean them but this one is really a beast.
His system is running Win 7 and he tried a number of things before bringing it to me with no luck.
I printed off the Anitvirus Security Pro Removal instructions from this site but the laptop is not allowing the system to boot in Safe Mode and It will also not allow access to Regedit or MSCONFIG.
Any suggestions on getting control of the system back?

Answer:Antivirus Security Pro - won't allow Safe Mode, Regedit or msconfig

Hi there,my name is Marius and I will assist you with your malware related problems.Before we move on, please read the following points carefully. First, read my instructions completely. If there is anything that you do not understand kindly ask before proceeding. Perform everything in the correct order. Sometimes one step requires the previous one. If you have any problems while following my instructions, Stop there and tell me the exact nature of your problem. Do not run any other scans without instruction or add/remove software unless I tell you to do so. This would change the output of our tools and could be confusing for me. Post all logfiles as a reply rather than as an attachment unless I specifically ask you. If you can not post all logfiles in one reply, feel free to use more posts. If I don't hear from you within 3 days from this initial or any subsequent post, then this thread will be closed. Stay with me. I will give you some advice about prevention after the cleanup process. Absence of symptoms does not always mean the computer is clean. My first language is not english. So please do not use slang or idioms. It could be hard for me to read. Thanks for your understanding.    Scan with FRST (Recovery Environment)To run FRST on Vista and Windows7:For x32 (x86) bit systems download Farbar Recovery Scan Tool and save it to a flash drive.For x64 bit systems download Farbar Recovery Scan Tool x64 and save it to a flash drive.Plug the flashdrive into ... Read more

38 more replies
Relevance 69.7%

Just had to share this free utility. I've tried it, works great.

Here's a utility that makes booting into Safe Mode easy. You
don't have to hit the F8 key or make changes in msconfig.

Answer:Boot into Safe Mode, no tapping F8, no changing msconfig

kniht, Regarding the BootSafe program see Posts #4 and #5 by Mosaic1 in the thread at the link below. She is very sharp with computers and on her word I don't recommend BootSafe anymore. This is just my opinion.


3 more replies
Relevance 69.7%

hello everyone,
well, the problem is my pc actualy infected by virus
so i try to fix it with safe mode, when i chage boot from msconfig to safe mode. my pc keep restarting.
if anybody know how to fix it, please help me

Answer:keep restarting after i change msconfig boot to safe mode

In safe mode open msconfig and uncheck safemode to normal mode. You can startup msconfig either by opening run and msconfig, or open CMD and type msconfig.

0 more replies
Relevance 69.7%

Hi, I had a virus on my laptop that I wanted to remove, so I downloaded some software to remove it, but when I went into safemode all I got on my screen was a blue screen that said that Windows had been shut down to protect my computer and it just stopped, never did anything else. It also told me to restart my computer, so I did. Then I stupidly went into msconfig and made it safeboot and restarted my computer. Well now all I ever get when I start my computer is the same blue screen, it doesn't matter what I do or how I choose to start Windows, it just stops it and shows that blue screen and I have to restart it. Ive tried all the different types of starting up the computer, with normal, or last settings that worked, but nothing seems to work. Any help would be greatly appreciated, thank you.

Answer:Problem with safe mode in msconfig, always blue screen

Keep in mind that using MSConfig to access (force) safe mode when there is malware on your system could have disastrous results and render your computer unbootable. Some types of malware can delete or alter the safeboot key in the registry resulting in the inability to reboot fully into safe mode or back to normal mode. The Safeboot option modifies the Boot.ini file and you may be locked in a continuous reboot loop afterwards where you cannot get back to MSConfig and undo your selection. The same thing can occur with BootSafe as you may not be able to get back to Normal mode and undo your selection. See "Booting into Safe Mode safely".How to fix the way at the bottom of the page

2 more replies
Relevance 69.7%

One of my salesmen's laptops is infected with Anitvirus Security Pro. His system is running Windows 7 Professional SP1. The system will not boot in Safe Mode (it loads through the welcome screen and then immediately logs out and restarts in normal mode) and It will also not allow access to task manager, Regedit or MSCONFIG.
Any assistance would be appreciated! Thanks.

Answer:Antivirus Security Pro - won't allow safe mode, regedit, msconfig

Hello BethI would like to welcome you to the Malware Removal section of the forum.Around here they call me Gringo and I will be glad to help you with your malware problems.Very Important --> Please read this post completely, I have spent my time to put together somethings for you to keep in mind while I am helping you to make things go easier, faster and smoother for both of us!Please do not run any tools unless instructed to do so.We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", thi... Read more

4 more replies
Relevance 69.7%

hello everyone,
well, the problem is my pc actualy infected by virus
so i try to fix it with safe mode, when i chage boot from msconfig to safe mode. my pc keep restarting.
if anybody know how to fix it, please help me

Answer:keep restarting after i change msconfig boot to safe mode

In safe mode open msconfig and uncheck safe mode to normal mode. You can startup msconfig either by opening run and msconfig, or open CMD and type msconfig.

1 more replies
Relevance 69.7%

I was trying to get into safe mode on my T61. Went to cmd prompt. typed msconfig went and clicked statrt in safe mode in the boxes you can click. All this just to get it to start in safemode... Now it repeats over and over in "safe mode restart.  Wont stop cycling through. I have been trying to remove this **bleep** NOD32 antiviris software.  Had to get it to boot in safe mode to get to properly "uninstall"...CAme to the forum here to find out why after pressing F8 a million times it would still pass by safe mode into normal startup windows.   After I read goto cmd prompenter msconfigclig on safe mode now it wont stop cycling... How to I get back to the cmd prompt?  Or does anyone know what I am dealing with? Thank you in advance.

Answer:T61 will not stop rebooting after msconfig safe mode cycles over and over and over........

Hey there Pyroplantfreak,
What version of windows are you using? I found an article that seemed to be dealing with a similar issue to your own over on the microsoft forums, it may be of some interest to you. It recommends you try going into the recovery console, which may help you get back to the command prompt. Hope this helps.

Did someone help you today? Press the star on the left to thank them with a Kudo!If you find a post helpful and it answers your question, please mark it as an "Accepted Solution".! This will help the rest of the Community with similar issues identify the verified solution and benefit from it.

1 more replies
Relevance 69.7%

Hi! I had a malware and decided to run malwarebytes anti-malware in safe mode. The problem was that my computer took too long to boot up before it lets me choose my operating system (i also have linux mint installed, just FYI) and I didn't want to wait 10 minutes just to miss hitting F8 so I changed msconfig to automatically load in Safe mode, so i went ahead and checked that. It booted up fine in safe mode, malarebytes found nothing (I also ran this in normal windows right before...again just FYI).

Now the problem is that I cant get out of safe mode. I tried changing msconfig back but it wouldnt save the settings and the check box that I had checked on normal windows (on the second tab) was unchecked and wouldnt even let me interact with it. I even tried selecting 'normal mode' on the first tab. Anything I did to it would result in a message saying 'windows configuration could not be saved' or something (I'm at work, I don't remember exactly what the message was but I will post it later) after I clicked ok or apply.

I also waited and pressed F8 to select how I wanted to boot and went to normal mode and it still went into safe mode. I tried repairing too but it didn't even find an operating system on my computer, but that probably has to do with the fact that I use linux to boot up.

Any ideas on what to try next?

Thanks in advance

Answer:Windows keeps booting in Safe Mode after msconfig change

To Remove Linux take look at this post:
Error 0xc0000225 on boot

4 more replies
Relevance 69.7%

Is it possible to remove old no longer installed programs from the Start Menu in msconfig.

Answer:How do you remove programs in msconfig

You'll find them in these 2 keys. I haven't tried but presumably deleting them would remove them from the list.For items that were in the Start, All Programs, Startup folder, navigate to registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder, where you'll find a subkey for each disabled item.For items loaded from the Registry, navigate to registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg, where you'll find a subkey for each disabled item.

4 more replies
Relevance 69.29%

I opened msconfig and after clicking on the Services tab --> hide all Micorsoft services --> disable all and then clicked on 'apply' System Configuration Stopped responding [and I could not even restart my PC]. I did so manually. I tried again this time instead of selecting 'Disable all'' I just disabled one of them (Adobe update service) to see if I could do this one at a time. but still it stopped responding and froze everything.
Having no choice I rebooted manually and then pressed the F8 key to reboot in safe mode BUT I got a boot menu asking me which HD I wanted to use to boot into and not the DOS screen giving me a choice for safe mode.
BTW my Win 7 OS HP 64bit is now booting from an SSD drive on a PCI-e card and am wondering if this has anything to do with it.
Anyhow, having done my usual monthly virus scan as well as malaware by using 3 different sources (mine and 2 online ones) just yesterday this virus/trojan/malware is probably not the cause.
Why do I want msconfig or a safe mode boot. Trying to reinstall my HP scanner software and drivers which I am having a little bit of problems with--so not related.

Answer:urgent; Can't boot in safe mode and msconfig stops responding

Not knowing what was in startup originally, it's hard to say what you deleted but I'm guessing it had to do with a driver for your PCI-e SSD. If that's the drive you boot from, the startup boot is saying it's not there. What's the BIOS say for the order of boot devices? What other drives are installed?

9 more replies
Relevance 69.29%

Hello there, I really need help here..

I've booted into safe mode in windows 8.1 by setting the safe mode option in msconfig..

However, when I booted into safemode i realized that I've forgot my password because i usually use a pincode.

How to I get it out of safe boot again? - I've tried to access command prompt, but everything needs that password.

Please help, is there any way to force it to boot up normally again? ;(

- Thanks in advance

Answer:msconfig boot settings sat to safe mode, forgot password

When it reboots into normal mode, won't you still need the password?

Do you have the ability to boot into the recovery environment using the install media and not recovery media?

15 more replies
Relevance 69.29%

Lenovo ideapad 710s . after selecting safe mode, switch off and switch on, I get black screen with LOGO and I see the BIOS does not recognize the ssd anymore. After a new samsung with a pc board factory defective (well known board problem that the model was withdrawn from the market), now i fall again in a big problem with lenovo. i m a little bit boring. did I loose all my data on ssd? and how to get back this new computer, now?

More replies
Relevance 69.29%

Hi all, looks like a good forum here, hoping I can finally find a solution...

This has not been a week that's made me much enamored of Vista.

In order to troubleshoot my parents' Vista PC after their wireless
mouse/keyboard suddenly stopped working after 4/9's automatic updates, I had
to a do a system restore from Safe Mode. Their corded USB keyboard we got to
work (along with a PS2 mouse) to do the fixing wouldn't work using the
F8-method to get into Safe Mode, so I had use MSCONFIG to force a safe mode

The system restore worked, and I've disabled automatic updates until MS
comes out with a fix for the apparently widespread original problem, but now
I'm stuck with a very frustrating situation.

My parents' computer will only boot up into Selective Startup (which leaves
some important things such as graphics drivers unloaded) or into Safe Mode.
Within MSCONFIG, when I choose "Normal Startup", it automatically checks the
"Safe Mode" Box in the boot tab, and when I uncheck that box, it
automatically selects "Selective Start" on the previous tab. (I've tried
hitting apply on each of the tabs, but it doesn't help).

I've found a few other threads with this same problem across the web, but
never found a solution. Can anyone help?

Thanks very much.

Answer:Solved: MSCONFIG - Stuck in Safe Mode/Selective Startup

6 more replies
Relevance 69.29%

Lenovo ideapad 710s . after selecting safe mode, switch off and switch on, I get black screen with LOGO and I see the BIOS does not recognize the ssd anymore. After a new samsung with a pc board factory defective (well known board problem that the model was withdrawn from the market), now i fall again in a big problem with lenovo. i m a little bit boring. did I loose all my data on ssd? and how to get back this new computer, now?

Answer:Lenovo ideapad 710s safe mode from msconfig, and does not recognized the ssd. Please help...

I m now downloading the win10 recovery usb key software >(thanks to the current guarantee it is on). anyone knows if it is going to restore the Bios so that the SSD come up again?

1 more replies
Relevance 69.29%

OK, here it goes. My parent's Desktop was having a side x side error and i've been trying to help her get it repaired. Her problem is that none of the programs will open except for internet explorer. All other applications give the sxstrace.exe error and won't open. I advised her to hit F8 and get into safe mode so I could try and help her further. She couldn't get that to work so I had her force safe mode through msconfig. That worked and got her into safe mode and she's still getting the sxs error and can't get anything to work for her. I advised her to go back into mconfig and uncheck the safe mode boot and wait til I come home and fix it. Now the problem is when she tries opening the msconfig, she gets an error on that saying it can't open the application with the error code 0xc000142 Now she's stuck in safe mode with no networking and the computer is basically useless. I need help getting her going if anyone has any suggestions. I'm 800 miles from home and won't be there until thanksgiving and i'm trying to help her over the phone so im kind of limited here. I was trying to get remote assist going for her but she couldn't install that either without the sxstrace.exe error. Thanks in advance.

they're running windows 7, If i remember correctly it's the x64 version.

Answer:stuck in safe mode msconfig application error 0xc000142

I guess the best bet is to reinstall windows.

2 more replies
Relevance 68.47%


It seems that I have the same issue as this person . I can't use task manager or msconfig, stuff like malwarebytes doesn't work, safe mode crashes and won't allow me to do anything + i have performance issues in video games or music production software.

In the following post(s) I'll attach the results of the scans with Farbar Recovery Scan Tool after the scans are over (First, Addition and shortcut).

Answer:Bug won't let me access Task Manager, Safe Mode, MsConfig etc. + slowing down my comp

15 more replies
Relevance 68.47%

It seems that I have the same issue as this person . I can't use task manager or msconfig, stuff like malwarebytes doesn't work, safe mode crashes and won't allow me to do anything + I have performance issues in video games or music production software.

It seems that the virus is blocking other tech support sites other than this one too! I'm really scared, I would really appreciate help as soon as possible!

to sum up, I can't run task manager, msconfig, any kind of malwarebytes type program, MSE doesn't detect anything, it blocks certain sites, safe mode can accessed but I can't do anything with it - an error show up shortly after running it.

Answer:Bug won't let me access Task Manager, Safe Mode, MsConfig etc. + slowing down my comp

Welcome aboard

Please, complete all steps listed here:
Make sure, you PASTE all logs. If some log exceeds 50,000 characters post limit, split it between couple of replies.
Attached logs won't be reviewed.

Please, observe following rules:

Read all of my instructions very carefully. Your mistakes during cleaning process may have very serious consequences, like unbootable computer.
If you're stuck, or you're not sure about certain step, always ask before doing anything else.
Please refrain from running any tools, fixes or applying any changes to your computer other than those I suggest.
Never run more than one scan at a time.
Keep updating me regarding your computer behavior, good, or bad.
The cleaning process, once started, has to be completed. Even if your computer appears to act better, it may still be infected. Once the computer is totally clean, I'll certainly let you know.
If you leave the topic without explanation in the middle of a cleaning process, you may not be eligible to receive any more help in malware removal forum.
I close my topics if you have not replied in 5 days. If you need more time, simply let me know. If I closed your topic and you need it to be reopened, simply PM me.


9 more replies
Relevance 68.06%

I have some sort of virus that is blocking me from accessing MSConfig and Add/Remove Programs. When my computer boots up, none of my anti-virus software starts up in the tray and when I try to open MSConfig or Firefox Windows asks which program I want to use to open them. It tells me the file can't be found when I try to access Add/Remove Programs through the Control Panel.
Anyone know what is going on or have suggestions?

More replies
Relevance 67.65%

My sister's computer was heavily infected with spyware and adware. Initially I removed all registry entries in the "windows\currentversion\run" folders that I couldn't identify, then I downloaded and ran full scans with avg 8 and ad aware 2008. I tried uploading my hijackthis logs to automated scanners online with no luck also.

Occasionally I will still get ad popups, but mostly the symptom is that whenever I do a search on google or something, a new firefox window comes up. Here's an example of what's in the url bar:

mod removed link

It usually contains some of the keywords in my search as parameters. I guess that php script is logging my search activity. I'm attaching several logs. Let me know if I've left any important information out, and thank you for your help.

Answer:Can't locate or remove ad/spyware after AVG, Adaware, and analysis using MSCONFIG

Please visit this webpage for download links, and instructions for running combofix:

* Ensure you have disabled all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

Please include the C:\ComboFix.txt in your next reply for further review.

2 more replies
Relevance 66.83%

First i will describe the problem.My computer suddenly told me that it was infected with spyware, now i recognized it as a fake indicator because it kept trying to force me to download a certain "anti virus software" so i put 2 and 2 together and figure i had a virus. so I immediately used Avast! (my anti virus program) to run a full thorough scan of my system. It came up with multiple threats (it told me my startup/memory was infected and it was unsafe to continue using my computer) it recommended restarting and running scan on boot to delete threats. So i restart and i get a blue screen. Then the computer tries to restart and it just loops back into the blue screen every time.This is what i think the problem is. Something (virus/spyware/malware) is trying to boot up on startup. My computer is crashing because of this. The only way to delete is  to run a boot scan. but i cannot reboot in normal mode, only in safe mode. Avast requires a reboot to delete the files. (and yes ive tried manually delete the infested file it just reapears) (below is everything ive tried)Now heres what ive tried to do: - I started in smart mode. Ran avast there. it does the same, finds a threat asks me to reboot which brings me back to the blue screen. - I ran msconfig, disabled all startup things in the startup tab and then tried a success, (still got the blue screen)- so then in safemode i installed malwarebytes (recommended by a friend) and ran that, it found 20 thre... Read more

Answer:Computer Wont Start in Normal mode, only Safe Mode. Spyware infection. Help plz!

Use msconfig and enable all items in the startup tab.Please print these instructions as they will be needed later when Internet access is not available. Download SDFix by AndyManchesta and save it to your desktop. using this tool, you must use the Administrator's account or an account with Administrative rightsDouble click SDFix.exe and it will extract the files to %systemdrive%(this is the drive that contains the Windows Directory, typically C:\SDFix).DO NOT use it just yet..Reboot your computer in Safe Mode using the F8 method. To do this, restart your computer and after hearing your computer beep once during startup (but before the Windows icon appears) press the F8 key repeatedly. A menu will appear with several options. Use the arrow keys to navigate and select the option to run Windows in "Safe Mode". Open the SDFix folder and double click RunThis.bat to start the script.Type Y to begin the cleanup process.It will remove any Trojan Services or Registry Entries found then prompt you to press any key to Reboot.Press any Key and it will restart the PC.When the PC restarts, the Fixtool will run again and complete the removal process then display Finished, press any key to end the script and load your desktop icons.Once the desktop icons load the SDFix report will open on screen and also save into the SDFix folder as Report.txt.Copy and paste the contents of the results file Report.txt in your ... Read more

14 more replies
Relevance 66.83%

I am trying to cleanup my niece's computer. I have performed all of the steps per:

I think things are in pretty good shape and want to post a "Hijack This" log as a final check. What I'm not sure about is that I turned off virtually all startup items via msconfig (Win98) before I ran any of the spyware checks\programs.

Will that have affected the results of the spyware programs? Will that affect the "Hijack This" log?

I think that there are still bad entries in the msconfig list (unchecked), meaning there are at least some traces in the registry.

What should I do next? Thanks.

Answer:How do unchecked startup items (msconfig) affect Hijack This and Spyware Programs?

You need to run msconfig and select Normal Startup. We cannot clean what we cannot see. You must allow all items to load.

If you have completed all the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal and you still have problems, follow the steps below.

- Download HijackThis 1.99.1

- Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

- Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file.

- Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

- Run HijackThis and save your log file.

- Post your log as an ATTACHMENT to your next message. (Do NOT copy/paste the log into your post).

7 more replies
Relevance 66.42%

Below is my DDS log. Attached is my attach file. Even in safe mode, my internet explorer and firefox seem to be hijacked and taking me to different sites.

DDS (Ver_09-03-16.01) - NTFSx86 NETWORK
Run by Donald Ford at 11:29:46.42 on Tue 04/28/2009
Internet Explorer: 8.0.6001.18702
Microsoft? Windows Vista? Home Premium 6.0.6001.1.1252.1.1033.18.1982.1396 [GMT -4:00]

AV: Rising Internet Security *On-access scanning enabled* (Outdated)
FW: Rising Internet Security *enabled*

============== Running Processes ===============

C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe
C: ... Read more

Answer:Internet only in safe mode and normal mode won't run antispyware programs

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.comDDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the resul... Read more

2 more replies
Relevance 66.42%

I booted up Poser in Safe Mode and it works. Yet, everytime I try to boot it (or any other OpenGL program) in Normal Mode I get a system freeze.

What are the differences between Safe Mode and Normal Mode? Could it be that Safe Mode uses less exe files?

My System:
E8400 @ 3.0ghz
Western Digital 500gb HDD
HIS Radeon HD3870x2
Patriot 4gb @ 800mhx 4-4-4-12
Gigabyte DS3L
Rosewill 600w
Raidmax Smilodon
Windows Vista x64

I have Catalyst 8.8 drivers. Anything newer than that results in a system crash.

More replies
Relevance 62.73%

I am using VNC to connect to a remote computer.

There are time I need to boot to safe mode but then I do not have access to the cpu as it does not the start VNC setvice.

If I am at the computer In safe mode I can manually start it and it works fine.

How can I add that program to the list of services or programs loaded in XP Safe mode?


Answer:Safe Mode And Programs

I've searched and couldn't find anything. Maybe I'm wrong but I don't believe you can. The whole purpose of safemode is it's a diagnostic tool to help troubleshoot issues. That's why it loads with just the bare necessities and drivers.

2 more replies
Relevance 62.73%

I have been through the read 'n run list and unfortunately I cannot run any of the programs or provide logs, for the reasons I am about to state.

I've been having issues with some kind of browser hijacker I can't seem to get rid of. Yesterday it downloaded what is apparently the mother of all viruses- it immediately restarted my computer, whereupon I could not run ANY programs at all. I tried restarting in safe mode and in safe mode w networking- no dice. I tried system restore- appeared to work, but the virus was still there. (In retrospect I realize this was a bad idea, I didn't realize at the time that the virus may have screwed up my restore points.)

I cannot run any programs, either from the hard drive or from a usb flash drive. When I try, the process comes up briefly in task manager, and then it's almost immediately killed. Either "svchost. exe *32 (winrscmde in the description column)" or the windows error manager pops up before the process is killed, not sure if that's connected.

When I boot into safe mode, the following processes are running: csrss.exe, ctfmon.exe, explorer.exe, lsass.exe, lsm.exe, services.exe, smss.exe, about six copies of svchost.exe, system, system idle process, taskmgr.exe, wininit.lexe, winlogon.exe

At one point I was miraculously able to get firefox open in safe mode with networking, I was able to download avg and to run malwarebytes- it detected the svchost trojan and deleted it, but whe... Read more

Answer:Can't run ANY programs even in safe mode

Welcome to Major Geeks!

Please tell us what version of Windows you are running on this PC?

Also what protection software is/was running on it?

If you boot in Safe Mode with Command Prompt, can you run basic commands at the command prompt. Test running each of the below commands and tell us what happens follow each command by hitting the enter key:



3 more replies
Relevance 62.73%

The other day I started having weird problems with firefox and ie windows popping up with pages... I knew something was up and ran spybot. After it said it found some trojans, I told it to fix them. After fixing them, I reset the computer. Since then... no programs run.. I can't get on the internet, I can't run anything. I can view files... but that's it.

I've tried running EVERYTHING spyware/virusware/malware related, but absolutely nothing happens. When I am looking at my task mgr and try to run something, It doesn't even show up as trying to open.

When I try to right click on something to run it, I am given a "run as" option, but it just asks what profile to run it as and then nothing happens.


Oh... I can't go into safe mode either.. I get a black screen with the 'safe mode' in the corners... nothing else but sp3 version.

More replies
Relevance 62.73%

I've been having issues with some kind of browser hijacker I can't seem to get rid of. Yesterday it downloaded what is apparently the mother of all viruses- it immediately restarted my computer, whereupon I could not run ANY programs at all. I tried restarting in safe mode and in safe mode w networking- no dice. I tried system restore- appeared to work, but the virus was still there.I cannot run any programs, either from the hard drive or from a usb flash drive. When I try, the process comes up briefly in task manager, and then it's almost immediately killed. Either "svchost. exe *32 (winrscmde in the description column)" or the windows error manager pops up before the process is killed, not sure if that's connected.When I boot into safe mode, the following processes are running: csrss.exe, ctfmon.exe, explorer.exe, lsass.exe, lsm.exe, services.exe, smss.exe, about six copies of svchost.exe, system, system idle process, taskmgr.exe, wininit.lexe, winlogon.exeAt one point I was miraculously able to get firefox open in safe mode with networking, I was able to download avg and to run malwarebytes- it detected the svchost trojan and deleted it, but when I restarted the computer again (big mistake) the whole mess was just the same.I strongly suspect a rootkit but I have no idea how to go about fixing this, since I can't run any programs at all, even in safe mode. I downloaded avg's boot disc (the usb version) but I'm not sure what to do with it, I just have the rar sitting o... Read more

Answer:Cannot run ANY programs even in safe mode

Try running the Autoruns,try to find out any wierd processes try running the process explorer may I know which AV Program are you using?

12 more replies
Relevance 62.73%


Would be grateful for any help on my problem - suspect may be from something nasty from my son accessing soccer on P2P site Sopcast.

Mid last week all printing stopped to wirelessly enabled Kodak all-in-one printer - tried de-installing then re-installing drivers etc. pc has also been running much more slowly for past week or so.

Yesterday problems occurring with IE and Opera browsers not opening then all Microsoft programs couldn't be accessed - started to open when icons double clicked but then closed immediately or no response to double click. Looks like any .exe file not working when normal boot but opening OK when in safe mode.

Any help you can offer would be gratefully received.

Thanks, RHepneil

DDS Log:
DDS (Ver_10-12-12.02) - NTFS_AMD64 NETWORK
Run by richard at 19:10:48.15 on 31/01/2011
Internet Explorer: 8.0.7600.16385
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.44.1033.18.3839.3145 [GMT 0:00]

AV: avast! Antivirus *Enabled/Updated* {C37D8F93-0602-E43C-40AA-47DAD597F308}
SP: avast! Antivirus *Enabled/Updated* {781C6E77-2038-EBB2-7A1A-7CA8AE10B9B5}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

============== Running Processes ===============

C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalSe... Read more

Answer:programs won't run unless in safe mode

Hi, appear to have found a solution to this.

I found a response to a similar problem on another forum where user had thought he'd been infected by something only to discover that Threatfire was causing .exe files not to load. There are also some reported problems with Threatfire having conflict issues with Avast (which I also run).

I uninstalled Threatfire in safe mode and rebooted - everything loads perfectly and applications open up fine. It's also way faster than it's been for some time and reintsalling my Kodak printer software has been OK so suspect Threatfire was causing most of the headaches.

Not sure if this solution makes sense to more technical folks on this board but it seems to work for me!


2 more replies
Relevance 62.32%

Hello. I have downloaded and installed a software called Getright. Im sure most people know that this software helps in downloading programs. I had no idea tha it contained spyware. I ran ad-aware and it detected 4 identified registry keys (3 from Timesink and 1 from Alexa) and 5 files (tsad.dll from Timesink which is in the windows folder, TSuninstaller.exe from Timesink which is in the Getright folder and some cookies).

Answer:is it safe to remove this spyware?

if you plan on removing getright, first uninstall it, then run ad aware again... most all idetified "spyware" for programs like getright, is actually what produces the adds in the program... like a banner actually in the program... not actual "spyware" as a program may say it is... either way, it depends on how much you really want it.

2 more replies
Relevance 61.91%

Hello not real sure bout this but my pc is very slow and i tried to go in to safe mode to run a scan and i waited 20 mins and it just froze.could somebody please take a look and help me?Thank you in advance.

Logfile of HijackThis v1.99.1
Scan saved at 6:12:26 PM, on 2/20/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\Program Files\Microsoft Money\System\mnyexpr.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
c:\program files\\agent\mcdetect.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Yahoo!\Messenger\y... Read more

Answer:Solved: spyware cant even get into safe mode

7 more replies
Relevance 61.91%

So i recently got infected with some spyware.
I installed Spyware doctor but it wouldnt run. I read somewhere that the virus can attack the program so I uninstalled Spyware doctor and restarted. I attempted to start in safe mode with networking but a blue screen flashed and rebooted my pc. It did this with all options even starting normal. So I booted my recovery console and completed the following commands:

chkdsk /p
chkdsk /r

This did not solve the problem. I then completed a repaired installation of Win XP. Upon restart it no longer allows me to access the advance options in order to boot in SAFE mode which I assume is normal. It gets slightly further in loading windows when the blue screen appears again and it reboots. The blue screen message flashes quickly so i had to take a picture of it to see what it said. "The error seems to be cause by the following file:"


And at the bottom it displays

0x000000CE (0xB53346E0.0x00.

I have HBCD but Im unaware how to use it properly. I would like it if I could get Windows working without having to lose my data. I understand that with HBCD I can back up my files but Id much rather fix the current issue seeing as I have alot of data that would take a long time to backup and then reinstall. Thanks in advance.

Answer:Spyware=BSOD and No SAFE mode

Ok I got safe MODE to work but when it loads up my mouse and keyboard dont work and it shows me an error. "Windows could not find OEM/bin/un7zip.exe"

1 more replies
Relevance 61.91%

i was told its worthwile running a spyware scan in safe mode, is this true?
if so can u tell me how to do it and with what program?
I have adaware, MS antispyware,Spyware docter @ spybot,
which of these is the best, I notice they all pic up differant spywares,any ideas?

thanks heaps guys

Answer:spyware scan in safe mode


In some situations it can be helpfull, but however you mentioned two programs that you have installed that have the capability to run a full scan before windows completly starts up making it as good or better than running a scan in safe mode. Both Adaware and spybot can do that, i'm not sure of a way to force Adaware to do that without being prompted after it finds items it cannot remove. But in spybot you can by clicking on settings on the bottom left and than settings on the mid left than scroll down to automation and system start. You can choose which one to click there but the option "Fix all problems on program start" would be easiet.

1 more replies
Relevance 61.91%

To whom it may interest.My once healthy IT ego has been squashed. My malice for spyware battle has always been the ability run my spybot and adaware as the local system admin and remove them while they were not running. Well my malice is broken and useless, as this piece of spyware does not allow cmd to start any services. Not to mention it runs constantly in safe mode as IEXPLORE.EXE and runs a bogus svchost and sucks up 90% of my resources. I managed to install Dr. Web and it found these three suspect files. I recognized one of the names, so I ran a virtue monde fix utility I had ran some time ago and had produced desireable results. It however found nothing, but I feel like that is because Dr. Web had already "cured" the file. __c00728e4.dat backdoor trojanhtsfz.dlltuvvsqn.dllI was instructed to run SUPERANTI spyware, but I cannot install it in safe mode. When I attempt to run the normal startup, nothing launches. I just look at my blank desktop, if I try to launch explorer via task manager the PC abruptly shuts off. Here is my log. THANK YOU, YOU PEOPLE ROCK!!!Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\explorer.exeC:\Program Files ... Read more

Answer:Spyware Owns Safe Mode

Hello there and welcome to BleepingComputer. My name is Charles and I will be dealing with your log today. You have quite a heavily infected computer, it is likely that we will need to perform a few scans before you will be completely clean from malware, so please bear with me.You appear to have used MSConfig to disable some programs from starting up.This can be bad if they are malware; I will not know what other things are hiding in your computer that you have disabled.Go to Start | Run, type msconfig | OKWhen the window opens click on the Startup tab and make sure there are checkmarks next to all entries. Then press OK until you are out of the program. If it asks to reboot, let it. Please download VundoFix to your Desktop.Double-click VundoFix.exe to run it.Click the Scan for Vundo button.Once it's done scanning, click the Remove Vundo button.You will receive a prompt asking if you want to remove the files, click YESOnce you click yes, your desktop will go blank as it starts removing Vundo.When completed, it will prompt that it will reboot your computer, click OK.Please post the contents of C:\vundofix.txt in your next reply. Note: It is possible that VundoFix encountered a file it could not remove. VundoFix will run on reboot, simply follow the above instructions starting from "Click the Scan for Vundo button" when VundoFix appears upon rebooting.Please include VundoFix.txt and a new HijackThis log in your next reply.Thanks,Charles

12 more replies
Relevance 61.91%

I have an acer aspire one netbook with xp home sp3 and i am trying to remove as much programs as possibe, can i safely remove this preinstalled program or might my pc be depending on it? it is citrix ica cliantalso what is the windows media format 11 runtime?

Answer:is it safe to remove these programs?

I guess it depends whether you want to use the programs or not - check here what they doclick hereclick here

5 more replies
Relevance 61.91%

I'm cleaning things up in "Add/Remove Programs" but there are a few things I'm hesitant to remove.

I see some redundancy in Java, .NET, and MSXML. Is it safe to get rid of old versions?

I'm looking to uninstall Microsoft Visual Studio Express, which came with a bunch of SQL stuff. Is it safe to remove all that?

Here is a list of programs I'm considering removing. Those with an asterisk are NOT being removed, they are just there to show the redundancy in the version numbers.

Thank you!

J2SE Runtime Environment 5.0 update 7
*Java 6 Update 22
Java 6 Update 7
Microsoft .NET Framework 1.1
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
*Microsoft .NET Framework 3.5 SP1
Microsoft SQL Server 2008
Microsoft SQL Server 2008 Browser
Microsoft SQL Server 2008 Management Objects
Microsoft SQL Server 2008 Native Client
Microsoft SQL Server 2008 Setup Support Files (English)
Microsoft SQL Server Compact 3.5 SP1 Design TOols English
Microsoft SQL Server Compact 3.5 SP1 English
Microsoft SQL Server VSS Writer
Microsoft Visual C# 2008 Express Edition with SP1 - ENU
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
Microsoft Windows SDK for Visual Studio 2008 SP1 Express Tools for .NET Framework
Microsoft WIndows SDK for Visual Studio 2008 SP1 Express Tools for Win32
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
*MSXML 6 ... Read more

Answer:Is it safe to remove these programs?

Set a restore point first. Start - Run, type MSCONFIG, enter, click 'Launch System Restore', click 'Create restore point'.

This should get you started: Safe to remove?

The Java can be removed.

1 more replies
Relevance 61.91%

HP Pavilion dv9000
Windows XP SP3
Avast Antivirus
Comodo Firewall

Since this morning after starting up, when we click on an icon (Google Chrome, our regular browser, and then Internet Explorer when that didn't work) the hourglass shows up for a little while (less than a minute) and then disappears as though nothing had been clicked. Nothing opens... CTRL-ALT-DEL shows no tasks. I don't know enough about processes to give you useful info from there.

We tried (after a simple restart and the same thing happening) in Safe Mode: CCleaner, ScanDisk (had to reboot), Avast, MBAM, Auslogics Defrag. No bad files/viruses/malware showing up. I'm now using Safe Mode with Networking to post this.

I've followed the preparation instructions, here are the DDS logs. GMER would not work although I tried a few times (either I got a blue screen and computer died, or the one time that didn't happen and the scan worked, the computer completely froze so I couldn't save the results). Do you see anything of concern that could be causing our problem? It is an older computer but we've tried to keep up on maintenance (cleaned/replaced fan once when it started making noise) so has worked well thus far (besides a few infections over the past few years that we were able to clean up with Spybot S&D and then MBAM). We haven't installed any new programs recently (unless my fiance is too embarrassed to tell me about some websites he's looked at, which wouldn't sur... Read more

Answer:Programs won't open (except in Safe Mode)

Hi,Please do the following:Please download aswMBR.exe and save it to your desktop.
Double click aswMBR.exe to start the tool. (Vista/Windows 7 users - right click to run as administrator)
Click Scan

Upon completion of the scan, click Save log and save it to your desktop, and post that log in your next reply for review. Note - do NOT attempt any Fix yet.
You will also notice another file created on the desktop named MBR.dat. Right click that file and select Send To>Compressed (zipped) file. Attach that zipped file in your next reply as well. NEXTPlease download TDSSKiller.zipExtract it to your desktopDouble click TDSSKiller.exePress Start Scan
Only if Malicious objects are found then ensure Cure is selectedThen click Continue > Reboot nowCopy and paste the log in your next reply
A copy of the log will be saved automatically to the root of the drive (typically C:\)

34 more replies
Relevance 61.91%

I have windows 7 and cannot open any programs except the internet. I spent the day yesterday researching online and trying everyone else's fixes so far no go. Even in safe mode I am unable to open any programs. Have tried a system restore but it did not work

Answer:Programs will not open even in safe mode

First download and burn an Antivirus LiveCD, which boots it's own operating system so that windows is not running, and scans your system for viruses. finished, reboot your computer in normal mode, download and install fresh antivirus software, even if there is already one installed to your computer.When installed, update the antivirus definition files.Download and install Malwarebytes and let it run.While it's scanning your system, the newly installed antivirus software also scans all files for infection.After that, download and install Ccleaner and let it run.When finished, reboot your computer and check if it's working as expected.

7 more replies
Relevance 61.91%

This is my friend's laptop that was running slow and having a lot of issues. He gave it to me to fix up, but I believe there is a much bigger issue. Here's what I've done so far:
Installed and ran TuneUp Utilities 2012. Defragged and fix issues with the registry and hard disk (via TuneUp's Disk Check). All bad sectors removed. This sped up the computer considerably and fixed the boot failure issue.
Installed and ran MalwareBytes Anti-Malware. Removed 72 bad files, but 5 remain that cannot be removed. They are 5 instances of PUP.DownloadnSave (1 file, 4 registry key).
The Problem: After booting the computer normally, when I try to open My Computer, Control Panel, and any system folder, I get an error message. "explorer.exe  Windows cannot access the specified device, path,or file. You may not have the appropriate permissions to access the item."
I also had to create a new user name and migrate all of the files from the old user name to the new one because the old name would give an error when I tried to log in.
DDS (Ver_2012-11-20.01) - NTFS_AMD64 MINIMAL
Internet Explorer: 9.0.8112.16464  BrowserJavaVersion: 10.15.2
Run by Kenroy at 14:08:49 on 2013-03-21
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.1.1033.18.5883.4829 [GMT -4:00]
AV: Norton Internet Security *Enabled/Outdated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1AC... Read more

Answer:Cannot open programs unless in safe mode

Hi  mgb856
I will be handling your log to help you get cleaned up. Please give me some time to look it over and I will get back to you as soon as possible.
White Warrior

12 more replies
Relevance 61.91%

I was unable to open or run anything on my laptop. In May or June, I was looking for a job and filling out online applications. In the middle of this, I got a pop up saying something about Windows Defender. I don't remember if it said I needed to update or run it. Since I was on my 7th or 8th application, I just clicked the link and the second I let go of the button, I realized I didn't use Windows Defender and I watched as it loaded a virus or malware on my laptop. I shut down the laptop and it just sat there until earlier this week. I bought and installed a new router, so the laptop cannot access the internet right now and I have the wireless signal turned off. I tried to run the programs you request in the READ ME FIRST thread, but was unable to open anything. I would get a pop up in the bottom right corner of the screen, like I do with my AV, but it was from a "Windows" program. I wish I would have got a screenshot of it, but I did not. It wanted me to click a button that would completely protect my computer. I said everything I tried to open was a virus.

So I ran all 5 programs in Safe Mode. MalwareBytes found about 139 objects. After running all 5 programs, I restarted in normal and ran all 5 programs again. Everything seems to be working fine and the second set of scans found nothing. I have the logs from the Safe Mode scans and from the second set of scans after I restarted normally. I am just wondering if my laptop is clean and safe to conn... Read more

Answer:Ran READ ME Programs in Safe Mode...

Here are the MG logs.

10 more replies
Relevance 61.91%

Read & Run me first & other exe's won't run, even in safe mode. I get the Open file with..? dialog box with any exe, I cant get into my Mcafee console to disable my av either. Where do I start?

Sys info

2002 ish dell p4 256M ram XP pro service pack 3

McAfee AV, was just using win FW till I decided on a new one after a HD swap.



Answer:Read me first programs, other exe's won't run, even in safe mode

Scroll down to the .exe file fix. Tell me if that works.

11 more replies
Relevance 61.91%

Hello,When I use safe mode all programs work. When I am in non safe mode any icon I click on does not respond. I have run anti virus scans and they are clear. I have also ran malewarebytes it is also clear. Do I have a virus? Do I have a software issue or hardware issue? Both? Would doing a system restore do any good? Vista OS. What should I do to try to fix these issues? Please make your answers clear and easy to understand.Thanks for any and all help.

Answer:programs only work in safe mode

Only being able to run in Safe Mode is usually (but not always) a driver issue.If this just suddenly happened then System Restore to a date/time before that might well fix it.Always pop back and let us know the outcome - thanks

9 more replies
Relevance 61.91%

Hi, i am new to this forum and i have a pretty big problem with my computer. Dell Dimension 4550, windows xp home edition, service pack 3.

I first encountered the problem when i was bombarded by a ton of popups of random things in internet explorer, but i use opera as my main browser. so that was odd. The popups then turned into an automatic installation that looked to be authentic windows security center, but was a fake, and i could do nothing about it. if i ended the process, another would start.

The popups have now stopped, i ran superantispyware and found many viruses. I fixed all, but when i log onto windows, i get error messages of missing .dll files: ntuser.dll, calc.dll, sinuvili.dll, pofutuva.dll.

Another problem is my safe mode. when i attempt to run, a blue screen appears stating that windows has shutdown to prevent damage to computer, and at the bottom of screen i see: *** STOP: 0x0000007B (0xF7A46528, 0xC0000034, 0x00000000, 0x00000000)

I saw in another forum that to fix this, i could boot from the original xp disc, select "R" to repair, and enter "CHKDSK /R". I tried this, but nothing happened.

Another observation is my computer clock, it has changed to military time.

I have now tried to run a HIJACK THIS log, but i wasn't able to. So i ran rsit.exe, and came up with the attached log file.

Can someone please look over the log file and tell me if there is anything i can do? i am lost when it comes to this.

Thank you, ... Read more

Answer:Cannot Run antivirus programs, or run in safe mode.

Hello and Welcome to TSF.

Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.


Go to Start > Run and copy/paste the following into the Run box and click OK:


A text file should open. Please post the contents of that file in your next reply.


I need to see a gmer log in order to help you.

Delete your existing copy of gmer. Please run this special version of gmer:

Download GMER Rootkit Scanner from here and Save it to your Desktop. Double-click gmer.exe to run it. If asked to allow gmer.sys driver to load, please consent.
If it gives you a warning about rootkit activity and asks if you want to run on NO.

Click the image to enlarge it

In the right panel, you will see several boxes that have been checked. Uncheck the following ...Sections
Drives/Partition other than Systemdrive (typically C:\)
Show All (don't miss this one)

Then click the Scan button & wait for it to finish.
Once done click on the [Save..] button, and in the File name area, type in "Gmer.txt" or it... Read more

2 more replies
Relevance 61.91%

my computer was working slowly so i tried restarting it and now unless in safe mode nothing will launch. How would i fix it and what is the problem. I tried restoring it and that didn't help.

Answer:programs not opening in unless in safe mode

What happens? When you click on a link, it does nothing or it asks you to select a program to use?

4 more replies
Relevance 61.91%

When I am in safe mode all my programs work.  When in regular mode any icon I click on nothing happens.  I have run anti virus software and malewarebytes both say computer no threats found.  My OS is Vista.  How do I resolve these issues?  Do I have a virus?  Do I have a software or hardware issue or both?  Please make your answers clear and easy to understand.  Would doing a system restore do any good to resolve these issues?
Thanks for any and all help.

Answer:programs only work in safe mode

Open msconfig and on the General tab choose "selective startup" (uncheck all three items) and reboot. Does the problem still occur? If not, start adding items back to msconfig one or two at a time, rebooting after each change, until the problem reappears and you'll have identified the offending process. This is clearly a time consuming procedure, but it is the best way to determine if some process loading with the system is the cause of your problem.
After you've isolated the cause, do not use msconfig to permanently disable the process. Instead, if it is a service go to START - RUN and type: services.msc (then press enter) and disable the service OR, if it a program, you can download & run a simple app such as Mike Lin's Startup Control Panel ( to enable, disable, or otherwise manage startup programs.

1 more replies
Relevance 61.91%

in this thread this guy was was helping me with something. i d/l the programs (killbox is on the desktop, procexpnt is in a folder) then went into safe mode, and neither of them are on the desktop.

Answer:programs not showing up in safe mode

7 more replies
Relevance 61.91%

i am trying to clean my computer as thouroughly as possible as it has been a very long time since anyone has bothered.
is there any disadvantages to running spybot, ad-aware, scan disk, defrag or ccleaner in safe mode? can you generally get better results when this is all done in safe mode? should safe mode scanning/cleaning be done regularly or only as needed when the regular stuff does not do the trick? thanks

Answer:Running Programs In Safe Mode

What Safe Mode does is to run your operating system with only the most essential modules; this can save time when running scandisk or defragging, becuase fewer programs attempt to access the various files on the disk which causes these two programs to restart. At times, you will also need to run your AV in Safe Mode when it cannot quarantine a virus because other applications are accessing it and therefore Windows protects it.
If your computer is gunked up (forgive the technical language), then running all the applications and utilities you mentioned in Safe Mode for the first time might speed up the process. Normally, though, you can run these in regular mode.

1 more replies
Relevance 61.91%

I am having problems with some of my Antivirus/Antimalware software. I was told by my IT guy to run it in safe mode. When I boot in safe mode there is no start menu and no way to access any programs. How can I get to my programs. I tried a command prompt to open task manager. There is no explorer.exe listed. Any help is appreciated.

Answer:Can't access any programs in safe mode

Hi Maestro,

If you are thinking on uninstalling your antivirus program,
you can create a shortcut from your desktop directly to the programs and features.

right click on desktop > select "NEW" > then select "Shortcut".
on the window, type "appwiz.cpl" without quote. then Enter.

5 more replies
Relevance 61.91%

I have a virus in AVG virus vault. After putting it there nothing will open not even in safe mode. Cant down load because internet wont open. Cant systems restore because it ask what to open it with. Anything I do ask what to open the program with and it doesnt mater what I choose to open it with it wont open. Any Ideas ?

Answer:no programs will open not even in safe mode

brad1994,Just plug your USB flash drive into the USB port of your infected computer. Wait for the hardware to automatically install on your computer. (If the flash drive has not been used previously on the computer.)After the hardware is installed, the flash drive is ready to useIn most cases, an Options Window automatically opens. Select: Open folder to view filesClick: OK(If the Options window does not appear, go to Start > My Computer. Locate the flash drive and double-click on it. Doing so will open the flash drive.)You will see what files are in your flash drive. Select the exeHelper file, and double-click it to open.If it does not run, drag the exeHelper file to the Desktop by doing the following:-Click and hold the mouse pointer over the file (Do not release the click as this will merely highlight the file and not prepare it for dragging.)-Move the mouse pointer over to the Desktop. -You should see the file visibly "moving" on the screen to indicate where it is going.-Release the mouse pointer over the Desktop to 'drop' the fileNow, double-click the exeHelper file on the Desktop and see if it runs. On connecting to the Internet:Check to see if the Internet Explorer connection setting is set to use a proxy server:-Open Internet Explorer, click on Tools, and select Internet Options from the drop list.-In Internet Options, select the Connections Tab, and press the LAN settings button.-In LAN Settings, check the box next to: ?Automatically detect settings?-Click: Apply... Read more

10 more replies
Relevance 61.91%

I can't see the program install/uninstaller

Answer:how to uninstall programs in safe mode with w

What are we trying to uninstall, what program??

3 more replies
Relevance 61.91%


I know you guys are swamped, but I have started the READ N' RUN ME FIRST instructions, but I cant get my computer to boot into regular mode after running CCleaner.

It boots, and then freezes after about 10 seconds, every time.

So can I run the rest of the programs from safe mode? or?

Additionally, I have viruses all through my external USB Hard Drive too...Any special instructions?

...Should I plug the external HD into the computer when I run the scans?

Thanks a lot!


Answer:Can READ N' RUN ME FIRST programs be run in safe mode?

Welcome to Major Geeks!

reedme said:

I know you guys are swamped, but I have started the READ N' RUN ME FIRST instructions, but I cant get my computer to boot into regular mode after running CCleaner.Click to expand...

What exactly did you do with CCleaner? Did you run the Cleaner icon? Did you also run the Registry icon and Scan for Issues? Did you do anything with the Tools icon.

reedme said:

So can I run the rest of the programs from safe mode? or?Click to expand...

Yes you can run in safe mode if necesary.

reedme said:

...Should I plug the external HD into the computer when I run the scans?Click to expand...

Yes and select complete system scan when running SUPERAntiSpyware. Also do a scan on your external HD with your antivirus program

1 more replies
Relevance 61.91%


I have this problem for 5 days ago from now. I'm running on Vista home 32bits. I can't open programs when I boot in normal mode. They appear in the task manager, but they don't show up. I've tried Steam, WoW, Firefox, IE etc... The only program that works perfectly, and this is weird, is Skype. This one works. I've tried planty solutions that Ive found around the internet,I don't remember them all, but none worked. I've tried the registry thing. I've tried the .exe fix, it did'nt work.

Everything works in Safe mode(Firefox, Steam, etc) I first thought it was my anti-virus (Live Onecare) but no, it wasn't(I uninstalled it). I've disable startup programs with msconfig, no chance this way neither...Even a backup restore failed.

I'm sorry for my bad english, i'm trying to be clear as much as possible. Leave me feedback for more details! I really need help

Thanks and this is much appreciated.


Answer:I can't open any programs unless in safe mode

after that if it does not work run your anti virus full scans but may not be very helpful in safe mode post back if you suspect anything and click report button and ask to move to malware/virus forum

3 more replies
Relevance 61.5%

Spybot S&D and Adaware have both found registry based items which are now in quarantine.Most have been quarantined for over a month without seeming ill effect, is it OK to now delete these? I can't cut & paste but two shortish examples areBargain buddy class h_key_classes_root\apuc.urlcatcherGator:Hidden identity hkey__root\clsid\{21FF....etc.

Answer:Spybot S&D - safe to remove spyware?


4 more replies
Relevance 61.5%

I have tried to follow the threads in previous threads re: popups, stinkware and so much other crap. When I boot up in normal mode, the normal desktop icons appear briefly, then they disappear and I have to resort to various tricks to get into safe mode. Initially whenever I tried to access HJT everything would close up again except my basic desktop with background theme. I was going to post my log file but my other machine has just given up the ghost and now gives me a corrupt/missing file message

Answer:spyware has taken over my machine, can only operate in safe mode

Welcome to TSF.

Do you can't boot up at all now? If you are using XP, try using the XP cd and enter the Recovery Console to repair it.

1 more replies
Relevance 61.5%

I recently received a call from a friend to fix his spyware infested computer. It looks like the issue has exploded since they first started receiving pop-ups and now the computer never reaches an operational status on normal boot. Spyware loads and loads and the system hung for a good 30 minutes straight. I couldnít even get Task Manager to kill programs. Where they picked up this mess or what itís called I have no idea yet as I havenít been able to do any work in Windows.

I took the machine offline so it wouldnít be broadcasting PII and tried booting into Safe Mode. After 30 minutes trying to load Safe Mode I gave up. I would get the start of the desktop with the Safe Mode indicators at the top and bottom of the screen but no task bar.

I know that I can run an install over the top of the current installation and probably get the system to where I can use it and start cleaning out Spyware and backing up important files.

If anyone has any tips or tricks to share Iím all ears.
(Windows XP Home SP3)

Answer:Spyware Infested XP PC won't load Safe Mode

IIRC it's one of those malware that replaces the explorer.exe (your desktop) with a virused exe file (I believe svchost.exe or something similar).

You need to change it back in the registry. I'll need to look around again to find out where it is in the registry. It's been awhile.

Edit: before we try playing with the registry, see if this works:

Open My Computer.

Go to Tools>>Folder Options>>View.

Under "Hidden Files and Folders", uncheck "Launch folder windows in a seperate process".

Reboot and see if this takes care of your problem.

10 more replies
Relevance 61.5%

while in safe mode w/ networking i lose my broadband icon to log onto the web. I know someone knows what to do, I'm new to this stuff. I'm tring to remove spyware trojans and worms.~Moderator Edit: Moved topic to the more appropriate forum and edited Topic Title~ TMacK

More replies
Relevance 61.5%


is it better to run programs like SUPERAntiSpyware/SpyBot/Malwarebytes in safe mode ? e.g: will they catch more "bad guys" if I run them in safe mode ?

it doesn't say that here, or did I miss it ?

same question about anti virus programs - should I try to run scans in safe mode ?


Answer:runing spyware/malware in safe mode? should try to run them all in normal mode.....we only tell you to run them in safe mode if you can not do them in normal mode.

1 more replies
Relevance 61.5%


I'm having some problems with my computer when i try to boot it in safe mode.

My laptop's been infected with malware and since this happened, I'm unable to do anything. Everytime I start it up, I get a screen saying I have violated certain rights and I have to pay a fine up to 8000 euros. Apparently this is caused by the presence of a cookie, which I have to delete using Spyhunter or some other tool for removing spy- and malware. In order to do this, I have to start up my computer in Safe Mode with Networking. The first time I tried this, it worked, but I was unable to delete all the infections that were found on my computer, so I shut it down. Afterwards, I wanted to start this whole process again, but entering safe mode was impossible. I presume the infection now has spread to the system files?

Can you please help me with this and give me a solution to this safe mode problem and how I can delete the cookie without having to pay a ridiculous amount of money just to remove the malware?

Thanks in advance!

Answer:Safe Boot mode not working due to Spyware

Hi Panther89 and welcome to TSF.

I apologize about the confusion regarding your first thread.

What version of Windows is this machine? Is it Vista as it shows in your profile?

If so, when you tap F8 to get to the screen to select Safe Mode, in that list of boot options, do you see 'Repair your computer' in that list?

If not, do you have access to a Vista Install Disc?

5 more replies
Relevance 61.5%

Hi guys, Not sure what happened here but basically all of a sudden i cannot run any spyware tools, i assumed this was some form of malware and tried to boot into safe mode, but this freezes while loading and wont continue. In addition i cannot install any other programs including Spybot S&D. There are also random issues when browsing, i am re-routed to various random sites when using search engines. For example everytime i click any link on Google i wind up somewhere totally different.I stupidly was running with no firewall or antivirus for a short period after a fresh XP install, hence this happening (doh!).Any advice for me?I can post a Hijack This log if it would help. ThanksEdit: Moved topic from XP to the more appropriate forum. ~ Animal

Answer:Cannot run safe mode or any spyware tools - Malware?

Hello,due to the issue with safe mode it is probably best to post the HJT log. go here HijackThis Logs and Virus/Trojan/Spyware/Malware Removal ,click New Topic,give it a relevant Title Gnd post that complete log.Let me know if it went OK.

2 more replies
Relevance 61.5%

Okay, I'm really a newbie when it comes to here are all my texts

DDS (Version 1.1.0) - NTFSx86 NETWORK
Run by admin at 20:52:22.03 on 12/23/2008 Tue
Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_07
Microsoft Windows XP Professional 5.1.2600.2.949.82.1033.18.511.227 [GMT -8:00]

AV: Symantec AntiVirus Corporate Edition *On-access scanning enabled* (Updated)

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
C:\WINDOWS\system32\svchost -k rpcss
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\admin\Desktop\

============== Pseudo HJT Report ===============

uStart Page = hxxp://
uSearch Page = hxxp://
uSearch Bar = hxxp://
uSearchMigratedDefaultURL = hxxp://{searchTerms}&sourceid=ie7&
mDefault_Search_URL = hxxp://
mSearch Page = hxxp://
mStart Page = hxx... Read more

Answer:Can't access computer unless on Safe Mode..spyware?

Hello and Welcome to TSF.

Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.


Please visit this webpage for download links, and instructions for running ComboFix:

* Ensure you have disabled all antivirus and antimalware programs so they do not interfere with the running of ComboFix.

Please post the C:\ComboFix.txt in your next reply for further review.


9 more replies
Relevance 61.5%


I can't restart in safe mode. I know that I have malware/spyware. It appears as 3 icons on my desktop Error Cleaner, Privacy Protector and Spyware Protection - all with the url /shandler.php?id=502&aid=138&pn=5&sand=0&sg=2.

Does anyone know what files I must specfically look for in the registry to remove this trojan?

Thanks in advance.

Answer:Malware, Spyware - Can't Restart In Safe Mode

Some types of malware can delete or alter the safeboot key in the registry resulting in the inability to reboot into safe mode.Go to Start ? Run and type: regeditClick OK.On the left side, click to highlight My Computer at the top.Go up to File ? Export Make sure in that window there is a tick next to "All" under Export Branch.
Leave the "Save As Type" as "Registration Files".
Under "Filename" put RegBackup.Choose to save it to C:\Click save and then go to File ? Exit.Download SafeBootKeyRepair.exe by sUBs and save to your desktop.Double-click on it and follow the instructions.When finished, reboot and see if you can access safe mode.Then, if your using Win XP or 2000, do this:Please print out and follow the generic instructions for using "SmitfraudFix". Make sure you scroll down to Clean and perform the steps where you reboot in "Safe Mode" and run option #2.-- If you have downloaded SmitfraudFix previously, please delete that version and download it again as the tool is frequently updated!-- If the tool fails to launch from the Desktop, please move smitfraudFix.exe to the root of the system drive (usually C:\), and run it from there.If you still cannot use safe mode, then run the tool in normal mode.Please download RogueRemover and save to you Desktop. (compatible with Windows 2000, NT, XP, Vista)Double-click on rr-free-setup.exe to install in C:\Program Files\RogueRemover and follow the pro... Read more

7 more replies
Relevance 61.5%

Windows XP Home SP2
will not boot into Windows; normal, "last known good config", safe mode all result in re-boot. At one re-boot was an option to disable automatic reboot after failure. I selected this, but the problem persists.

I got into safe mode once, double left clicked on HJT 1.99.1 & the PC rebooted. Now, it will not boot into Windows

Lots of spyware & trojans; diagnosed by slaving HDD into 1 of my computers.

spyware folders include FLEOK

RAM diags passed

HDD diags pending

I harvested the important data to a DVD, when the HDD was slaved into one fo my computers.

Your guidance is appreciated.


Answer:spyware, unable to boot into safe mode

Well, at this point I would recommend a reinstall of your OS. Luckily you were able to hook up the drive as a slave. I would save everyhing on that drive that you NEED into a single folder on the drive that is currently containing your functional OS. Be sure to scan everything in there for malware. Reinstall your OS on the other drive if you need it to function as a bootable drive in another PC.

2 more replies