Over 1 million tech questions and answers.

Only runs in safe, redirects even in safe, reboots in normal mode..no virus' found

Q: Only runs in safe, redirects even in safe, reboots in normal mode..no virus' found

I was browsing the internet the other day when I clicked on a link and my computer shut down. I immediately knew it was a bad link. My computer rebooted and it wouldn't let me on IE after that at all. I then did a restore to the previous day. I was about to get online so I went and downloaded Kaspersky IS and scanned my computer. My laptop messed up and rebooted itself. Then got Anti-Malware Bytes in Safe mode and ran a scan, still had issues Kaspersky not running right and my computer freezing after just a couple of minutes. Went back and did a restore again to the same spot and this time said forget Kaspersky and jsut did AMWB. It showed my computer is clean, yet about 2 minutes after booting, my computer reboots and the safe mode option pops up. I can run ok in safe mode but cannot get it to work in normal mode. I did trend micros housecall and another online scanner and all say my computer is clean. Yet, when I start IE, I am redirected on every link I click to scour..... or another site with links on it. Any help is greatly appreciated, as well as a recommendation for a better Anti-virus. I jsut had McAfree that came with this laptop. Thanks!

DDS (Ver_2011-06-12.02) - NTFSx86 NETWORK
Internet Explorer: 8.0.7600.16385
Run by Mom at 1631 on 2011-06-20
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.2812.1805 [GMT -4:00]
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
============== Running Processes ===============
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k NetworkService
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\Internet Explorer\iexplore.exe
C:\windows\System32\svchost.exe -k secsvcs
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
============== Pseudo HJT Report ===============
uSearch Page = hxxp://www.google.com
uStart Page = hxxp://www.google.com/
uDefault_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=TSNA&bmod=TSNA
uSearch Bar = hxxp://www.google.com/ie
uDefault_Search_URL = hxxp://www.google.com/ie
mDefault_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=TSNA&bmod=TSNA
mStart Page = hxxp://www.google.com/ig/redirectdomain?brand=TSNA&bmod=TSNA
uInternet Settings,ProxyOverride = *.local
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
TB: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
mRun: [<NO NAME>]
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xport to Microsoft Excel - c:\progra~1\mif5ba~1\office11\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\google\google toolbar\component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll
Trusted Zone: adobe.com\www
DPF: {32C3FEAE-0877-4767-8C20-62A5829A0945} - hxxp://www.facebook.com/fbplugin/win32/axfbootloader.cab?1265948734781
DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} - hxxp://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab
DPF: {8F6E7FB2-E56B-4F66-A4E1-9765D2565280} - hxxp://www.worldwinner.com/games/launcher/ie/v2.22.01.0/iewwload.cab
DPF: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab
DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} - hxxp://www.popcap.com/webgames/popcaploader_v10.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
TCP: DhcpNameServer =
TCP: Interfaces\{2A8CA118-C629-4C3D-ABDF-541DA65495CD} : DhcpNameServer =
TCP: Interfaces\{B9665564-1FB0-4659-BD25-D27C0BFC7DFB} : DhcpNameServer =
TCP: Interfaces\{B9665564-1FB0-4659-BD25-D27C0BFC7DFB}\24563747755637475627E613 : DhcpNameServer =
TCP: Interfaces\{B9665564-1FB0-4659-BD25-D27C0BFC7DFB}\24563747755637475627E633 : DhcpNameServer =
TCP: Interfaces\{B9665564-1FB0-4659-BD25-D27C0BFC7DFB}\3507565646C496E6B6372343 : DhcpNameServer =
TCP: Interfaces\{B9665564-1FB0-4659-BD25-D27C0BFC7DFB}\4496371626C656 : DhcpNameServer =
TCP: Interfaces\{B9665564-1FB0-4659-BD25-D27C0BFC7DFB}\C4962627162797F575966696 : DhcpNameServer =
mASetup: {01250B8F-D947-4F8A-9408-FE8E3EE2EC92} - c:\program files\toshiba\my toshiba\MyToshiba.exe /SETUP
============= SERVICES / DRIVERS ===============
R1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\drivers\vwififlt.sys [2009-7-13 48128]
R2 TVALZFL;TOSHIBA ACPI-Based Value Added Logical and General Purpose Device Filter Driver;c:\windows\system32\drivers\TVALZFL.sys [2009-6-19 12920]
R3 FwLnk;FwLnk Driver;c:\windows\system32\drivers\FwLnk.sys [2009-12-14 7680]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\drivers\Rt86win7.sys [2009-12-14 187392]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\drivers\vwifimp.sys [2009-7-13 14336]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2009-12-14 176128]
S2 cfWiMAXService;ConfigFree WiMAX Service;c:\program files\toshiba\configfree\CFIWmxSvcs.exe [2009-8-10 185712]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 ConfigFree Service;ConfigFree Service;c:\program files\toshiba\configfree\CFSvcs.exe [2009-3-10 46448]
S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-2-2 135664]
S2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2011-6-17 366640]
S2 MotoHelper;MotoHelper Service;c:\program files\motorola\motohelper\MotoHelperService.exe [2010-9-7 202048]
S2 TOSHIBA eco Utility Service;TOSHIBA eco Utility Service;c:\program files\toshiba\teco\TecoService.exe [2009-8-11 185712]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-13 229888]
S3 gupdatem;Google Update Service (gupdatem);c:\program files\google\update\GoogleUpdate.exe [2010-2-2 135664]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2011-6-17 22712]
S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [2011-6-17 39984]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\drivers\RtsUStor.sys [2009-12-14 171520]
S3 TMachInfo;TMachInfo;c:\program files\toshiba\toshiba service station\TMachInfo.exe [2009-12-14 51512]
S3 TOSHIBA HDD SSD Alert Service;TOSHIBA HDD SSD Alert Service;c:\program files\toshiba\toshiba hdd ssd alert\TosSmartSrv.exe [2009-9-17 111960]
S3 TPCHSrv;TPCH Service;c:\program files\toshiba\tphm\TPCHSrv.exe [2009-8-6 685424]
=============== Created Last 30 ================
2011-06-20 17:38:36 -------- d-----w- c:\programdata\SUPERAntiSpyware.com
2011-06-20 17:23:01 -------- d--h--w- c:\programdata\Common Files
2011-06-20 05:35:07 -------- d-----w- c:\programdata\MFAData
2011-06-20 04:34:22 -------- d-----w- c:\windows\pss
2011-06-17 16:19:38 39984 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-06-17 16:19:33 22712 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-06-17 16:05:45 6962000 ----a-w- c:\programdata\microsoft\windows defender\definition updates\{b28c5bd1-59bb-4a4e-882c-d90c6a25b351}\mpengine.dll
2011-06-17 00:55:59 -------- d-----w- c:\users\mom\appdata\roaming\Malwarebytes
2011-06-17 00:55:51 -------- d-----w- c:\programdata\Malwarebytes
2011-06-17 00:55:48 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-06-16 02:36:31 -------- d-----w- C:\Toshiba
2011-06-16 01:52:31 -------- d-----w- c:\program files\Kaspersky Lab
2011-06-16 01:52:30 -------- d-----w- c:\programdata\Kaspersky Lab
2011-06-15 19:35:53 0 ----a-w- c:\users\mom\appdata\local\Azajoluracanarig.bin
2011-06-15 19:35:52 -------- d-----w- c:\users\mom\appdata\local\{89330488-6E45-4ED0-B776-3B6DA470DCE4}
2011-06-15 19:34:08 -------- d-----w- c:\programdata\pB28258HhEaA28258
2011-05-24 21:22:18 26496 ----a-w- c:\windows\system32\drivers\Diskdump.sys
2011-05-24 04:12:56 123904 ----a-w- c:\windows\system32\poqexec.exe
==================== Find3M ====================
2011-05-16 03:23:40 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-04-13 22:40:10 4284416 ----a-w- c:\windows\system32\GPhotos.scr
2011-04-09 06:13:06 3957632 ----a-w- c:\windows\system32\ntkrnlpa.exe
2011-04-09 06:13:06 3901824 ----a-w- c:\windows\system32\ntoskrnl.exe
2011-03-25 0346 258560 ----a-w- c:\windows\system32\drivers\usbhub.sys
2011-03-25 0325 284160 ----a-w- c:\windows\system32\drivers\usbport.sys
2011-03-25 0323 75776 ----a-w- c:\windows\system32\drivers\usbccgp.sys
2011-03-25 0312 43008 ----a-w- c:\windows\system32\drivers\usbehci.sys
2011-03-25 0311 20480 ----a-w- c:\windows\system32\drivers\usbohci.sys
2011-03-25 0310 24064 ----a-w- c:\windows\system32\drivers\usbuhci.sys
2011-03-25 0306 5888 ----a-w- c:\windows\system32\drivers\usbd.sys
============= FINISH: 16:09:01.61 ===============

Preferred Solution: Only runs in safe, redirects even in safe, reboots in normal mode..no virus' found

I recommend downloading and running DAP. It can help sort out any driver and firmware related issues on your system

It's worked out well for many of us in the past.

You can download it direct from this link http://downloaddap.org. (This link will open the download page of DAP so you can save a copy to your computer.)

A: Only runs in safe, redirects even in safe, reboots in normal mode..no virus' found

oh and Malwarebytes did block a 91-207-192-22 port 49179 svchost.exe

Read other 9 answers

I recently re-formatted my Sony VAIO since it was starting to run super slow. Now that I re-installed Windows 7 on it through recovery disks, it worked fined for about a day but then the problem came back. The computer is slow at bootup and runs super slow while freezing so many times. I am running it on safe mode right now and its working fine.

I ran hardware diagnostics and everything is fine (Memory, Hard Disk etc.)

I installed Norton Antivirus and Windows Live Messenger after the re-install.

Please help me.

A:Computer runs really slow in normal mode, but runs fine in safe mode


Read other 9 answers

I am looking for help 
My windows 7 start in normal mode is very slow.  System is in a loop or is hanging waiting for the hard disk to be free.  The hard disk indicator light is on  all the time ... 
When I start the system in safe mode with networking, the system is fine and nothing is holding the hard disk anymore.
I ran minitoolbox and got the following error indications 
MiniToolBox by Farbar  Version: 20-06-2014
Ran by Toshiba (administrator) on 21-06-2014 at 22:59:54
Running from "C:\Users\Toshiba\Downloads"
Microsoft Windows 7 Home Premium  Service Pack 1 (X64)
Boot Mode: Network
========================= Devices: ================================
Name: Security Processor Loader Driver
Description: Security Processor Loader Driver
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Service: spldr
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: Microsoft Teredo Tunneling Adapter
Description: Microsoft Teredo Tunneling Adapt... Read more

A:Windows 7 very slow in normal mode, runs fine in safe mode with networking

Could have crap ton of stuff starting up with windows.
perhaps corupt driver or installed the wrong driver.

Read other 2 answers

Hello, the computer I am concerned with is running Windows 7 with IE8, Microsoft Security Essentials and Malwarebytes Anti-Malware. I am currently in Safe Mode with Networking without issue.

The owner of the computer says that something happened earlier today while he was online that sounds like some false antivirus popup, but he's unsure. Here are the symptoms in normal mode. Every application, from moving through them to opening and closing them, runs exceptionally slow - one to three minutes to open, at least a minute to open internet pages. I noticed that, when in IE, as the pages are loading the IE page disappears and reappears. I am not very familiar with Windows 7 so I don't know if it is related. The computer seems to be getting slower as the day goes on. CPU usage is very high.

So far, I have disabled many startup items that were unnecessary. I ran CCleaner and cleaned up. MBAM was run in both normal and safe mode, full scans, and found nothing. This is also posted in Viruses and Malware, but I'm unsure where it should live.

If you can help, thanks!! I have to work on the Win7 computer from LogMeIn, and may have to get around in safe mode there.

A:Win7 runs extremely slow in normal mode, but nicely in safe mode

I suggest you wait for a response from the malware specialists before looking elsewhere.

Read other 2 answers

I'm not sure what causes my BSOD. The errors range from BAD_POOL_HEADER to ntfs.sys to drivers-something.

I am currently running Safe Mode with Networking and things seem stable.

I ran Anti-malware (nothing found), VIPRErescuescanner (nothing), fakereanfix (didn't help), ComboFix (probably made things worse).

Are my drivers up to date? No, probably not, but at this point, I'm scared to change anything else.
Is my windows 7 up to date? No updates installed since Jan 2012, I'm too scared to update anything lest I cause more BSODs.

Minidump attached in next post.

A:BSOD in normal mode (various errors), Runs fine in Safe Mode

minidump per SF_Diagnostic_tool

Read other 8 answers

Honestly, I really don't know where to begin. Every time I try to run my computer in normal mode it restarts and gives me options to run in different safe modes or try normal mode again. My computer runs perfectly fine in safe mode. I haven't added any new programs. It's been this way for some time. I'm currently running sfc /scannow to see if this helps, which I seen it helped on a similar forum on bleepingcomputer. If anyone has anything else to contribute, please feel free.

A:Computer runs fine in safe mode but restart when run in normal mode

This is what it's telling me.

Read other 3 answers

all of a sudden Windows 7 became extremely slow in normal mode. This doesn't happen in safe mode.
The laptop now also makes 3 beeps on startup, but the beeps disappear when Windows login page comes up. The only thing I did is updating Java and the beeps started.
I'm sending in attachment DDS, OTL and ComboFix logs.
Thanks in advance for your help!

A:Windows 7 runs fine in safe mode, but very slow in normal mode

Hello maestrale,

Welcome to Bleeping Computer.
My name is fireman4it and I will be helping you with your Malware problem.

Please take note of some guidelines for this fix:
Refrain from making any changes to your computer including installing/uninstall programs, deleting files, modifying the registry, and running scanners or tools.
   If you do not understand any step(s) provided, please do not hesitate to ask before continuing.
   Even if things appear to be better, it might not mean we are finished. Please continue to follow my instructions and reply back until I give you the "all clean".
In the upper right hand corner of the topic you will see a button called Follow This Topic.I suggest you click it and select Immediate E-Mail notification and click on Follow This Topic. This way you will be advised when we respond to your topic and facilitate the cleaning of your machine.

   Finally, please reply using the Post  button in the lower right hand corner of your screen. Do not start a new topic. The logs that you post should be pasted directly into the reply, unless they do not fit into the post.  1.Download AdwCleanerDouble click on AdwCleaner.exe to run the tool.
***Note: Windows Vista and Windows 7 users:
Right click in the adwCleaner.exe and select "Run as administrator"Click the Scan button.

Once the scan complete click Clean to finish cleaning any thing it has found.A logfile will automatically open after the scan h... Read more

Read other 28 answers

I have a HP Pavilion A6352c desktop pc. I have recently installed a clean copy on win 7. I have listed the issue I am having below. I hope you can assist me in getting this system to a stable state.

1. System locks up running in Normal Mode - I will take about 3 minutes before the entire system locks up, I have to do a hard shutdown when this happens. I can start the system in Normal mode, but only if I use the diagnostic startup option in MSConfig. I can enable some services, but I am in the process of trying to figure out which one is making it lockup.

2. The system will run fine under safe mode with networking and such. I have the normal startup option in msconfig enabled in safe mode and no issue except it's in Safe Mode!

I have attached the requested documents/files in the attached zip file. I was unable to get the Perfmon report.

I look forward to your response.

Thanks in advance


A:Systems runs in safe mode - Normal mode locks up

The dumps are all over the map, but they all are having issues in amdk8.sys (the OS's CPU driver). What's really interesting is one of these dumps looks almost exactly the same as the issue that is documented in KB 975530, but that's for Intel CPUs running hyper-v. However, you *are* running into a watchdog timeout on the CPU (it's causing other drivers to crash and confuse analyze, but it's not that code's fault that the CPU stopped processing it's requests). This means you might have a bum core on that CPU when entering/exiting C-states. Try running this:
reg add HKLM\System\CurrentControlSet\Control\Processor /v Capabilities /t REG_DWORD /d 0x0007e066

Reboot, and see if it still causes problems in regular boot mode. Either way, you probably need to have that CPU looked at as a potential bad part.

Read other 9 answers


I'm having problems when I load windows in normal mode. When I turn on the computer everything starts as normal. It's after clicking my name and the desktop loads, nothing responds. It just freezes.

I have no problems when loading windows in safe mode with networking.

I ran a full scan through my virus software, Kaspersky. No threats were detected.

I also tried System Restore twice while in safe mode. I'm still having issues.

Any help would be greatly appreciated. Thanks so much!

A:Solved: Pc freezes in normal mode, but runs in safe mode

Read other 16 answers

I could use some help. My Toshiba Satellite laptop is having issues after the normal startup with slowing down dramatically after it goes to the desktop. It will basically freeze with commands taking between 5-50 seconds to be recognized and sometimes it just freezes. When I boot into Safe Mode, I am running everything smoothly. I could really use some help figuring out whats going on.

A:Everything runs very slow in normal, but fine in Safe Mode.

Open msconfig and on the General tab choose "selective startup" (uncheck all three items) and reboot. Does the problem still occur? If not, start adding items back to msconfig one or two at a time, rebooting after each change, until the problem reappears and you'll have identified the offending process. This is clearly a time consuming procedure, but it is the best way to determine if some process loading with the system is the cause of your problem.
After you've isolated the cause, do not use msconfig to permanently disable the process. Instead, if it is a service go to START - RUN and type: services.msc (then press enter) and disable the service OR, if it a program, you can download & run a simple app such as Mike Lin's Startup Control Panel (http://www.mlin.net/StartupCPL.shtml) to enable, disable, or otherwise manage startup programs.

Read other 1 answers

Can someone help me to figure out what is making this happen ? its driving me nuts, my cpu usage goes through the roof, and I am clueless as to what is causing this... but in safe mode with networking it runs fine.... can someone help me ??? many thanks!!!!

Read other answers

Alright this is a family's laptop that is about 5 or even more years old...has windows xp on it dont know the exact one -.-...alright.

My sister has been using it and says she has never done anything to it...which i dont believe but anyways this computer will not boot up what so ever...everytime you power it on it goes to the screen that says unexpected error software/hardware problem yada yada yada...and then it gives you the options of boot in safe mode, safe mode networking, safe mode command prompt, last known good configuration...and none of those will work...we do have the recovery disks to wipe it but are trying to find a better way if possible...and when you try to load into any of the safe mode choices it stops at multi(0)disk(0)rdisk(0)partition(1)\WINDOWS\System32\Drivers\Mup.sys...will stay at that for about 5-10 mins and then just turn off...if you try to just do normal mode or last known configuration it just acts like it loads with the windows and the little green loading bar then shuts off...the more i type the more i think the harddrive is toast but im new and learning so i probably could be wrong. Just looking for suggestions =)

Oh and this pc will run very hot...so if its a hardware issue i would not be surprised.

A:HP Pavilion will not boot in safe, safe w/networking, safe command or in normal mode

I'm heading to work now ill be back later tonight so just post suggestions and i will try them. =)

Read other 11 answers

Hello guys,
you are my last hope! I do not know what I am supposed to do anymore, I spent the last 8hours looking on the net what I could do. I am a computer noob and have little experience with computers at all.

Here's my problem. My laptop doesn't start anymore. The first thing I noticed on my boot screen were four parallel vertical lines of dots, then four parallel lines of vertical dashes then dots again and so on. This is in the background from the time when I start my samsung R70, even on the boot screen, as well as on the windows vista loading screen (these little boxes floating from right to left...). These really weird dots are however NOT present in the DOs menu and neither is it after you pressed F8 to boot in safe mode. They are also NOT present in safe mode that means they disappear after the boot screen and are not evident on the black background of the safe mode desktop.
However at the time when the windows vista sign is supposed to flash up and you'd be prompted to enter your password (this is when I start it normally), nothing happens and a greyish-white screen comes up, after which the system just restarts and the whole process happens again (including the dots mentioned earlier). I can run the laptop in safe mode, in fact I am running it in safe mode with network drivers right now to type this, but I cannot, under any circumstances, run it in normal mode. When I start it in safe mode I get the following notice:

(Yes, I am running a German OS, so I a... Read more

A:Help! Laptop runs in Safe mode but not in normal mode


Originally Posted by XQlusive

Weitere Informationen ?ber das Problem [Additional information]
BCCode: 50
BCP1: A33100F8
BCP2: 00000000
BCP3: 820818F8
BCP4: 00000002
OS Version: 6_0_6000
Service Pack: 0_0

Please guys, help me!

I am a year 12 boarding student and I desperately need my laptop to get my work done!

Do you guys reckon that installing a completely new windows vista will solve the problem?

- I do not have the original vista CD with me since I am German and on an exchange to Australia. My dad has the CD and he's about 22.000km away right now.

Hi -

The BSOD bugcheck (STOP error) = 0x50 = invalid memory referenced

As you said - no service packs installed, which is probably one of the problems here. You need to see if you can re-install Windows and then see if it is stable or not.

I do recommend another re-install of Vista using the manufacturer's (OEM) recovery DVD. This must be the first item on the "to do" list. Contact your father or the system manufacturer and obtain the Vista recovery DVDs. Do you have a recovery partition? Many do. Usually, the key to invoke the recovery partition if F10 - during boot-up.

Two other options until your Vista DVDs arrive from your father -
1. Download and burn Server 2008 - it has the same build as Vista, with a few features that have been disabled. It is a trial offer that can be renewed up to 240 days - http:/... Read more

Read other 1 answers

Hi, I navigated to this site doing a google search and finding a post in your forum that was similar to my issue.
On 9/20 morning my browser was acting strange like when I clicked the arrow to go back I had to click numerous times and sometime it wouldn't go back at all.   I was running Kaspersky anti virus at the time but wonder if something malicous got in.   When I shut down the computer and tried to restart it took almost 90 minutes to start .  Once it starts and I click start menu or a program on the desktop the it hangs and I'm able to do nothing. 
I'm able to work in safe mode and safe mode with networking as normal.
As recommended.
I downloaded super anti spyware and it found only cookies I got rid of .
I also downloaded Adware cleaner which found a number of issues which I deleted.
Did a malware bytes scan and said I was clean. Tried to start in normal mode and the same issues.
I'd appreaciate any assistance. Thanks!!
I'd also like to add trying to use system restore to go back further than the morning of 9/20 but the box in the lower left is missing.  I just used that weeks ago and the box was there when I replaced a video card.

A:Vista runs fine in safe mode , slow in normal.

Welcome aboard   Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2 SecurityCheck may produce some false warning(s), so leave the results reading to me. Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeClick Go and post the result. Download Malwarebytes' Anti-Malware (aka MBAM): http://www.malwarebytes.org/products/malwarebytes_free to your desktop.* Double-click mbam-setup.exe and follow the prompts to install the program.* At the end, be sure a checkmark is placed next to Up... Read more

Read other 5 answers

Hi, after connecting and disconnecting some external HDD using USB to my pc, BSOD keeps showing constantly after 5 minutes from booting to windows .

I checked RAM, and it urned out to be in good shape, then i tried Registry cleaning, but nothing changed .

It works very well and stable under safe mode only, and my best guess that it's my HDD which is not in good shape, but that doesn't explain how it works fine under safe mode, it supposed to crash also, right ?

I have :

Pentium 4 3.00 GHz
Nvidia 8400GS

OS : Windows 7 Ultimate 64bit
Sorry for my bad English

A:BSOD in normal and clean boot, runs fine in safe mode

Here is my SF_Diagnostic_Tool results

Read other 5 answers

A few days ago, my wife's computer started running slower and slower, until finally she woke up and saw a black screen that said ""can't come out of hibernation mode - fatal error".  
I've tried running the various performance tools, but the computer sputters, chokes and dies before the performance tools screen can even open. 
I've cleared temp files, verified there's enough space on the HD, run adaware by Lavasoft, checked to make sure the ram chips are in good shape and plugged in, I've even visually verified that the CPU didn't melt. 
I'm not 100% sure, but it seems like there is a connection between the computer slowing down and when it tries to connect to the WLAN. but that may just be coincidence. 
And when i run it in safe mode, none of the above happens. 

A:Win7.Dell XPS8300Desk-Runs VERY slowly in Normal Mode, but perfectly in safe

Since this doesn't occur in Safe Mode there is a good chance that this is caused by either a third-party service or startup item.  In order to determine if this is the case, I would suggest performing a Clean Boot. 
After you have finished Part C you will reboot your computer.  If the problem doesn't occur you most likely have either a service or startup item causing this.  The process of elimination should find the problem service or startup item.

***This is a diagnotic tool for Windows Vista, Windows 7, and Windows 8.  This will not repair your computer, but it may point to where the problem lies so that a repair can be made.***
Warning:  Disabling items in Services or Startup may leave your anitivius disabled until the process is ended.  For this reason I would suggest that you perform this process off line.
Part A
(1)  Click on the Start orb, then type msconfig.exe in the Search programs and files box.  
(2)  When msconfig is seen in the pane above the search box and under Programs, right click on it, then click on Run as administrator.

If you are prompted for an administrator password or for confirmation, you should enter the password or provide confirmation. 
Part B
(1)  Click on the General tab.   
(2)  Click the Selective startup option. 
(3)  Remove the check mark in the Load startup items &#... Read more

Read other 3 answers

Hello, I've found a trojan on my pc, and normally do not have to much trouble getting rid of these things. This one has me lost though. When I to head into safe mode to begin removing the problem files the pc just reboots. It will boot normally into windows. So after a few days I'm back to where i started. I can't find the root, I cannot remove it either.

Here is the hijack this scan:

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 8:37:16 PM, on 4/2/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\UnHackMe\hackmon.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Alwil Software\Avast4\ashMai... Read more

A:Trojan found, Windows reboots when entering safe mode

Read other 7 answers

Hello ladies and gents , im having a problem with my emachine T1120. It starts up and goes through the welcome screen then goes to bios settings , I click on "start windows normally" and enter it and the machine runs right back to the original bios screen , cant figure, unplugged and pressed the power button several times plugged in same result, why? I added no new hardware or software just turned it on and wa la

A:Win.xp emachine starts and runs safe mode, safe mode with networking

hello and welcome to BleepingComputer,,
     this is reminiscent of BIOS settings that need to be reset to default. you can do this by using that option in BIOS. do you see the option there? 
if this pattern exists after BIOS reset, then there are other XP level options to try like console command /sfc scannow and chkdsk /r
 not to long ago, i was dealing with a PC that was doing this same thing, and it was the hard drive (SATA) protocol setting in BIOS, it had to be set to IDE.
one more thing, this could be blue screen error that isn't halting, just looping boot. is there an option at the boot screen (the one with the safe mode options) about halting on errors?

Read other 3 answers

Hi,My Computer which has Win Xp Sp3 is behaving like it is in safe mode , eventhough it is in normal mode .I noticed this because ,1. Avira Antivir Guard and Update cannot be launched bcz Scheduler is not running.2 . I tried to start scheduler ( under services.msc ) , but can't start it bcz of error 1084 ( safe mode situation ) .3 . I can't use Windows Update , bcz of error Error number: 0x8007043C ( same safe mode condition )4 . I ensured that BITS was set to automatic , but it can't run bcz of 1084 error.I have scanned with Malwarebytes, Spybot S&D , SuperAnti Spyware ( in real safe mode) - No DetectionHere is the dds log ,DDS (Ver_09-09-24.01) - NTFSx86 NETWORK Run by Administrator at 16:45:23.03 on Mon 09/28/2009Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_12Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.510.112 [GMT 5.5:30]AV: ZoneAlarm Security Suite Antivirus *On-access scanning disabled* (Outdated) {5D467B10-818C-4CAB-9FF7-6893B5B8F3CF}AV: AntiVir Desktop *On-access scanning enabled* (Outdated) {AD166499-45F9-482A-A743-FDD3350758C7}FW: ZoneAlarm Security Suite Firewall *enabled* {829BDA32-94B3-44F4-8446-F8FCFF809F8B}============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcsC:\WINDOWS\system32\ZoneLabs\vsmon.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Avira\AntiVir Desktop�... Read more

A:Safe Mode Error, WinXpSp3 behaves like it is in safe mode even in normal mode

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 2 answers

Hi! I ran into a virus today that acts a a fake spyware called "win 7 home security 2011". It runs under the process erg.exe. I thought ok, I'll go into safe mode and remove with malware bytes, but in safemode the virus still executes. Anytime I try to run one of the spyware removals, erg.exe runs instead and the whole fake anti virus thing pops up.

I read a thread from another site with someone who seemed to have a similar problem, and running rkill worked for him, so I downloaded it (from my desktop computer which im using now) and transferred it to my laptop through USB. rkill.exe did not work at all...erg.exe popped up instead. rkill.com *32 ran, but nothing was removed. malware bytes, spybot etc... still do not run.

What more can I do? I really do not want to reinstall windows completely. I am at the end of my semester and have a lot of work and notes saved there. Undecided

Thanks for any help Grin

I am running windows 7
also, regedit and msconfig do not work in safe or regular mode either...erg.exe *32 runs instead
firefox and iexplorer do not work either, virus pops for those programs as well

Read other answers

Just recently started to get BSOD in normal mode, error was registry error. Systems run fine in safe and safe w/networking. I have run chkdsk, anti-malware, CCleaner to fix registry issues, and have not detected any virus. I am lost. Can you help me?
Thank you

Read other answers

I have the same virus...

It runs in safe mode, but I have found no entries under the normal registry locations that tell it to run under safe boot.

I have found a few entries in the registry for the executable file, but even removing them, and deleting the actual executable file using a boot disk, it still pops up upon reboot.

I'm at the point where the only option left seems to be format reinstall.

I've never come across a virus this pervasive before.

A:Huge Virus, still runs in Safe Mode

Welcome aboard Playing with registry will only make things worse.Download Security Check from HERE, and save it to your Desktop. * Double-click SecurityCheck.exe * Follow the onscreen instructions inside of the black box. * A Notepad document should open automatically called checkup.txt; please post the contents of that document.=============================================================================Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList last 10 Event Viewer logList Installed ProgramsList Users, Partitions and Memory sizeClick Go and post the result.=============================================================================Download Malwarebytes' Anti-Malware (aka MBAM): http://www.malwarebytes.org/products/malwarebytes_free to your desktop. * Double-click mbam-setup.exe and follow the prompts to install the program. * At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish. * If an update is found, it will download and install the latest version. * Once the program has loaded, select Perform quick scan, then click Scan. * When the scan is complete, click OK, then Show Results to view the results. * Be sure that everything is checked, and click Remove Selected. * When completed, a log will open in Notepad. * Post the log b... Read more

Read other 3 answers

My friend currently has a virus, she can't post on here because her keyboard isn't working. A process called 1085553197:3536145343.exe is running, even in Safe Mode. And she can't end it. Malware Bytes also is not running, it stops scanning after 5 seconds and closes. It's one of those Fake Anti Viruses. Any help is appreciated.

A:Huge Virus, still runs in Safe Mode

Welcome aboard Please download and run the below tool named Rkill (courtesy of BleepingComputer.com) which may help allow other programs to run. There are 4 different versions. If one of them won't run then download and try to run the other one. Vista and Win7 users need to right click Rkill and choose Run as AdministratorYou only need to get one of these to run, not all of them. You may get warnings from your antivirus about this tool, ignore them or shutdown your antivirus.* Rkill.com* Rkill.scr* Rkill.exe* Double-click on the Rkill desktop icon to run the tool.* If using Vista or Windows 7 right-click on it and choose Run As Administrator.* A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.* If not, delete the file, then download and use the one provided in Link 2.* If it does not work, repeat the process and attempt to use one of the remaining links until the tool runs.* Do not reboot until instructed.* If the tool does not run from any of the links provided, please let me know.Try to run MBAM right away.

Read other 7 answers

OK ... Not sure what caused this but ....

When I got home, computer was in blue screen. Unplugged and rebooted. Hung at Starting Windows. Unplugged again and rebooted. Selected user and continued on. Hung after desktop image was downloaded and normal desktop was presented. If I moved the cursor to the task bar, got hour glass. Could not get task manager to appear and could not start any program.

Booted in safe mode with networking. Opened firefox in safe mode and it was really funky. Could not get to techguy.org. Showed some porn. Basically, it was highjacked.

Ran hijack this (probably an older version) which I then copied onto flash drive and copied onto my laptop for posting here.

Need help, thought I'm concerned that I won't be able to download any programs you suggest onto the affected computer.

Logfile of HijackThis v1.99.1
Scan saved at 9:42:33 PM, on 12/23/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://finance.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = h... Read more

A:Virus - browser issues in safe mode/hangs in normal mode

Read other 7 answers

Hi All,

Been having this problem since yesterday. Whenever I start up windows, it freezes after a couple of minutes. Tried going into safe mode to run virus scan (Avira and Malwarebytes) but both freeze halfway through scanning and I have to do a hard reset. No idea at all what is wrong with it.

Also find that when I try to open Adobe PDF Reader, it shows this message when I am in normal mode. 'The windows installer service could not be accessed. This can occur if you are running in safe mode, or if the windows installer is not correctly installed.' Right after that, it freezes. Not sure if that's relevant.
Please help me! Thanks a lot in advance!

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:22:47 AM, on 2/4/2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Pro... Read more

A:Computer freezes in normal mode after a few minutes and then in safe mode when running virus scans

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you are unable to create a log because your computer cannot start up successfully please provide detailed information about the Windows version you are using: What we in particular need to know is version, edition and if it is a 32bit or a 64bit system. [/b]If you are unsure about any of these caracteristics, just let us know and we'll help you figuring it out. Please also tell us if you have your Windows CD/DVD handy.Please include a clear description of the problems you're having, along with any steps you may have performed so far.Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.Even if you have already provided information about y... Read more

Read other 3 answers

Windows just downloaded an update to my ASUS x83V laptop and now I can't get it to boot up. I've tried booting in normal mode, last successful mode, safe mode, safe mode with command prompt and nothing works.

If trying to boot in safe mode it gets stuck on crcdisk.sys. When trying to boot in any mode it eventually hits the blue screen with a STOP error of 0x0000001E. I have also gotten 0x0000007E and 0x00000024.

I am positive it's the latest Windows Update that caused this because my computer at work, which also runs on Vista and is also an ASUS, had an update yesterday. When I came into work this morning and tried to start up it was unable to and did a start up repair. That didn't work but it gave me a system restore option which did work.

Unfortunately my ASUS laptop does not prompt me to do a repair nor a system restore. The recovery disk I have that came with the laptop only allows me to do a restore which erases everything on my HD.

I'm only somewhat computer savvy; better at working with them than fixing them so please try to put things in layman's terms. Thank you!

Read other answers

Can't boot into Normal/Safe Mode with Networking, only safe mode...
Good Evening,I could do with some pointers on resolving an issue. I can only boot into windows in safe mode in Windows 10. Normal mode and safe mode with networking doesn't work. The problem occurred after a windows update. I have removed the latest updates that were installed and cleared any pending ones but it still won't boot properly. I have also run the troubleshooter and tried to recovery to an earlier date which also doesn't work.The laptop is a HP ENVY 17 notebook. At boot it just gets to the HP logo with the circular loading icon and no further and can only boot it into safe mode. Can anyone recommend the next steps? I have also tried the following;stopping startup items
uninstalling hardware drivers
removing recent software
running troubleshooters at boot
sfc scan
diagnostic/selective startups with minimal services running
Would the fact that I cant boot into Safe Mode with Networking imply its a network driver related issue?Bit of a dead end really, any help would be much appreciatedKind regardsTrevor

A:Can't boot into Normal/Safe Mode with Networking, only safe mode...

It's uncertain what the problem is - although a networking problem does sound likely.
Start with trying a clean boot:
Perform a Clean Boot:  http://www.thewindowsclub.com/what-is-clean-boot-state-in-windows
If that stops the problem, then re-enable things a few at a time until you figure out what's causing it.
Then uninstall the problem program (from Start...Settings...Apps...Apps & Features - if you don't find it there, check the right sidebar for Programs and Features and see if you can remove it from there).
Let us know what happens there and we'll move on from there if needed.

Read other 1 answers

Yesterday I ran Malware Bytes and McAfee because I started to get random pop-ups when I normally do not. Both programs showed no problems. I also cleaned the disk space, which had not been done in a while. This morning, all icons were missing from the screen--it was just a blank black screen, so I shut down by pressing the power button. When I turned the laptop back on and I try to boot in Normal and Safe mode, it will not do so. With Normal mode, it goes to a blank black screen and does not even go to the "Windows Loading" screen. For Safe mode, it begins to list a bunch of drivers, etc, but it seems to get stuck with only half the screen filled with the list and will not move past that point.

I wish I could install HijackThis and run it as it has worked for me in the past, but I cannot even get my laptop to load.


Read other answers

Can anyone help me here? My laptop locks up especially when I try running anti-virus. Malwarebytes and Spybot run clean in Safe Mode. I think a virus has taken over. What steps can I take next?

A:CPU locks up but runs fine in Safe Mode - Virus?

Hello my name is Sempai and welcome to Bleeping Computer.*We apologize for the delay. Forum have been busy.*I want you to understand that I'm still a trainee here. I will be working with my Coach who will approve all my instructions before posting them to you, so there's a possibility to have some delays in my responses. But the good part is, there are two people reviewing your problem instead of one.*It is important not to make any further changes or run any other tools unless instructed to. This may hinder the cleaning process of your machine.*You must reply within 5 days otherwise this topic will be closed.1. Let's do a scan with OTS.Download OTS (by Oldtimer) to your Desktop.Close all other programs and don't do anything while the scan is in progress because it may freeze.Double-click on OTS.exe then click Run to start the program. (Do not change any settings).Notes:1. If you are using Windows Vista, please right-click on it and select run as administrator.2. If you are using a Windows 64bit machine, please make sure the checkbox next to 64Bit box is checked.Click the Run Scan button to start the scan.When the scan is complete, It will produce a report and a notepad will open.Click Format tab in the notepad and make sure that Wordwrap is uncheck.Post the entire content of the text file when you reply.Note: If the text file is too big to post, you can attach it instead. The log is located on your desktop as OTS.txt2. We Need to check for Rootki... Read more

Read other 2 answers

Posting in this forum as i felt this is appropriate

I get blank screen after the system enters Windows XP option.

This happened after the system got affected with a Trojan. I got message that a Trojan has been detected and system needs to restart. When I restarted, the system did not start up.

Following is the sequence :
Systems starts.
a.I press power buton & Wierd sound (light but wierd) comes
b.Dell logo appears
c will get two option
1. Windows XP recovery conole
2. Windows XP professional

When it enters Windows XP professional, nothing comes up, only black screen.
Windows XP recovery console works fine

Same problem happens for the following

1 Safe mode
2 The best last know configuration

I do not have the Windows XP CD as I missed it.

I guess some virus is causiong this problem. Any inputs on this.

A:Not able to logon Windows XP in normal or safe mode, may be virus

Have you checked out our Virus and Malware Removal forum? If not read the Updated 8 Step sticky and go from there. If you have issues with any of the steps let them know on that forum. You could still be infected.

Read other 2 answers

Dear all,
this is my first post here.
I am desperate for some help, as Security Tool has totally taken over my life since yesterday.

I am running XP professional
I got the Virus yesterday and used various online suggestions on how to remove it (stop process, delete exe and folder
delete regisrty etc.)
then XP did not start anymore
I started in Safe mode, ran Avast and had Avast delete a bunch of infected files
Still no regular start anymore
I then downloaded Spydoctor, which found a few more files. I deleted those manually.

Still cannot start XP other than in safe mode.
Tried to create a new user profile, but it is still stuck.
Cannot do system restore, even if I choose a very old restore point from 2008

I tried to reinstall XP booting from CD, but that did not work either.

I did manage to run DDS, but when I tried the root repeal scan the computer just froze so I cannot post a log.

I hope to receive some help here.
I did do a search and saw a few other posts, but I am not sure what to do.
So I figured before I make things worse, I ask for help.

Any feedback is appreciated.

Read other answers

I run MS Security Essentials and AVG - AVG expired a month ago and I had been debating whether to change to another supplier but before I could do so last week I got hit by the WindowsRecovery virus. I thought I had cleared it out manually, but had been having some problems with access to IE so opened in safe mode to download Malwarebytes. At once a new virus opened, XP Anti Spyware with the usual dire warnings, and has blocked access to Malwarebytes website. Cannot now run in even safe mode as this new virus is rampaging about inside safe mode. It has presumably infiltrated SE in some way. I have no idea how it got in as I have not downloaded anything in weeks. But now I cannot even run in safe mode or access malwarebytes.

I assume the only way forward is to download an anti virus package from this pc (not yet infected) onto a usb stick and install it from there. Is this the way forward and which one should I chose. I am running XP Pro by the way.

A:Virus runs in safe mode and blocks access to Malwarebytes

Please see the self-help guide: Remove XP Anti-Spyware 2011, Vista Security 2011, and Win 7 Internet Security 2011. Be sure to follow the instructions exactly as written using FixNCR.reg, RKill and then an immediate scan by Malwarebytes.I run MS Security Essentials and AVG - AVG expired a month ago and I had been debating whether to change to another supplierUsing more than one anti-virus program is not advisable. Why? The primary concern with doing so is due to conflicts that can arise when they are running in real-time mode simultaneously and issues with Windows resource management. Even if one of them is disabled for use as a stand-alone scanner, it can affect the other and cause conflicts. Anti-virus software components insert themselves into the operating systems core and using more than one can cause instability, crash your computer, slow performance and waste system resources. When actively running in the background while connected to the Internet, they both may try to update their definition databases at the same time. As the programs compete for resources required to download the necessary files this often can result in sluggish system performance or unresponsive behavior. Each anti-virus may interpret the activity of the other as suspicious behavior and there is a greater chance of them alerting you to a "False Positive". If one finds a virus or a suspicious file and then the other also finds the same, both programs will be competing over exclusive rights ... Read more

Read other 7 answers

Our works PC was infected with a trojan virus, I'm sorry but I'm not able to remember the name. This came to light when we were unable to do a windows update and found various services turned off (Defender/Firewall etc.) We also had several popups appearing. Only when my boss asked me to investigate did the true nature of the horrors come to light. Sadly this had been left far too long in this state.
After managing to get Security Essentials to run it identified a trojan. Removing option didn't seem to work so on "Offline" full scan was performed. Upon completion the PC now refuses to boot in either Safe Mode or Normally.
Following a Google search I found a similar thread and got as far as running FRST.exe before realising that any fix would be specific to that problem
I have run both FRST.exe and DDS.com in repair mode command prompt and although I may have jumped the gun I attach both log files 

A:PC unable to boot after virus removal in either normal or safe mode

Hi there,the "offline" scan seems to have removed a bootkit but it wasn't thorough enough to delete all parts of it. There is still a remnant present that renders a machine unbootable. Let's try to fix this.Can you boot into normal mode again after the following fix with FRST in Recovery Environment?Please download this attached
 fixlist.txt   424bytes
  6 downloads and save it on the same flash drive as FRST.Plug in the flash drive to the infected computer, enter the System Recovery Options and open FRST.Press the Fix button.When finished, a log file (Fixlog.txt) is saved on the flash drive.Please copy and paste its contents in your next reply.

Read other 23 answers

A few days ago, my computer started running slowly and tried to do AVG scan, which would not run, so tried windows live one care which ran and found 2 viruses it removed. I had to turn off the power to pc due to a t storm shortly after that and windows would boot, but after log on I could not see the desk top, only a black screen and the error messages lsass.exe and services.exe application errors. Safe mode did the same. I then did a repair installation from a borrowed winxp cd since mine was lost. I did originally get to my desktop after the repair,and recovered all my data, but then logged off. Now I can not log back on, it will go to the log on screen and then say this copy of windows must be activated and do I wish to do it now. I click yes and am back to the same black screen with cursor. I can start up in safe mode now, and tried to run AVG again, this time it ran, but all the files are "locked" and it says not scanned. What can I do now???? Any help appreciated.

A:black screen in safe mode and normal after virus removal

Still need help. Hoping someone will see this. Thanks. :)

Read other 19 answers

Hello. I've got a terrible problem with my Windows xp, which is that it loads up a Black screen in windows normal mode, as well as in safe mode. Only the mouse cursor is visible, and movable on the black screen, in both modes. This problem came up after I had run several anti-Virus and Spyware programs, such as TrojenHunter and AVG Spyware, and thereafter restarted my Laptop, to rid the system of the Damned Backdoor.Haxdoor virus. I don't know, but I suspect these programs may have deleted some system files when they were cleaning up the system. So basically, I can't even boot up in Safemode to resolve the problem, well I can, but there is nothing I can do because of the Black screen.
Please let me know of what I can do the make the system operational again. I don't want to loose important data on my computer.



A:[SOLVED] Black Screen Problem in Normal AND Safe Mode after Virus

When you load up into windows (safe mode or otherwise) press Ctrl + Shift + Esc to bring up in the Task Manager.

From there go to File > New Task (Run...) > in the box that loads type
See if anything loads up, or if it gives you an error message let us know about it.

Read other 17 answers

Hello,I got a virus yesterday that pretty much completely crippled my system. I don't know what the virus is called, it happened so fast that there was nothing I could do. I have Windows Security Essentials running, and MalwareBytes Anti-Malware. It started when I realized that all my google searches were going to some "insurance puma" website, so I knew I had a google redirect virus. I got a few warnings from MalwareBytes so I ran a full scan and thought everything was cleaned off, but then I randomly got like 30 popups all saying something like "write failure" and one that said "HDD write failure" and that it was corrupted or something ridiculous like that. It happens everything I bring up my OS. Also, a BSOD comes up that says IRQL_NOT_LESS_OR_EQUAL. So I installed Spyware Doctor by PC Tools and ran scans, which got rid of a lot of things but I am still having problems. Also now, when I run a scan in Safe Mode, a BSOD comes up, but no IRQL line. Nothing is listed at all. I ran HijackThis to see if anything can be determined from that, but this is from safe mode, I don't know if that changes things. Also, the virus hid all of my files and folders. I will try to run DDR and GMER in normal operations, if the virus allows it.Logfile of Trend Micro HijackThis v2.0.4Scan saved at 2:49:28 PM, on 2/12/2012Platform: Windows 7 SP1 (WinNT 6.00.3505)MSIE: Internet Explorer v8.00 (8.00.7601.17514)Boot mode: Safe mode with network supportRunning pro... Read more

A:BSOD in Safe Mode and Normal Operations, Google Redirect Virus

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps.===Please review the note I left on your first post.Please post the DDS log for my review.

Read other 2 answers

Microsoft Windows XP Professional Version 2002 Service Pack 2Dell Latitude D520 Genuine Intel® CPU T2300 @ 1.66GHzWhen I try to boot into Safe Mode (restart, f8), the drivers load all the way up to Mup.sys before freezing on a blue screen. On the blue screen is a question mark that is preceded by what looks like an L, except the L is flipped horizontally and rotated 90 degrees counter-clockwise. This problem existed before I did everything else in this post. I know because I tried to fix things in Safe Mode first.I should note that all of the below began and usually occurs while browsing the internet in Firefox 3.5.6.First, Security Center Alert popups informed me that I had a virus. They recommended that I download a specific anti-malware software that I can't recall the name of. This seemed to be a virus in and of itself. I ran a Quick Scan with Malwarebytes' Anti-Malware 1.43 (followed by a Full Scan that detected 0 infections):Malwarebytes' Anti-Malware 1.43Database version: 3460Windows 5.1.2600 Service Pack 2Internet Explorer 6.0.2900.218012/31/2009 12:18:34 AMmbam-log-2009-12-31 (00-18-34).txtScan type: Quick ScanObjects scanned: 149076Time elapsed: 16 minute(s), 39 second(s)Memory Processes Infected: 0Memory Modules Infected: 0Registry Keys Infected: 2Registry Values Infected: 0Registry Data Items Infected: 1Folders Infected: 1Files Infected: 14Memory Processes Infected:(No malicious items detected)Memory Modules Infected:(No malicious items detected)Re... Read more

A:BSOD in Safe Mode, Hidden Virus, Google Redirects

Hi again,

My mom needs her laptop when she goes out of town on Friday because she works online. I'm hoping I can get it fixed for her before she leaves. Can anyone help?


Read other 4 answers


Having a bout with a nasty virus(es). Recently wiped out/clean installed XP, only to have the virus still eating away my computer.

Running XP Prof. SP3, and running updated Microsoft Security Essentials.

MSE continues to find infections and "cleans" them, but the problems keep coming back after every reboot.

Browser redirecting, sometimes not working at all. Cannot boot in safe mode, as it gets stuck on the driver load list.

I am not sure where to go from here, but any help is appreciated. I know you guys are quite busy 24/7!!

-Scott B

A:Hardy virus with no Safe Mode, HTML redirects, Browser fails, etc.

Friendly bump!

Read other 10 answers

Word in the street is this is the place to come when it seems all hope is lost. I pray you can help rid me of my demons! What started 2-3 months ago as a very occasional browser redirect in Firefox, then spread to Explorer and Chrome has sought to reek all kinds of havoc. The browser redirect problem got completely out of control about 3 weeks ago (new tabs and windows open, links completely unresponsive, etc). Two weeks ago I fired up the box and some fake antivirus software completely ruled. Everything I tried to start or open was denied due to "a potential threat" or "infection." CntlAltDel didn't work at all. Explorer would open itself and visit Pill/Porn sites. I tried to restart in safemode and the system just BSODs and cycles. I disconnected the internet and shut it down.

Today I opened up the case and pulled the power from 2 slave drives I use to hold images and fired it up. No sign of the fake antivirus, but I get the feeling it's about to creep back. The browser still redirects like mad. MalwareBytes shows nothing wrong. rootrepeal found something called z00clicker.

System is Win XP Pro, SP3, newer hardware. So please help me out, if you can I promise to be better at making restore points and back-ups, and of actually using my antivirus software! Tell me what you need.

Read other answers

Yesterday I believe I got a virus (from a file I downloaded I would guess - it happened right after I ran the file - a music instrument synthesizer called "Waves"). Pretty much right away, the computer shut off and then would only run for about 10 seconds in regular mode, but works in safe mode with networking.

EDIT: Oh, the first thing I did, was uninstall what I thought was the virus-causing program and then did a system restore for one week prior. This did not help with the virus at all.

Other symptoms are that when I click on my search results they are sometimes redirected to bogus pages (multiple search engines, at least bing and google). I would say, other than my computer not working in regular mode, this is the only symptom.

The first thing I noticed (after my best guess of when infection began) was that a Microsoft file called ctfmon.exe was running, so I did some research and found that this file can be infected, so I took care of deleting that from my PC as well as the registry (because I never use it anyway). So that is no longer running, but that did not take care of the problem, the virus still persists. I have run Trend Micro House Call as well as Spybot, and neither took care of the issue. When I try to install Norton, the installer opens and closes repeatedly - I don't know if this is a symptom of the virus, or because I am in safe mode.

Does anyone have any idea what I can do next to identify/get rid of this virus/trojan? Any help would be ... Read more

A:Trying to get rid of virus which redirects search links & won't let me start computer in non-safe mode

Hello and welcome.Please run these ,post the logs and let me know.Please download the TDSS Rootkit Removing Tool (TDSSKiller.exe) and save it to your Desktop. <-Important!!!Be sure to download TDSSKiller.exe (v2.4.0.0) from Kaspersky's website and not TDSSKiller.zip which appears to be an older version of the tool.Double-click on TDSSKiller.exe to run the tool for known TDSS variants.
Vista/Windows 7 users right-click and select Run As Administrator.If TDSSKiller does not run, try renaming it. To do this, right-click on TDSSKiller.exe, select Rename and give it a random name with the .com file extension (i.e. 123abc.com). If you do not see the file extension, please refer to How to change the file extension.Click the Start Scan button.Do not use the computer during the scanIf the scan completes with nothing found, click Close to exit.If malicious objects are found, they will show in the Scan results - Select action for found objects and offer three options.Ensure Cure (default) is selected, then click Continue > Reboot now to finish the cleaning process.A log file named TDSSKiller_version_date_time_log.txt (i.e. TDSSKiller. will be created and saved to the root directory (usually Local Disk C:).Copy and paste the contents of that file in your next reply.Next run MBAM (MalwareBytes):Please download Malwarebytes Anti-Malware and save it to your desktop.Download Link 1Download Link 2MBAM may "make chan... Read more

Read other 1 answers

I recently attempted to clean my brother's computer after he aquired a virus from the torrent file program he uses. Regardless, I cleaned a trojan and a backdoor from his system from safe mode. I can not boot in normal mode. Everytime i try the system gets hung up at the windows loading screen then the screen turns black and sits there. I have to hard reboot. I ahve used a repar CD and i have come across an error 0x800700b7, i have also recived this when i tried to work around this problem "identifier {9dea862c-5cdd-4e70-acc1-f32b344d4795}"

OS= Win 7

A:System will only start in Safe mode, Clean virus in safe mode

You can spend a lot of time trying to fix the boot problem and clean the virus from the computer, or you can nuke it and reinstall Windows. I wouldn't bother trying to fix it, personally - I'd back up what I could and then I'd install Windows again.

Read other 9 answers

I'm sorry but I do not know the name(s) of what I have. My virus started with strange, unrelated redirects when searching on Google. Then random popups even with popup blocker enabled. It's done something to make Spybot not work. I tried to start the computer in safe mode several times, and got nothing but a blue screen each time. Downloaded and ran Malwarebytes and it found and removed 8 items - names included popcaploader and vundo. Search engine redirects and popups still continued though. Twice today I followed instructions from this site's preparation guide, all was fine until I tried to save the GMER file after a 2+ hour scan each time. At that point the computer locked up each time. I was unable to access task manager, or anything at all and could not even shut down without unplugging the computer.DSS Log:DDS (Ver_09-12-01.01) - NTFSx86 Run by Teri R at 21:58:52.45 on Tue 02/09/2010Internet Explorer: 7.0.5730.13Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.3070.2613 [GMT -7:00]============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcssvchost.exesvchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\RTHDCPL.EXEC:\Program Files\Common Files\InstallShield\UpdateService\issch.exeC:\Program Files\Common Files\Roxio Shared\9.0\Shar... Read more

A:Search Engine Redirects, Popups, Safe Mode Disabled, Unknown virus

I forgot to mention that the logs above were re-generated new after having to reboot, and that before doing anything I made Spybot unresident.

Read other 30 answers

My pc is dual boot Vista64/WinXP with a HD controller card & 4 HDs. I use ESET NOD32 in both OS. Vista is infected but the XP not.
I can boot Vista into any safe-mode without the virus appearing, I have run a full scans using ESET, Malwarebytes, HitmanPro, TDSSKiller & used Combofix (with ESET disabled) but found nothing.
I have now disabled the internet connection on Vista by uninstalling the driver for the wireless adapter.
I can't run DDS except in safemode but I'm guessing that won't help if the virus isn't active when DDS is run?
XP can 'see' the drive that Vista is installed on, if that's any use.
Any assistance would be hugely appreciated.

A:UK PCeU virus present but no malware found in Safe Mode

Hello Gordy I would like to welcome you to the Malware Removal section of the forum.Around here they call me Gringo and I will be glad to help you with your malware problems.Very Important --> Please read this post completely, I have spent my time to put together somethings for you to keep in mind while I am helping you to make things go easier, faster and smoother for both of us!Please do not run any tools unless instructed to do so.We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", t... Read more

Read other 24 answers

I downloaded a file yesterday and was alerted by MSE that it was a threat. I deemed it a false positive after scanning it with both malwarebytes and superantispyware and reading the comments of the download.
Everything was fine until today when out of the blue the computer restarts and has a problem rebooting, giving me a window about terminating a thread, which I did, not thinking too much about it. After this I got a BSOD and everything went wrong. Booting the pc normally, I get a gray screen that sometimes goes back to my normal desktop which is really slow and susceptible to freezes. I managed to get an instance that ran well enough to do full scans, which turned up showing a virus in the file I downloaded. MSE however couldn't delete it to I took matters into my own hands and manually found every instance of the file and deleting it. This didn't fix anything though and since then I've been working in safe mode (which sometimes hiccups for long periods of time), scanning with everything I've got, including TDSSkiller, which found things but didn't help the problems.
I am currently trying msconfig with diagnostic startup.

Really need help and some hard truths on how this can play out :/

A:Slow/freezes even in safe mode, found obfuscator virus

TomanMT welcome to SevenForums

Boot into Safe Mode with Networking

On or
Click on esetsmartinstaller_enu.exe to download the ESET Smart Installer. Save it to your desktop.
Right click on choose on your desktop
Check YES, I accept the Terms of Use.
Click the Start button.
Accept any security warnings from your browser.
Under scan settings, check "Scan Archives" and "Remove found threats"
Click Advanced settings and select the following:
? Scan potentially unwanted applications
? Scan for potentially unsafe applications
? Enable Anti-Stealth technology
ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
When the scan completes, click List Threats
Click Export, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
Click the Back button.
Click the Finish button.

Read other 9 answers

Hi. My emachines WinXP desktop is acting up, extremely slow (approx 5 mins to execute a command) Celeron 330 chip, 120gb HD with about 80gb free space, 256mb RAM (I know, buy more....). I've installed AdAware, AVG Anti-Spyware, unable to install Spybot S&D (gives an "administrator policies prevent this installation" warning, even though I'm installing while logged on as Admin), all that can be run have been run in Safe Mode and reveal moderate tracking cookies (around 100 per scan). At one time Norton AV used to find a w32 trojan regularly, but no other AV program ever did (including McAfee Stinger, if it's supposed to) and I have no idea whether it's still lurking about. The following HJT log was created in normal boot mode (I usually have about 5 mins before the system slows to a crawl).*************************Logfile of HijackThis v1.99.1Scan saved at 12:12:56 AM, on 7/22/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\PC Tools Firewall Plus\FWService.exeC:\Program Files\Windows Defender\MsMpEng.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.e... Read more

A:Winxp Very Slow At Normal Boot But Normal In Safe Mode

Welcome to the BleepingComputer HijackThis Logs and Analysis forum shootr2 My name is Richie and i'll be helping you to fix your problems.It appears you've no virus protection installed.Download\install one of the following freeware options from the choice below.Once installed update its definitions and then run a full system virus scan.AVG7 Free Edition Antivirus:http://free.grisoft.com/softw/70free/setup...ree_446a965.exeAvast! 4 Home Edition: http://files.avast.com/iavs4pro/setupeng.exeAvira AntiVir Personal Edition Classic http://www.free-av.com/----------------------------------------------Please download Combofix and save to your desktop:Note: It is important that it is saved directly to your desktop Close any open browsers. Double click on combofix.exe and follow the prompts. When it's finished it will produce a log. Post the entire contents of C:\ComboFix.txt into your next reply. Note: Do not mouseclick combofix's window while it's running. That may cause the program to freeze/hang. Also post a fresh Hijackthis log.

Read other 1 answers

First time poster and any help is greatly appreciated.

A few days ago my computer (HP Pavilion a1040n - 630 Pentium 4 w/ 1 Gig RAM and running Windows XP Media Center Edition)started to freeze up a few minutes after booting up into Windows successfully. Everything became "Not Responding", even the Task Manager became "Not Responding" and I had to do a hard shut down. I can boot into Safe Mode w/ Networking and I have run all the virus and spyware scans I have... Avast!(Free Antivirus), AVG (Free 9.0), Malwarebyte's (Anti Malware) and Super Antispyware (all with current updated versions) with no findings of any malware or viruses. The Super Antispyware did find its usually listing of cookies but after deleting them and rebooting, I still had the same problem, no difference. I then used MSconfig to stop 2 applications lauching at startup that I had found on this forum have no real neccesary reason to be launched at startup and had caused other users to have issues with freezing... "HP Image Monitoring" and "Updates for HP". Still no change in the problem after reboot.

I have turned off my "CD Emulator", have ran the DDS report and will post it below and even run a "Hijack This" report (but don't know what I'm looking at). I have tried to run the "gmec" program twice now but it seems to freeze up before it completes... the first time it said "out of memory to complete task" an... Read more

A:Computer Freezes after booting, no virus found but works in safe mode.

Ok, I think I solved the problem. I seems there was a conflict with a new upgrade from Zone Alarm. I deleted the program and rebooted... so far no issues after several reboots.

Read other 2 answers