Over 1 million tech questions and answers.

No Safe Mode, No Task Manager, Pop ups, etc.

Q: No Safe Mode, No Task Manager, Pop ups, etc.

Hello Everyone,

I have gotten excellent advice at this forum before. I am hoping you can help this time. I am trying to help my dad over the phone, which is proving to be very difficult. 2 days ago we removed a Trojan, but now there are new problems. I got him to run hijack this and send me his log file, which I will post here. The symptoms are (as best I can tell) he gets TONS of pop ups for "History Kill" and "Spyware Guard Browser Protection Alert". Also, he removed (or thought he removed) McAfee since he doesn't use it anymore, but is getting messages about that, too. He is unable to start in safe mode. Everything is extremely slow. I can't make heads nor tails of this mess, especially since I am 450 miles away and can't be there to do the work myself. Any help would be greatly appreciated.
----------------------------------------------------------
Logfile of HijackThis v1.99.0
Scan saved at 10:22:10 AM, on 12/6/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\PANICW~1\POP-UP~1\dpps2.exe
C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
C:\Program Files\Spyware Doctor\SDTrayApp.exe
C:\PROGRA~1\MUSICM~1\MUSICM~1\MMDiag.exe
C:\Program Files\MusicMatch\MusicMatch Jukebox\mim.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\WINDOWS\system32\S3tray2.exe
C:\Program Files\QUICKENW\QAGENT.EXE
C:\WINDOWS\system32\ps2.exe
C:\Program Files\Fellowes\MediaFACE 4.0\SetHook.exe
C:\WINDOWS\system32\mrtMngr.EXE
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb05.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Zero Knowledge\Freedom\Freedom.exe
C:\PROGRA~1\AWS\WEATHE~1\Weather.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\WINDOWS\system32\ntvdm.exe
c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Spyware Doctor\svcntaux.exe
C:\Program Files\HistoryKill\histkill.exe
C:\PROGRA~1\HPINST~1\plugin\bin\PCHButton.exe
C:\Program Files\Spyware Doctor\swdsvc.exe
C:\Program Files\hp center\137903\Shadow\ShadowBar.exe
C:\Program Files\hp center\137903\Program\BackWeb-137903.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\MarketBrowser\lmt\mktbrws.exe
C:\Program Files\Ulead Systems\Ulead Photo Express 2 SE\CalCheck.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Microsoft Office\Office\FINDFAST.EXE
C:\Program Files\Microsoft Office\Office\OSA.EXE
C:\Program Files\SpywareGuard\sgmain.exe
C:\Program Files\SpywareGuard\sgbhp.exe
C:\Program Files\iPod\bin\iPodService.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Java\jre1.5.0_10\bin\jucheck.exe
F:\PROGRA~1\WinZip\winzip32.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://us4.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-us4.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.att.net
R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://infospace.abcnews.com/info.abcnws.toolbar/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by AT&T WorldNet Service
R3 - URLSearchHook: (no name) - {87766247-311C-43B4-8499-3D5FEC94A183} - (no file)
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: SpywareGuardDLBLOCK.CBrowserHelper - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {8017AF05-31A0-47D5-85CB-7B59D85975DA} - C:\WINDOWS\System32\hmjem.dll (file missing)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O3 - Toolbar: ABCNews.com Toolbar - {C1D79200-7718-4656-A7B2-F23046E264E7} - C:\Program Files\ABCNewsToolbar\ultrabar.dll
O3 - Toolbar: Viewpoint Toolbar - {F8AD5AA5-D966-4667-9DAF-2561D68B2012} - C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBar.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
O4 - HKLM\..\Run: [Pop-Up Stopper] "C:\PROGRA~1\PANICW~1\POP-UP~1\dpps2.exe"
O4 - HKLM\..\Run: [VSOCheckTask] "c:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [VirusScan Online] "c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe"
O4 - HKLM\..\Run: [OrderReminder] C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [OpwareSE2] "C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
O4 - HKLM\..\Run: [MimBoot] C:\PROGRA~1\MUSICM~1\MUSICM~1\mimboot.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spyware Doctor\SDTrayApp.exe"
O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [S3TRAY2] S3tray2.exe
O4 - HKLM\..\Run: [RegisterDropHandler] C:\PROGRA~1\TEXTBR~1.0\Bin\REGIST~1.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [QAGENT] C:\Program Files\QUICKENW\QAGENT.EXE
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [Phvxz.exe] C:\documents and settings\owner\local settings\temp\Phvxz.exe
O4 - HKLM\..\Run: [PE2CKFNT SE] C:\Program Files\Ulead Systems\Ulead Photo Express 2 SE\ChkFont.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [MediaFace Integration] C:\Program Files\Fellowes\MediaFACE 4.0\SetHook.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [jBe.exe] C:\documents and settings\owner\local settings\temp\jBe.exe
O4 - HKLM\..\Run: [InstantAccess] C:\PROGRA~1\TEXTBR~1.0\Bin\INSTAN~1.EXE /h
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb05.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [Eg.exe] C:\documents and settings\owner\local settings\temp\Eg.exe
O4 - HKLM\..\Run: [DDCM] "C:\Program Files\WildTangent\DDC\DDCManager\DDCMan.exe" -Background
O4 - HKLM\..\Run: [DDCActiveMenu] "C:\Program Files\WildTangent\DDC\ActiveMenu\DDCActiveMenu.exe" -boot
O4 - HKLM\..\Run: [checktime] c:\program files\HPSelect\Frontend\ct.exe
O4 - HKCU\..\Run: [Microsoft Works Update Detection] c:\Program Files\Microsoft Works\WkDetect.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Zero Knowledge Freedom] C:\Program Files\Zero Knowledge\Freedom\Freedom.exe
O4 - HKCU\..\Run: [Windows & Internet Cleaner] C:\Program Files\Windows & Internet Cleaner\WICleaner.exe /Startup
O4 - HKCU\..\Run: [Weather] C:\PROGRA~1\AWS\WEATHE~1\Weather.exe 1
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [MoneyAgent] "c:\Program Files\Microsoft Money\System\Money Express.exe"
O4 - HKCU\..\Run: [HistoryKill] C:\Program Files\HistoryKill\histkill.exe /startup
O4 - HKCU\..\Run: [Ahst] C:\Documents and Settings\Owner\Application Data\iebs.exe
O4 - HKCU\..\Run: [Acme.PCHButton] C:\PROGRA~1\HPINST~1\plugin\bin\PCHButton.exe
O4 - Startup: Microsoft Find Fast.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXE
O4 - Startup: Office Startup.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE
O4 - Startup: reminder-ScanSoft Product Registration.lnk = C:\Program Files\TextBridge Classic 2.0\Ereg\REMIND32.EXE
O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe
O4 - Global Startup: hp center UI.lnk = C:\Program Files\hp center\137903\Shadow\ShadowBar.exe
O4 - Global Startup: hp center.lnk = C:\Program Files\hp center\137903\Program\BackWeb-137903.exe
O4 - Global Startup: Internet Answering Machine.lnk = C:\Program Files\CallWave\IAM.exe
O4 - Global Startup: MarketBrowser.lnk = C:\Program Files\MarketBrowser\lmt\mktbrws.exe
O4 - Global Startup: Photo Express Calendar Checker SE.lnk = C:\Program Files\Ulead Systems\Ulead Photo Express 2 SE\CalCheck.exe
O8 - Extra context menu item: &Viewpoint Search - res://C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBar.dll/CXTSEARCH.HTML
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: ABCNews.com Cursor Search - C:\Documents and Settings\All Users\Application Data\Infospace\ABCNewsToolbar\contextsearch.htm
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra button: MktBrowser - {17A27031-71FC-11d4-815C-005004D0F1FA} - C:\Program Files\MarketBrowser\lmt\MarketBrowser_Launch.xpy
O9 - Extra 'Tools' menuitem: MarketBrowser - {17A27031-71FC-11d4-815C-005004D0F1FA} - C:\Program Files\MarketBrowser\lmt\MarketBrowser_Launch.xpy
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: EmpirePoker - {77E68763-4284-41d6-B7E7-B6E1F053A9E7} - C:\Program Files\EmpirePoker\EmpirePoker.exe (file missing)
O9 - Extra 'Tools' menuitem: EmpirePoker - {77E68763-4284-41d6-B7E7-B6E1F053A9E7} - C:\Program Files\EmpirePoker\EmpirePoker.exe (file missing)
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Trend Micro Security Services - {D5E1CDC8-64B9-4f8c-8155-FC3B6D6749F7} - http://tmss.trendmicro.com/dashboard...IJJAJDCBBJHBIA (file missing)
O9 - Extra 'Tools' menuitem: Trend Micro Security Services - {D5E1CDC8-64B9-4f8c-8155-FC3B6D6749F7} - http://tmss.trendmicro.com/dashboard...IJJAJDCBBJHBIA (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.att.net
O15 - Trusted Zone: http://ad.searchsquire.com
O15 - Trusted Zone: http://search.searchsquire.com
O15 - Trusted Zone: http://update.searchsquire.com
O15 - Trusted Zone: http://www.searchsquire.com
O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) - http://support2.charter.com/sdccommo...ad/tgctlcm.cab
O16 - DPF: {05D44720-58E3-49E6-BDF6-D00330E511D3} (StagingUI Object) - http://zone.msn.com/binFrameWork/v10...I.cab53083.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {205FF73B-CA67-11D5-99DD-444553540006} (CInstall Class) - http://www.errorguard.com/installation/Install.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {3BB54395-5982-4788-8AF4-B5388FFDD0D8} (ZoneBuddy Class) - http://zone.msn.com/BinFrameWork/v10...y.cab53083.cab
O16 - DPF: {410A8B3C-7CCB-40E8-8B11-28B099E5C488} (Trend Micro Security Services Control) - http://tmss.trendmicro.com/Dashboard...MSSReportW.CAB
O16 - DPF: {4E888414-DB8F-11D1-9CD9-00C04F98436A} (Microsoft.WinRep) - https://webresponse.one.microsoft.co...veX/winrep.cab
O16 - DPF: {544EB377-350A-4295-9BEB-EAB8392E09C6} - http://fdl.msn.com/public/investor/v13/invinstl.exe
O16 - DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} (ZonePAChat Object) - http://zone.msn.com/binframework/v10...t.cab53083.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.co...?1096248735515
O16 - DPF: {6CB5E471-C305-11D3-99A8-000086395495} - http://toolbar.google.com/data/en/de.../GoogleNav.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1136828985062
O16 - DPF: {809A6301-7B40-4436-A02C-87B8D3D7D9E3} (ZPA_DMNO Object) - http://zone.msn.com/bingame/zpagames...o.cab53083.cab
O16 - DPF: {9D190AE6-C81E-4039-8061-978EBAD10073} (F-Secure Online Scanner 3.0) - http://www.charter.net/files/charter...uite/fscax.cab
O16 - DPF: {A7E092C3-692A-11D0-A7E5-08002B322F3B} (WebResponseAttachments Control) - https://webresponse.one.microsoft.co...X/FileXfer.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://cdn2.zone.msn.com/binFramewor...o.cab53083.cab
O16 - DPF: {CD17FAAA-17B4-4736-AAEF-436EDC304C8C} (ContentAuditX Control) - http://a840.g.akamai.net/7/840/5805/...ditControl.cab
O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} (StadiumProxy Class) - http://zone.msn.com/binframework/v10...y.cab53852.cab
O16 - DPF: {E7DBFB6C-113A-47CF-B278-F5C6AF4DE1BD} - http://download.abacast.com/download/files/abasetup.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Google Updater Service - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: McAfee.com McShield - Unknown - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee.com VirusScan Online Realtime Engine - Networks Associates Technology, Inc - c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
O23 - Service: NVIDIA Driver Helper Service - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: PC Tools Auxiliary Service - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: PC Tools Security Service - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe

Read other answers
RELEVANCY SCORE 200
Preferred Solution: No Safe Mode, No Task Manager, Pop ups, etc.

I recommend downloading and running DAP. It can help sort out any driver and firmware related issues on your system

It's worked out well for many of us in the past.

You can download it direct from this link http://downloaddap.org. (This link will open the download page of DAP so you can save a copy to your computer.)

RELEVANCY SCORE 87.6

I have a combination of all the syptoms + more.
The task bar is locked and I cant access the start menu.

Please advise me if I can avoid a reinstall.
Many thanks


DDS (Ver_09-03-16.01) - NTFSx86
Run by Aroop Roy at 13:17:21.93 on 10/04/2009
Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_10
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2046.984 [GMT 9:00]


============== Running Processes ===============

C:\WINDOWS.0\system32\Ati2evxx.exe
C:\WINDOWS.0\system32\svchost -k DcomLaunch
svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS.0\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS.0\system32\Ati2evxx.exe
C:\WINDOWS.0\system32\spoolsv.exe
C:\WINDOWS.0\system32\WgaTray.exe
C:\WINDOWS.0\Explorer.EXE
C:\WINDOWS.0\system32\MAFWTray.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\WINDOWS.0\vsnpstd3.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Google\Gmail Notifier\gnotify.exe
C:\WINDOWS.0\system32\ctfmon.exe
C:\Program Files\DNA\btdna.exe
C:\Program Files\AIM6\aim6.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Documents and Settings\Aroop Roy\Local Settings\Applic... Read more

A:Task Manager/Task Bar/Safe Mode/Symantec Sites etc disabled....

Hello.

The attached logs are locked, meaning a password were set on them and therefore I cannot view it.

Anyhow, please run the following tool.

Install Recovery Console and Run ComboFix

Download Combofix from any of the links below, and save it to your desktop.

Link 1
Link 2
Link 3
Close/disable all anti-virus and anti-malware programs so they do not interfere with the running of ComboFix. Refer to this page if you are not sure how.
Close any open windows, including this one.
Double click on ComboFix.exe & follow the prompts.
As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
If you did not have it installed, you will see the prompt below. Choose YES.

Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.
**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

Note:The Windows Recovery Console will allow you to boo... Read more

Read other 5 answers
RELEVANCY SCORE 86.4

For months I've been having problems with programs not responding, responding slowly, or freezing. When I open Windows Task Manager and select end task, it doesn't work. I want to run scans in safe mode, but when I press F8 on restart, I can't get it. I could previously get to safe mode before all the problems started. The only way I can get out of a program not responding or freezing is to hit the off button, not through shut down/restart. I'm having to do this constantly now. I suspect the computer has a virus or problems with spyware/malware. Bitdefender quarantines lots of temp files, which I delete. Hitman Pro finds tracking cookies, which I delete. Malwarebytes never finds anything. I need help in determining what problem my computer has and how I can fix it.

Read other answers
RELEVANCY SCORE 84

in windows 8 i want a way that when i press ctrl+shift+esc the old taskmanager like windows 7 appear and in boot menu when press f8 the go to safe mode?

A:old task manager and safe mode

Hello Muiacir,

For Task Manager, you could click on More details at the bottom to be closer if you like.
Task Manager - Open in Windows 8

The tutorial below can show you how to boot into Safe Mode now in Windows 8.
Safe Mode - Start Windows 8 in

If you like, the tutorial below can show you how to add Safe Mode to your Windows Boot Manager screen to have it as an option to select at boot.
Safe Mode - Add to Windows Boot Manager in Windows 8
Hope this helps,
Shawn

Read other 2 answers
RELEVANCY SCORE 82.8

I clearly got a virus the other week that has disabled my task manager as well as removed my start menu. When I log into my account I get a blank screen. I can not right click and C+A+Del "Has be disabled by administrator".

Read other answers
RELEVANCY SCORE 82

i cant boot into safe mode,

cant run regedit and some command

cant open task manager,

some time when looking for some antivirus webpage will auto close the browser

even my hijack this cant run(but i already rename the hijackthis.exe to scanner.exe,so it works)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:59:01 AM, on 11/21/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
E:\WINDOWS\System32\smss.exe
E:\WINDOWS\system32\winlogon.exe
E:\WINDOWS\system32\services.exe
E:\WINDOWS\system32\lsass.exe
E:\WINDOWS\system32\Ati2evxx.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\System32\svchost.exe
E:\WINDOWS\system32\spoolsv.exe
E:\WINDOWS\system32\Ati2evxx.exe
E:\WINDOWS\Explorer.EXE
E:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
E:\WINDOWS\system32\ctfmon.exe
E:\WINDOWS\system32\LckFldService.exe
E:\Program Files\Common Files\LightScribe\LSSrvc.exe
E:\WINDOWS\system32\PnkBstrA.exe
E:\WINDOWS\system32\PnkBstrB.exe
E:\Program Files\CyberLink\Shared files\RichVideo.exe
E:\Program Files\Spyware Terminator\sp_rsser.exe
E:\WINDOWS\system32\NOTEPAD.EXE
E:\WINDOWS\system32 ... Read more

A:Cant boot into safe mode,cant run regedit,task manager

anybody help pls...............

Read other 4 answers
RELEVANCY SCORE 82

I am able to boot up my computer and select either my wife's account (no password and reduced rights) or mine (I have admin rights and a password is required). I clearly got a virus the other week that has disabled my task manager as well as removed my start menu. When I log into my account I get a blank screen. I can not right click and C+A+Del "Has be disabled by administrator".

One other 'weird' item. When I normally start my computer I get two accounts, mine and my wifes. When I start in safe mode I get one called "Administrator" and one with my name (which has administrator rights), but I do not see one with my wife's name.

When I start in safe mode I get the exact same issue when I log into my account (i.e. No task manager, no right click, no start menu). I was able to get into the account called "Administrator" and I can run C+A+Del but no start menu and no right click.

I need a way to access files on my account so that I can transfer off some very important files. Is there a way to start your computer at the comand line only and find the file that contains the data I need to get off the computer? The data is in my account (i.e. The administrator account and I know the password). I can access C+A+Del under my wife's account and I can see all her files but I can not get to mine.


I have run AVG and one other virus scanning programs while under my wife's account but it doesn't seem to help when I try and log in under ... Read more

A:Task Manager and Explorer disabled even in safe mode

Hi Jason,

Welcome to TSF!

This sounds a lot like the Conflicker Virus that was hyped for April 1st, 2009. Microsoft KB962007 details it's implications and removal.


Quote:




If your antivirus software does not detect Conficker, you can use the Malicious Software Removal Tool (MSRT) to clean the malware. For more information, visit the following Microsoft WEB PAGE




Download " Microsoft? Windows? Malicious Software Removal Tool (KB890830)"

Read other 9 answers
RELEVANCY SCORE 82

The taskmanager is disabled, Not able to go to safe mode, whenever try yo go to safe mode, the system is rebooting itself.. Not able to uninstall AVAST anti-virus system to install a new anti-virus system. Please help me to fix this. Logfile of Trend Micro HijackThis v2.0.2Scan saved at 3:45:33 PM, on 12/29/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16674)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Windows Defender\MsMpEng.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Intel\Wireless\Bin\EvtEng.exeC:\Program Files\Intel\Wireless\Bin\S24EvMon.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Synaptics\SynTP\SynTPEnh.exeC:\Program Files\Lenovo\HOTKEY\TPHKMGR.exeC:\Program Files\Lenovo\HOTKEY\TpWAudAp.exeC:\WINDOWS\system32\tsnp2std.exeC:\WINDOWS\system32\hkcmd.exeC:\WINDOWS\system32\igfxpers.exeC:\WINDOWS\vsnp2std.exeC:\PROGRA~1\THINKV~1\AMSG\amsg.exeC:\PROGRA~1\Lenovo\LENOVO~2\LPMGR.exeC:\Program Files\IBM ThinkVantage\Client Security Solution\cs... Read more

A:No task manager / safe mode/ not able to un-install AVAST ..

Anybody help me regarding this ????
Please find the above hijackthis logs and let me know what would be the suitable solution to get the system right.
Please help me.

Read other 9 answers
RELEVANCY SCORE 81.2

Ok I am currently using my brothers computer that he built by ordering piece by piece, so this may be diffictult to explain it, but the computer is running Windows XP
I managed to contract some virus of some sort. The first symptoms were pop ups of porntube.com, then the generic box of You have a virus download software now. I tried to get AVG to scan but it could not detect anything, and by the time it was done scanning the screen was filled with download antivirus screens, and porn pop ups.

So i restarted my computer, and tried to start it up in safe mode, but as soon as it loads all the drivers it forces a restart, I then tried to start safe mode with command prompt and network, but agian the same thing.

So I then tried to start the computer normally, this actually booted up into windows, I saw my desktop and a flash of the toolbar then everything dissapears but my background and nothing happens, when i try to reboot and hit ctrl alt dlt as soon as i see the desktop i get a message saying task manager is blocked by administrator. This is my home computer and there has never been an issue with task manager before.
The only other thing I can think to do is the Windows XP disk, and try something with that, unfortunetly it is currently misplaced and I think it might be in another city right now. Is there anything I can do outside of using the XP disk, and if I do in fact have to re-buy the XP disk (which actually will only be like 10 bucks due to the sweet deal microsoft... Read more

A:Can't Boot In Safe Mode/task Manager Blocked By Administrator

http://www.bleepingcomputer.com/forums/ind...st&p=943085http://www.bleepingcomputer.com/forums/ind...st&p=943808Since you are in a hurry and need results fast I would just go for a clean installIf you saved you install key and can borrow one of those student editions cd's? Good luck

Read other 3 answers
RELEVANCY SCORE 81.2

hello everyone
my pc task manager, registry editor, safe mode is disable they shows "task manager is disable by administrative". And my antivirus and firewall also stop working .i tried to scan with avast inernet security using another window they show virus in all exe and moved all to virus chest and this virus attack also harm my another window
here is my hijack log file attached
anyone help please...........

A:task manager,registry editor and safe mode disable

Hello , And to the Bleeping Computer Malware Removal Forum. My name is Elise and I'll be glad to help you with your computer problems.I will be working on your malware issues, this may or may not solve other issues you may have with your machine.Please note that whatever repairs we make, are for fixing your computer problems only and by no means should be used on another computer.The cleaning process is not instant. Logs can take some time to research, so please be patient with me. I know that you need your computer working as quickly as possible, and I will work hard to help see that happen. Please reply using the Add/Reply button in the lower right hand corner of your screen. Do not start a new topic. The logs that you post should be pasted directly into the reply. Only attach them if requested or if they do not fit into the post.Unfortunately, if I do not hear back from you within 5 days, I will be forced to close your topic. If you still need help after I have closed your topic, send me or a moderator a personal message with the address of the thread or feel free to create a new one.You may want to keep the link to this topic in your favorites. Alternatively, you can click the button at the top bar of this topic and Track this Topic, where you can choose email notifications. The topics you are tracking are shown here.-----------------------------------------------------------If you have since resolved the original problem you were having, we would appreciate you... Read more

Read other 2 answers
RELEVANCY SCORE 81.2

Hey guys,
I've been running through the web searching for an answer be it seems like I can't find it anywhere. I'm kinda desperate cause it's my Girlfriend's laptop and she has a lot of college works on it. So I'd like to avoid formatting it.

Here's the Computer.
Dell Inspiron 1501 (laptop)
Windows XP Pro. SP2
Using RadialPoint Anti-Virus.

Windows XP asked if I wanted to install SP3. I said yes. But It was taking forever. So I left the house leaving the PC on his own. I came back and it was powered off. I don't know why it closed as it was connected on the power supply and the battery doesn't work anymore anyway.

I reopened it, I see the Window's logon screen. But then, all I see is my mouse (which I can move), but nothing else. Caps, num, scroll-locks work. I don't see any icons or taskbar. when I hit CTRL-ALT-DEL, I don't even access task manager to create a new task. Windows key+R doesn't work.

I tried in safe mode, it's the same (Except it is written safe mode on the blank screen). My wallpaper is usally a black screen with nothing on it. So I can't tell you if I really see a Black screen or if it's my wallpaper.

I tried using XP cd Recovery Console, it passes it after I choose C:\Windows\. I press exit, nothing changed. I tried using fixmbr and fixboot on the recovery console, nothing change either.

I don't mind formatting the pc, but I'd like to save some files before and I don't have an External Laptop HD drive. Is there any ways to ... Read more

A:Xp Blank desktop, no task manager or safe mode working.

any thoughts?

Read other 4 answers
RELEVANCY SCORE 81.2

Ok I am currently using my brothers computer that he built by ordering piece by piece, so this may be diffictult to explain it, but the computer is running Windows XP


I managed to contract some virus of some sort. The first symptoms were pop ups of porntube.com, then the generic box of You have a virus download software now. I tried to get AVG to scan but it could not detect anything, and by the time it was done scanning the screen was filled with download antivirus screens, and porn pop ups.

So i restarted my computer, and tried to start it up in safe mode, but as soon as it loads all the drivers it forces a restart, I then tried to start safe mode with command prompt and network, but agian the same thing.

So I then tried to start the computer normally, this actually booted up into windows, I saw my desktop and a flash of the toolbar then everything dissapears but my background and nothing happens, when i try to reboot and hit ctrl alt dlt as soon as i see the desktop i get a message saying task manager is blocked by administrator. This is my home computer and there has never been an issue with task manager before.


The only other thing I can think to do is the Windows XP disk, and try something with that, unfortunetly it is currently misplaced and I think it might be in another city right now. Is there anything I can do outside of using the XP disk, and if I do in fact have to re-buy the XP disk (which actually will only be like 10 bucks due to the sweet deal... Read more

A:Can't Boot in Safe Mode/Task Manager Blocked By Administrator

Hello, MacDiiddy
Welcome to TSF

My name is Billy O'Neal and I will be helping you. (Billy or Bill is fine, if you like.)
Please give me some time to look over your computer's log(s).
Please take note of the following:In the meantime, please refrain from making any changes to your computer.
Also, even if things appear to be running better, there is no guarantee that everything is finished. Please continue to check this forum post in order to ensure we get your system completely clean. We do not want to clean you part-way up, only to have the system re-infect itself. :)
If you do not understand any step(s) provided, please do not hesitate to ask before continuing. I would much rather clarify instructions or explain them differently than have something important broken.
Finally, please reply using the button in the lower left hand corner of your screen.
Old topics are closed after 3 days with no reply, and working topics are closed after 5 days. If for any reason you cannot complete instructions within that time, that's fine, just put a post here so that I know you're still here. We get a lot of people who simply leave, and if there is no contact for that amount of time I will have to assume you have "vanished" .

We need to run a Scan with DDSPlease download DDS, and save it to your desktop, from one of the following mirrors:This is a mirror
This is another mirror

Disable any type of "Script Blockers" or "Script Protection" installed on your sy... Read more

Read other 2 answers
RELEVANCY SCORE 81.2

Hi there, thanks to everyone who offers help on here to all us 'non-techies', if anyone is able to help me with my problem it will be much appreciated.

O.K..... where to start.... at the beginning I suppose.... it became obvious about a week ago that my computer (not this one) had a virus as I was being misdirected to different websites, so I decided to download some free Norton Anti-Virus. I then ran a scan but it was obvious that it hadn't installed properly, due to the virus on there no doubt. I then tried to visit numerous anti-virus websites but was blocked from all of them, so I accessed them from this computer, downloaded the anti-virus scanners to a USB stick and transferred them over to the infected computer.... some of them ran but found nothing, some of them didn't run at all, but the AVG one ran and found 4 viruses, but said that it couldn't heal / disinfect (I forget the exact term used!) them.... so I kept on trying other downloaded virus scanners in the hope that one of them would find and destroy whatever was causing the problem. Now here's the real problem.... I was about to try another virus scanner in safe mode but when I went to msconfig and selected safe mode with networking.... 'restart'.... my computerrestarted but will not allow me to get past the safe mode screen. I turn off and on, but all that comes up is the safe mode black screen with the cursor that can be moved. If i try Ctrl / ALt / Delete nothing happens.... if I try Ctrl / Shift / Esc (I s... Read more

A:[SOLVED] Safe mode black screen, but no task manager.

When you get into the Windows Advanced Operations Menu have you tried using any of the other options? specifically Last Known Good Configuration?

Do you have a Windows CD or a restore disk that might have come with the PC?

Read other 4 answers
RELEVANCY SCORE 81.2

Hi,

I got a virus yesterday off a dodgy website, in task manager it showed that i had 2 rundll programs open, note pad and a couple of internet explorer pages, i kept trying to close them but i couldn't.

Anyway i scanned using Avast and it said there was no virus etc but i restored my laptop to a couple of days ago.

Now i can't open task manager properly or install a MBAM and the screen is a bit dodgy as well, text boxes in internet dont open properly and text is a bit funny. I can't open these in safe mode either or system restore.

I couldn't even sign up to these forum on my laptop - i couldnt see what i was typing in the text box.

I've attached a screenshot of task manager and when i try to open the MBAM installer.

Any help greatly appreciated.

Thanks

A:Programs not opening properly e.g Task Manager (even in safe mode)

Sounds like you're still infected, and that it got into your System Restore points. Confirm if this is the case by installing Malwarebytes in Safe Mode with Networking to update and run a full scan. If this fails download Windows Defender Offline, writing to flash stick or burning to CD, booting to update and run a full scan.

If infection is found confirming your Restore points are infected, turn off System Protection and run another full scan with Malwarebytes, then Avast full scan or Boot Scan if available. System Protection - Change Disk Space Usage

Google the actual virus to see if it requires special tools for removal. Our Security forum experts can consult.

Once it's confirmed removed, run SFC -SCANNOW Command to check System file integrity.

Serious infections can sometimes require a Clean Reinstall - Factory OEM Windows 7 following or adapting these steps to get it perfect.

Read other 9 answers
RELEVANCY SCORE 81.2

Basically, my cousin tried downloading these fake facebook password crackers and they had viruses. Now If i try to system restore, it fails because the file (C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UHA0922H\all[2].js)
can't be extracted.
Furthermore I can't access such a file.
I tried using HJT and i have the log which i will leave at the end.
When i try to access task manager it says it has been disabled by the administrator. Same with Registry Editor. Also, When i try to access safe mode, I can't select safe mode or any other option and the timer just runs out and the computer starts up normally. Can anyone help me?
Here's the log by the way.
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:21:12 PM, on 7/11/2011
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
c:\Program Files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exe
C:\Program Files (x86)\Hewlett-Packard\HP Remote Solution\HP_Remote_Solution.exe
C:\Users\Chris\Downloads\HijackThis.exe
C:\Program Files (x86)\Hewlett-Packard\KBD\kbd.exe
C:\Users\Chris\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Chris\AppData\Local\Google\Chrome\Application\chrome.... Read more

A:Virus disabled Task Manager, Regedit, and Safe mode

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here. To help Bleeping Computer better assist you please perform the following steps:***************************************************First, I need to know if you still need help! To tell me this, please click on http://www.bleepingcomputer.com/logreply/409028 and follow the instructions there. If you do not still need help, this is all you need to do. If you do need help please continue below.***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of this page). In that reply, please include the following information:If you have not done so already, include a clear description of the problems you're having, along with any steps you may have performed so far.A new DDS and GMER log. For your convenience, you will find the instructions for generating these logs repeated at the bottom of this post.
Please do this even if you have p... Read more

Read other 2 answers
RELEVANCY SCORE 81.2

Ok I am currently using my brothers computer that he built by ordering piece by piece, so this may be diffictult to explain it, but the computer is running Windows XP
I managed to contract some virus of some sort. The first symptoms were pop ups of porntube.com, then the generic box of You have a virus download software now. I tried to get AVG to scan but it could not detect anything, and by the time it was done scanning the screen was filled with download antivirus screens, and porn pop ups.

So i restarted my computer, and tried to start it up in safe mode, but as soon as it loads all the drivers it forces a restart, I then tried to start safe mode with command prompt and network, but agian the same thing.

So I then tried to start the computer normally, this actually booted up into windows, I saw my desktop and a flash of the toolbar then everything dissapears but my background and nothing happens, when i try to reboot and hit ctrl alt dlt as soon as i see the desktop i get a message saying task manager is blocked by administrator. This is my home computer and there has never been an issue with task manager before.
The only other thing I can think to do is the Windows XP disk, and try something with that, unfortunetly it is currently misplaced and I think it might be in another city right now. Is there anything I can do outside of using the XP disk, and if I do in fact have to re-buy the XP disk (which actually will only be like 10 bucks due to the sweet deal microsoft... Read more

A:Can't Boot in Safe Mode/Task Manager Blocked By Administrator

Ok one more quick question,
Turns out Windows XP Pro. is only avaliable through IU, I am not running pro on my computer right now, If I put pro. in, will I still be able to go through the proper steps using XP Pro on an already installed home edition
 

Read other 1 answers
RELEVANCY SCORE 81.2

My father downloaded a major virus to this computer (again!!). Regedit and task manager have both been disabled, and when you attempt to go on the internet you get a popup saying "Procedure entry point..." I can't even log in under safe mode. My Spybot spyware software is also being blocked. Can you please please help to get this virus removed? Attached is my hijackthis log.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:14:46 PM, on 3/7/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Garmin\gStart.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Bonjour\mDNSResponder.... Read more

Read other answers
RELEVANCY SCORE 80.4

I am dealing with a computer, running Windows XP Pro SP3, infected with Internet Crime Complaint Center

I enter safe mode with networking, but the virus shows up there as well. If I try Ctrl-Alt-Del to access task manger the screen goes black and shows the logo for Windows XP Pro only.

I have tried Kaspersky boot disk, no such luck.

Any suggestions?

A:Internet Crime Compaint Center - cannot run task manager in safe mode

I'll report this topic to appropriate helpers.
Hold on.

Read other 2 answers
RELEVANCY SCORE 80.4

It seems that I have the same issue as this person http://forums.techguy.org/virus-othe...me-access.html . I can't use task manager or msconfig, stuff like malwarebytes doesn't work, safe mode crashes and won't allow me to do anything + I have performance issues in video games or music production software.

It seems that the virus is blocking other tech support sites other than this one too! I'm really scared, I would really appreciate help as soon as possible!

to sum up, I can't run task manager, msconfig, any kind of malwarebytes type program, MSE doesn't detect anything, it blocks certain sites, safe mode can accessed but I can't do anything with it - an error show up shortly after running it.
 

A:Bug won't let me access Task Manager, Safe Mode, MsConfig etc. + slowing down my comp

Welcome aboard

Please, complete all steps listed here: http://www.techspot.com/vb/topic58138.html
Make sure, you PASTE all logs. If some log exceeds 50,000 characters post limit, split it between couple of replies.
Attached logs won't be reviewed.

Please, observe following rules:

Read all of my instructions very carefully. Your mistakes during cleaning process may have very serious consequences, like unbootable computer.
If you're stuck, or you're not sure about certain step, always ask before doing anything else.
Please refrain from running any tools, fixes or applying any changes to your computer other than those I suggest.
Never run more than one scan at a time.
Keep updating me regarding your computer behavior, good, or bad.
The cleaning process, once started, has to be completed. Even if your computer appears to act better, it may still be infected. Once the computer is totally clean, I'll certainly let you know.
If you leave the topic without explanation in the middle of a cleaning process, you may not be eligible to receive any more help in malware removal forum.
I close my topics if you have not replied in 5 days. If you need more time, simply let me know. If I closed your topic and you need it to be reopened, simply PM me.

 

Read other 9 answers
RELEVANCY SCORE 80.4

hi guys..

I have this problem for days now and it's really making me go crazy.
these are the symptoms:

- task manager and registry disabled.
- safe mode disabled. I can't get to safe mode. It always restarts whenever I do it.
- I noticed that every anti-virus and anti malware tool i use starts at first. but the next time you're gonna use it, it won't start anymore.. it says that the file is corrupt or system error, etc.

I do hope you could help me out with this because i don't wanna reformat my hard drive again.. T_T

oh and by the way, these are the tools i used during my attempt to cleanse my pc:
hijack this
Cure it
Combo fix
Trojan Remover
Process Explorer
fixdownadup.exe (symantec tool)
Anti Downadup (bitdefender tool)

None of it worked. Probably because I can't run get in to safe mode and run it there..

Oh, and by the way, i found a file here in a flash drive which is attached to this pc.. i opened up the autorun.inf in notepad and this is what i found:

[AutoRun]
;SfOnphibvqt NXpbX vwjt
;xKPxfAGc sIgHQVhEtwbeUoJG
Open =bjlyg.pif
;ljVjTi QlnUjlebHfdKyT YEsuoSmcgXpmQmibHw rwkckiyxpT cyrEj wQmnfv
shelL\oPEN\DEFAuLt=1
;unEJEqEnTcngeeEAY
shell\opEN\cOmmANd = bjlyg.pif
;
Shell\ExploRe\CoMmand = bjlyg.pif
shEll\AUTOPlay\COMmaND=bjlyg.pif

This is the worst virus i've encountered so far and any help would be very, very much appreciated. ^_^

A:need help identifying this virus.. disabled task manager, registry and SAFE MODE

Hello and Welcome.

We want all our members to perform the steps outlined in the link I'll give you below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

---------------------------------------------------------------------------------------------

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.


A Reminder....

As seen in Post #2 of our sticky topic 'NEW INSTRUCTIONS Read this Before Posting For Malware Removal Help'

Quote:




Why we don't ask you to run ComboFix from the onset

As stated by the author of ComboFix:

ComboFix is a very powerful tool which when improperly used may render your machine to a doorstop.

We first need to verify if there's any rootkits present and how they could affect our tools. DDS & GMER are preliminary scans. We use their logs to map our strategy for attack.

With these logs we can determine the... Read more

Read other 1 answers
RELEVANCY SCORE 80.4

Hi,

It seems that I have the same issue as this person http://forums.techguy.org/virus-other-malware-removal/1144834-virus-wont-let-me-access.html . I can't use task manager or msconfig, stuff like malwarebytes doesn't work, safe mode crashes and won't allow me to do anything + i have performance issues in video games or music production software.

In the following post(s) I'll attach the results of the scans with Farbar Recovery Scan Tool after the scans are over (First, Addition and shortcut).
 

A:Bug won't let me access Task Manager, Safe Mode, MsConfig etc. + slowing down my comp

Read other 15 answers
RELEVANCY SCORE 80.4

Hello! Thanks for helping:
So I built my computer two years ago and it has been running strong ever since. I went to Vegas for three days and came back and it seems like this happened out of no where.
Windows boots up just fine, but then instead of a login screen, I get that black screen. I have googled it and most people are able to CTRL+ALT+DELETE and stuff like that; I cannot even do that.
I have tried running in safe mode, same deal. I have tried in low-resolution mode, same deal.
What is weird is that I can dual boot into Linux (I installed Ubuntu a while ago) just fine, in fact, I am posting through Linux on this very computer.
I have tried to use Windows 7's system repair that is through the computer, or whatever, no cigar. and my last restore point was in 2011, I would rather not resort to that.

Here are my system specs:
Motherboard: MB ASUS SABERTOOTH X58 LGA1366 R
Graphics Card: VGA GIGABYTE|GV-R685D5-1GD R
Power Supply: PSU CORSAIR|CMPSU-750TX 750W RT
CPU: CPU INTEL|CORE I7 950 3.06G 45N R
My Windows booted harddrive: SSD 64G|ADATA AS596TB-64GM-C R
All my other files+Linux boot harddrive: HD 1T|SAMSUNG HD103SJ 32M 7K %
Memory: MEM 2Gx3|PATRIOT PV736G1600ELK R

I remember doing an Avira Scan, and a Spybot Search and Destroy Scan like a week or two ago, but I swear I have rebooted since then, of course, so I do not think it is that.
I am worried that it is my graphics card, but then why would Linux work? Perhaps it is the graphics drivers, then? Is there a way I cou... Read more

A:Black screen with mouse cursor. (No task manager or safe mode)

You can download a legal copy with SP1 integrated from here:

Windows 7 Direct Download Links

Make sure you get the same version you have, Home Premium, Pro or Ultimate and 32 or 64 bit. Note that Basic or Starter is not available.

I recommend using ImgBurn at 4X speed (or the slowest available) to create the DVD from the downloaded .iso file.

You can do this on any computer capable of burning a DVD.

YOU MUST HAVE A VALID KEY TO INSTALL THIS .ISO. The one on the COA sticker on your computer will work.

You can also create a bootable USB Flash drive (4GB or larger) to install Windows 7 from.
Download and run Universal USB Installer – Easy as 1 2 3
Select Windows 7 from the first drop down list, all the way to the bottom
Select the downloaded Windows 7 iso file
Select your USB flash drive
Click Create

For techies or folks who work on computers: Create Windows 7 Universal ISO With All Editions Selection On Install with ei.cfg Removal Utility.
This will fit on a 6GB flash drive or can be burned to a DVD.

Read other 3 answers
RELEVANCY SCORE 79.6

(os: win XP) Hi i hope you could help me with this humongous problem i'm having. It started after i downloaded some application. my antivrus (mcafee 9.0) shutdown and through a process viewer i could see it kept trying to get back on(since it was using up al of cpu) but it couldnt. task manager couldnt be accessed , it said it has been disabled my admin. system restore was disabled! i tried restoring to "best known config" through the F8 option while booting, no luck. And then all of a sudden it boots to the login part and once i login my wallpaper loads and nothing else happens- no icons, no task bar, no response to ctrl+alt+del. only mouse pointer(which moves normally). The WORST part: tried using safe mode and every time it finishes loading files my syst restarts. tried all 3 safe mode options in fact tried all F8 options.

Now i loaded a new windows in a seperate windows folder so that my old windows files are not affected. i ran a virus scan through this and quarantined all detected viruses. However, my original windows still shows the same problem- no desktop, no safe mode etc. i have several important files which i cant lose so formatting is NOT an option. Reinstalling windows is also NOT an option mainly cuz ive reinstalled windows twice in the last 4 months and i dont want to give into the virus this time. And yes, once its fixed i am switching to a new OS. Windows is a nightmare.
 

A:Cannot run safe mode, stuck at dsktop without icons/taskbar/access to task manager

Would not getting a reply mean this problem has been solved before or would it mean i should give up?
 

Read other 1 answers
RELEVANCY SCORE 79.6

(os: win XP) Hi i hope you could help me with this humongous problem i'm having. It started after i downloaded some application. my antivrus (mcafee 9.0) shutdown and through a process viewer i could see it kept trying to get back on(since it was using up al of cpu) but it couldnt.
task manager couldnt be accessed , it said it has been disabled my admin.
system restore was disabled! i tried restoring to "best known config" through the F8 option while booting, no luck.
Then all of a sudden it boots to the login part and once i login my wallpaper loads and nothing else happens- no icons, no task bar, no response to ctrl+alt+del. only mouse pointer(which moves normally). The WORST part: tried using safe mode and every time it finishes loading files my system restarts. tried all 3 safe mode options in fact tried all F8 options.

Now I've loaded a new windows in a separate windows folder so that my old windows files are not affected. i ran a virus scan(McAfee latest) through this and quarantined all detected viruses. However, my original windows still shows the same problem- no desktop, no safe mode etc. i have several important files which i cant lose so formatting is NOT an option. Reinstalling windows is also NOT an option mainly because Ive reinstalled windows twice in the last 4 months and i don't want to give into the virus this time. And yes, once its fixed i am switching to a new OS. Windows is a nightmare.
 

A:Cannot run safe mode, stuck at dsktop without icons/taskbar/access to task manager

Please post here.
 

Read other 1 answers
RELEVANCY SCORE 70.8

Hello guys, this is my first post here. I have problem last few days. It could be some sort of malware or virus which cant be detected with AVG antivirus or Ad aware. This lap top hasnt been connected online for quite a while and problems started after used my USB flash disk. After that i couldnt open Task Manager(neighter with right click on task bar - text faded, nor with ctrl-alt-delete) or regedit. Also i cant boot into safe mode (when it starts, suddenly blue screen appears for a milisecond and computer restarts). I cant start AVG system scan, it reports that "application cannot run due to an error while verifying its electronic certificate". I can run AVG guard though. There was problem with C disk (i couldnt open it with double click and i had to use "explore" ). I resolved it by deleting "autorun.ini" file thru command prompt (it was hidden file and, another problem that occured, i cant edit folder options to make hidden files visible). There is also problem with language bar which is disabled and cannot be re-enabled cause its button is faded, though i dont care much about it.

I manage to enter to Task manager and regedit using trick with gpedit.msc. In "User configuration/Administrative templates/System/Ctrl+Alt+Del options/Remove task manager", default value is"not configured". I put disabled and i can use Task manager OR regedit again, but ONLY once! After i open and close ONE of those, i cant re-open it withou... Read more

A:Task Manager and regedit disabled, safe mode disabled, virus scan disabled... :s

It sounds very much like a virus. If you can get on the internet google regtools.vbs that script file should get your regedit working again but don't know for how long if it is a virus.

Read other 7 answers
RELEVANCY SCORE 63.6

I'l like to delete this process from Task Manager. Is this safe?? Currently infected with Control Center..This is how it reads:6b9bcf5b-Of3b-407e-bdf3-3f309d7de9bb.exeThanks -K

A:Is it safe to delete this Task Manager Process??

Please run a spyware scan ware scan using Malwarebyles or Superantispyware Please let us know what it found.

That is not known process that I encounter before.

Read other 2 answers
RELEVANCY SCORE 62.8

I was using the task manager and accidentally clicked on the CPU button and now I just shows the CPU and CPU history!! How do I get it back to the way it was, showing all the programs that are currently running? I would appreciate all the help I can get!!! Thanks

A:How can I get the task manager out of the CPU History mode?

Hi -

If this involves the Process tab and the columns, click on the view tab and select columns. Then check/un-check whatever columns you would like.

Regards. . .

jcgriff2

.

Read other 5 answers
RELEVANCY SCORE 62

This site has helped me alot in the past so I thought I would finally join.

(I'm running xp)

I started getting the fake windows security alert, so i ran malwarebytes and avg antivirus. I thought I got rid of it but once I restarted my computer and got online it reinstalled itself. I tried the same process again and again it didn't work. Then once i restarted my computer again, i had no taskbar and most of the normal start up programs (including avg) weren't running. Even when i try to manually start malwarebytes or AVG, they wont start. Also there is no networking capabilities. I tried to run explorer.exe but i still didn't get the taskbar back. After looking the problem up on Microsoft's website, i found out it was caused by an account problem (which was confirmed when i clicked the "user accounts" icon in control panel. To fix that problem, It said i had to boot in safe mode, but i get a bluescreen with an error whenever I boot up in anything but normal windows.

I ran msconfig and found out I was missing the boot.ini tab (which is why i cant boot up in safe mode I'm guessing?). I tried running the xp recovery disk and changing the boot.ini file to boot.ini.bak like another article on this site said but nothing seems to work. I also ran chkdsk \r with the xp recovery disk, and even though it said it fixed errors, nothing seems to help.

Also, windows wont let me run system restore (at least when i tried while booted in normal ... Read more

A:rogueware problem. no safe mode no task bar

Hello taymacjack, and to BleepingComputer!First of all a warning. Do NOT mess with MsConfig or boot.ini, unless you know what you are doing. This might harm your computer and cause it to never boot again!Lets see if we can run SuperAntispyware.ATF-CLEANER------------------Please download ATF Cleaner by Atribune. (This program is for XP and Windows 2000 only)Double-click ATF-Cleaner.exe to run the program.Under Main "Select Files to Delete" choose: Select All.Click the Empty Selected button.If you use Firefox browserClick Firefox at the top and choose: Select AllClick the Empty Selected button.NOTE: If you would like to keep your saved passwords, please click No at the prompt.If you use Opera browserClick Opera at the top and choose: Select AllClick the Empty Selected button.NOTE: If you would like to keep your saved passwords, please click No at the prompt.Click Exit on the Main menu to close the program.For Technical Support, double-click the e-mail address located at the bottom of each menu.SUPERANTISPYWARE-----------------------------Please download and scan with SUPERAntiSpyware FreeDouble-click SUPERAntiSypware.exe and use the default settings for installation.An icon will be created on your desktop. Double-click that icon to launch the program.If it will not start, go to Start > All Prgrams > SUPERAntiSpyware and click on Alternate Start.If asked to update the program definitions, click "Yes". If not, update the definitions b... Read more

Read other 3 answers
RELEVANCY SCORE 62

One of the biggest problems I'm having with this activation problem (http://forums.techguy.org/windows-nt-2000-xp/504487-my-son-tried-hackaround.html) is that I have no task bar in the safe mode. The only way I can get anything to run is through the run command in the task manager (ctrl-alt-del still works).

Is there a way to get the start key back?

Pete
 

A:No task bar/start button in safe mode

Read other 9 answers
RELEVANCY SCORE 61.6

people, there you go,
here is simple one.
 
though i must say that i do not know the answer.
 
when you look at task manager in "graph mode" where you see a graph instead of the numbers, how do you see what the program is that has caused the spike?
 
sincerly,
i do not know

A:when you look at task manager in "graph mode", how do you see the spike program?

I don't honestly know either... is it possible anyone?
 
Process Explorer by Sysinternals is pretty good for getting more detailed info about whats going on though.

Read other 10 answers
RELEVANCY SCORE 61.2

Hi,

Trying to sort a mates PC who appears to have some form of nasty virus/malware.

First thing I noticed is that I was unable to choose any option in the advanced start up menu other than 'start windows normally'
Running upto date AVG will find a trojan and delete it. I have then turned off system restore and rebooted but only to end up where I started !

Other issues...
1. Internet Explorer constantly points you to bogus antivirus / spyware sites
2. Attempting to navigate to another site is almost impossible (managed to download Mozilla after a long time but will not load.)
3. Desktop background displays Virus Alert (properties for display gives error "system admin has disabled display control panel")
4. Task Manager gives error of "Task Manager has been disabled by your administrator" after ctrl, alt, delete.
5. Start menu gives no list of programs
6. 'VIRUS ALERT!' shows next to time in system tray.
7. Painfully slow performance.

with all the above issues I am unable to download HJT...so whats a guy to do ?

Thanks for looking
 

A:Unable to boot in safe mode / disabled task man..

forgot to mention !

believed to be Win32.NetBooster ?
 

Read other 1 answers
RELEVANCY SCORE 61.2

Multiple problems obviously. 32 bit Vista Home Premium SP1 laptop.

The laptop will not shutdown normally. It has kept the 'logging off' screen displaying for well over 8 hours before I held down the power button.

Safe Mode does initiate just fine, but when the desktop displays it is all black with 'safe mode' in each corner. No icons. No taskbar. Ctl/Alt/Del will occasionally bring up the blue selection screen where you can select task manager along with lock the computer, etc., but nothing ever happens. Pressing the Windows key +any key (R, F, D) fails to do anything, as does Ctl/Esc or any of the other shortcuts. This all applies to safe mode only. So unless I'm missing something, there's no way to do anything in safe mode.

Normal Mode does work just fine - the taskbar is there, as are the icons. And task manager does work. I just can't update to SP2. And I can't run ComboFix to conclusion. It goes through all 50 stages, but when it gets to "do not run any programs until combofix has finished", it just stays there. I let it sit there overnight the other evening, and it was still on that screen 10 hours later.

I have run a full Malwarebytes scan which found nothing. SFC /scannow detected no integrity violations. A chkdsk /r /f at startup yielded nothing. Pressing F8 at boot will give me the options screen, but when I select Repair Your Computer followed by Startup Repair it says 'Startup Repair could not detect a problem.' TDSSKiller did find 4 questionabl... Read more

A:No taskmgr, No task bar or icons in safe mode, Will not logoff

I think that once we hit the 6 day mark without a single answer it seemed safe to assume that no answer would be forthcoming.

I'm a retired computer programmer who fixes PCs for people in the area. I charge next to nothing and mainly do it to keep active.

Despite the fact that I'd promised the customer I'd only charge them 20 bucks, they still wanted to have the PC back in a timely fashion. Seems reasonable. I've had it for a week now and I finally just backed up their data and reinstalled Vista. Everything works as it should.

Forums like this are great, and I appreciate the help I've gotten over the years, but sometimes the total lack of response can be incredibly frustrating. I see that relatively simple problems posted to the forum get answered immediately, but the tough ones, the ones that seemingly would interest people with expertise... well, those questions just languish unanswered.

Sometimes you just want some feedback - anything at all, if only to reaffirm your own existence.

Read other 4 answers
RELEVANCY SCORE 61.2

I'm getting random IE popup ads but when I open HJT it closes automatically. When I try to boot in safe mode drivers begin loading then it goes back to the screen you get after pressing F8. I can boot in normal mode. I don't have access to an XP cd for booting (nor can I burn a cd). Task manager won't open. What can I do?

A:HJT Disabled along w/ Safe Mode boot & Task Mgr, Popups etc

Hello and welcome to TSF.

Apologies for the long delay in response. We have a large number of HijackThis logs to handle and it?s taking us longer to catch up. If you haven?t received help elsewhere already and still require assistance please perform the following:Download RSIT by random/random and save it to your desktop.
Double click RSIT.exe to start the tool and click Continue at the disclaimer.
When the scan completes it will open a log named log.txt maximized, and a log named info.txt minimized.
Copy (Ctrl+A then Ctrl+C) and paste (Ctrl+V) the contents of the both here.

Please note that the forum is very busy and if I don?t hear from you in three days this thread will be closed.

Read other 2 answers
RELEVANCY SCORE 60.8

There was a task manager that runs on kernal mode
And i could use it to kill even antivirus

I just forgot its name
Does anyone know anything like that?
 

A:Does any member know task manager that runs on kernal mode? Could it kill AV'S

Process Hacker.
 

Read other 0 answers
RELEVANCY SCORE 60.8

My computer has been attacked by FBI moneypak. As soon as I saw the notification, I unplugged the network cable and shut off the computer. It showed up on my wife's user name. I tried to boot into safe mode with another account and was able to run malwarebytes. It found a lot of viruses and needed to restart. When I restarted, the computer ran much faster and I figured it was safe. However, when my wife logged into her account, it came back. Now the only safe mode that I can access is safe mode with command prompt. I tried to use the task manager while in safe mode with cmd prompt, but now it says that it has been disabled. I checked the gpedit it settings, but they were not restricted. Also, the registry editor is locked too, but that was also fine in gpedit. So after looking through the forums I found ways to make sure it will be properly deleted from my computer. However, if I cannot access windows, the task manager, registry editor, or the Internet, then all of the forum suggestions (ie. go to this website and download tools, etc.) cannot be tried.

The computer is very old.

Running windows xp professional

A:FBI moneypak runs in safe mode. Task mgr and regedit are locked too,

Hy my name is Daniel and I will be assisting you with your Malware related problems. Before we move on, please read the following points carefully. First, read my instructions completely. If there is anything that you do not understand kindly ask before proceeding. Perform everything in the correct order. Sometimes one step requires the previous one. If you have any problems while you are follow my instructions, Stop there and tell me the exact nature of your problem. Do not run any other scans without instruction or Add/ Remove Software unless I tell you to do so. This would change the output of our tools and could be confusing for me. Post all Logfiles as a reply rather than as an attachment unless I specifically ask you. If you can not post all logfiles in one reply, feel free to use more posts. If I don't hear from you within 3 days from this initial or any subsequent post, then this thread will be closed. Stay with me. I will give you some advice about prevention after the cleanup process. Absence of symptoms does not always mean the computer is clean. My first language is not english. So please do not use slang or idioms. It could be hard for me to read. Thanks for your understanding.Lets try a different way here.Please download tb.exe on a flashdrive.Plug in the flashdrive to the infected one. Reboot in Safemode with Command Prompt. Next you have to find the correct Driveletter from your Flashdrive ( typically F: or E: ).For this,In the Black Window type in Notep... Read more

Read other 15 answers
RELEVANCY SCORE 60.8

Sony VAIO PCWindows XP Home Edition Version 2002Service Pack 2I seem to have caught a Virus that has disabled the Task Manager, Registry Editor, Safe Mode & other things. I noticed this problem about 3 weeks ago when I tried opening "Task Manager" to close something down and couldn't open it. I thought it was normal until I used a "System Restore" and the problem still persisted. Also my cousin was on like 5 days ago and caught the "Anitvirus System Pro" program which probably caused even more damage. My computer is not slow, still runs at the same speed. I've looked for a solution online everywhere and no luck. I'm sick and tired of this virus and I want to finally get rid of it. The last thing I want to do is Reformat & Reinstall Windows. Please Help.Here are some of the Symptoms I've found so far:Task ManagerWhen I try Ctrl + Alt + Delete it says: "Task Manager has been disabled by your administrator"Registry EditorWhen I try Run > regedit > it says: "Registry editing has been disabled by your administrator"Show Hidden Files and FoldersI go to Folder Options, select "Show hidden files and folders", click OK. As soon as I close the window & re-open it, it goes back to "Do not show hidden files and folders"Anti-Virus Sites Won't LoadAny major websites that have to do with anti-virus won't load or open. For example McAfee, Symantec, etc.System RecoveryI've used... Read more

A:My Task Manger, Registry Editor & Safe Mode have been disabled...Help

The first thing I can think of would be to have a look at these instructions.If after following these instructions you still have the same problems, it may be in your best interest to post the results of your MalwareBytes log and someone will be sure to help you go through it and make sure you're clean or help you finish the cleaning.Hope this helps,

Read other 29 answers
RELEVANCY SCORE 60

Hey all:

Computer has a virus on it and can't do anything from normal windows. reboot and hit F8, and the only option in the boot manager is windows XP, which will just boot normally. There is no safe mode, or safe mode with networking, or last known config., etc. I need to get into safe mode but can't do it from windows and can't access it from the boot menu.

A:safe mode from windows boot manager missing

Hi and welcome to TSF see if any of the info here helps with your issue No Safe Mode Options Window with F8 key - Windows NT / 2000 / XP
If it does I would suggest you make a thread in the virus tojan and spyware are of the security forum to get help removing the infection,follow the instructions here NEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help - Tech Support Forum

Read other 1 answers
RELEVANCY SCORE 60

Hello. I have XP SP 3 and recently got a virus error message. I ran McAffe virus scan, but it did not fix the problem. I have VIRUS ALERT! in the corner. My first thought was to boot up into safemode. I have tried all the steps to get into safemode and none were successful. I also have no :c\ drive in My Computer folder and cannot access the "all programs" or "run" feature on the start menu. I am disabled from accessing the task manager, or editing the registry. It also has disabled auto updates from Microsoft. Every minute or so i get a pop-up telling me my computer is infected and that i should use their cleaner or whatever. On the "read before posting" section I was unable to complete activescan2 because it won't let me install anything currently. I also now have a "Windows Genuine Advantage Validation Tool" pop up. That was never there before and this is a valid copy of Windows XP. This computer ran problem free until 9:00 am sunday morning when i clicked on a link in google and it started automatically downloading a file that said it was a media player. it is was MediaTubeCodec_ver1.1242.0.exe. i would never have permitted any file to download but the damage has been done. Here is my hijack this log file.

Thank you so much for the help.

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 10:32: VIRUS ALERT!, on 9/29/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
Boot mode: Normal

Running proc... Read more

A:Virus alert on task bar and cannot boot up in safe mode or edit registry

Hello and Welcome. Please subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.

Before beginning the fix, read this post completely. If there's anything that you do not understand, kindly ask your questions before proceeding. Ensure that there aren't any opened browsers when you are carrying out the procedures below. Save the following instructions in Notepad as this webpage would not be available when you're carrying out the fix.

It is IMPORTANT that you don't miss a step & perform everything in the correct order/sequence.

---------------------------------------------------------------------------------------------

Please note that these fixes are not instantaneous. Most infections require more than one round to properly eradicate.

Stay with me until given the 'all clear' even if symptoms diminish. Lack of symptoms does not always mean the job is complete.

Kindly follow my instructions and please do no fixing on your own or running of scanners unless requested by me or another helper.

---------------------------------------------------------------------------------------------

You are using an outdated version of HijackThis. Please uninstall from Add/Remove programs, and delete your current version.

Next, download HijackThis to your desktop

Alternate link

Doubl... Read more

Read other 6 answers
RELEVANCY SCORE 57.6

Hi,My Computer which has Win Xp Sp3 is behaving like it is in safe mode , eventhough it is in normal mode .I noticed this because ,1. Avira Antivir Guard and Update cannot be launched bcz Scheduler is not running.2 . I tried to start scheduler ( under services.msc ) , but can't start it bcz of error 1084 ( safe mode situation ) .3 . I can't use Windows Update , bcz of error Error number: 0x8007043C ( same safe mode condition )4 . I ensured that BITS was set to automatic , but it can't run bcz of 1084 error.I have scanned with Malwarebytes, Spybot S&D , SuperAnti Spyware ( in real safe mode) - No DetectionHere is the dds log ,DDS (Ver_09-09-24.01) - NTFSx86 NETWORK Run by Administrator at 16:45:23.03 on Mon 09/28/2009Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_12Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.510.112 [GMT 5.5:30]AV: ZoneAlarm Security Suite Antivirus *On-access scanning disabled* (Outdated) {5D467B10-818C-4CAB-9FF7-6893B5B8F3CF}AV: AntiVir Desktop *On-access scanning enabled* (Outdated) {AD166499-45F9-482A-A743-FDD3350758C7}FW: ZoneAlarm Security Suite Firewall *enabled* {829BDA32-94B3-44F4-8446-F8FCFF809F8B}============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcsC:\WINDOWS\system32\ZoneLabs\vsmon.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Avira\AntiVir Desktop�... Read more

A:Safe Mode Error, WinXpSp3 behaves like it is in safe mode even in normal mode

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 2 answers
RELEVANCY SCORE 57.2

Computer is running slow and won't load Task Manager (noticed that CPU usage suddenly goes to 100% if I try to open Task Manager, however, it never loads). Likewise for Chrome, and many other antivirus/malware software. They all work once I get into Safe Mode, however, they find nothing. The anti-rootkit programs all complain about a driver not loading- possible rootkit infection (or cause I'm in Safe Mode)?
 
Here are my logs:
 
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 17-10-2016
Ran by Joseph (administrator) on JOSEPH-DESKTOP (26-10-2016 20:23:36)
Running from F:\
Loaded Profiles: Joseph & Guest Wifi (Available Profiles: Joseph & Guest Wifi & Guest)
Platform: Windows 10 Home Version 1607 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Safe Mode (with Networking)
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\HelpPane.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Mic... Read more

Read other answers
RELEVANCY SCORE 55.6

okay... so i was trying to get into safemode so i could run an antivirus scan, problem is whenever i tried going in safemode the blue screen would pop up and computer would restart. now for some dumb reason i thought maybe i could get in safemode if i used msconfig and selected safe mode from the boot menu. so the computer restarted and now it boots in safemode but the blue screen and restart happen everytime now. ive tried "start windows normally" but that boots in safemode.... ive tried "last known good config..." and that too boots in safemode. so now im stuck, i cant get on windows. any help please?

im willing to start over but i dont know how to do that from here
 

A:STUCK in safe mode boot, safe mode doesnt work and restarts, REPEAT

Read other 11 answers
RELEVANCY SCORE 55.2

I'm new here and in hopes of getting this resolved. I just installed the new Norton Systemworks 2005 and rebooted after installation. When the boot screen got up to the blue screen with the Windows XP logo before displaying the login names where you put in your password, it just stops. I restarted a few times and waiting a few more times thinking it may need to 'finish' installing. But each time gave the same results. Finally, I went in with 'Safe Mode' and got in with no problems. Tried again in normal mode after looking around for any obvious problems (none found)... back to square one. Tried again in 'Safe Mode with Networking' and it failed like normal mode so I suspected a networking problem??? The last thing I tried which made me mad is that I tried to uninstall Norton Systemworks in 'Safe Mode' and that failed!! Anyone in these forums know the cure? :dead:
 

A:Unable to get to login screen, works in Safe Mode but in Safe Mode w/ Networking

Just a thought

Safe-Mode
Start \ Run \ msconfig \ diagnostic startup
disable any services attached to your most recent install and restart
should get warning next boot about using msconfig, its ok
One key service that needs to be available is the installer service
Try the uninstall, if doesn't complete
Try the uninstall string in the registry only if you know what you are doing

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall

Under it you will see a list of installed programs. Some don?t show up as words but you can figure out what they are by looking at their values. What you are looking for is the uninstall string. Double click that key as if you were going to modify its value. Do a CTRL + C to copy and then exit the registry editor.

Go to START \ RUN and paste the uninstall sting and hit enter. This should launch the uninstall.

Just a thought though as I am not infront of a test system at the moment. You should research this a little further so you have a clear understanding of what you can and can't do with msconfig.

or simpler yet

Safe-Mode

Start \ Programs \ Access. \ System Tools \ System Restore

Select restore point prior to install of whats giving you the problem.

Again, Good Luck

PS If you try to install it again, turn of antivirus and other open programs etc..
 

Read other 1 answers
RELEVANCY SCORE 55.2

i have windows home xp edtion on parkard bell.in safe mode it is fine,but when on normal bootup mode it will hang up after 2mins aprox(then restart saying crit error,check hardware etc and being to dump files kernel),on a blue screen.

i tried a different graphics card,but no joy.so i replaced the hdd drive and put a fresh copy of windows xp pro edtion on,but it loads all the files(i have not pressed f6)i just let it run its course on the disc,then it hangs up on the blue screen again with the words(crit error 0x0000007f)check hardware etc and if this is the first time you have seen it try starting windows again.

Thankyou for all your time.
 

A:Solved: xp safe in safe mode fine...mormal mode blue screen

Start in Safe Mode and look in C:\Windows\Minidump for crash log files with a dmp extension, like Mini071008-01.dmp. Zip 4-5 of the latest ones and post here as a ZIP or RAR attachment. The log file contains information useful to determine what caused the error, most likely hardware.
 

Read other 2 answers
RELEVANCY SCORE 54.4

I recently attempted to clean my brother's computer after he aquired a virus from the torrent file program he uses. Regardless, I cleaned a trojan and a backdoor from his system from safe mode. I can not boot in normal mode. Everytime i try the system gets hung up at the windows loading screen then the screen turns black and sits there. I have to hard reboot. I ahve used a repar CD and i have come across an error 0x800700b7, i have also recived this when i tried to work around this problem "identifier {9dea862c-5cdd-4e70-acc1-f32b344d4795}"

OS= Win 7

A:System will only start in Safe mode, Clean virus in safe mode

You can spend a lot of time trying to fix the boot problem and clean the virus from the computer, or you can nuke it and reinstall Windows. I wouldn't bother trying to fix it, personally - I'd back up what I could and then I'd install Windows again.

Read other 9 answers
RELEVANCY SCORE 54.4

I booted into safe mode to try an fix a issue I selected to boot with command prompt butb I have a all black screen an can't get out of safe mode now I restarted the laptop a few times still the same 'anyone know how to fix this?

Read other answers
RELEVANCY SCORE 54.4

This morning we had a power outage and when I turned my computer back on, it would not boot. I tried several times to hard boot, with no luck. Then I tried safe mode. Ran an antivirus scan and it showed malware and several infections which it cleaned. The computer still would not boot normally. I then ran chkdsk, still would not boot normally. I have ran malware bytes, registry repair and the registry defrag program as well as done a disk clean up. It still will not boot in normal mode.
Since my last problems that you helped me with, I have upgraded to a broadband internet connection and have a home network. The 2 other computers on the network are fine.
A week ago, I had purchased Avast internet security and had problems immediately. It would not allow me to connect to the internet. That was uninstalled and I went back to the free Avast antivirus, Zone alarm and Spyware blaster. I was very unhappy with Avast customer service and support iYogi and decided I did not want Avast on my computer at all. I have since downloaded PC tools free antivirus. Once I have my computer operational again, I am open to suggestions.
Fortunately, I did not change anything on the other 2 computers. Just mine.
Running Windows XP 3 .
Thank you.

A:[SOLVED] computer will not boot except in safe mode or safe mode with networking.

what are you running
video card
cpu
m/board
ram
power supply
brand
model
wattage

check the listings in the bios for voltages and temperatures and post them

the outage may have damaged the psu

Read other 19 answers