Over 1 million tech questions and answers.

Endless reboot, fake security warning, safe mode doesnt work

Q: Endless reboot, fake security warning, safe mode doesnt work

Hi everyone

I am having trouble with one of our laptops. I was running a few virus scans the other day as I realized it there was Google Redirections, fake virus security centers, and security center pop ups in the system tray. A fake virus center kept popping up as a program on the computer, and the internet would not work when this was open.

I tried to run more scans but nothing would open, no programs, no task manager, etc. in order to fix this. Nothing was working, so I shut off the computer. This was a big mistake as when I went to turn it on, it will not boot. It goes into an endless reboot state and flashes a blue screen for a second, not long enough for me to read, before it goes back into rebooting.

None of the safe mode options work, and Last Known Configuration option does not work, the computer just endlessly reboots and will not start up. I really need to get this fixed, as we purchased a warranty for the laptop, but they will not work at all.
I have tried everything and nothing seems to be working, the computer will just not boot up.

I burned an ISO of Puppy Linux after reading about this online and I could boot to that from the CD, from there I could see everything was still intact on my hard drive but it still will not boot windows. I thought about getting an external hard drive enclosure to take the stuff from that drive and put it onto another computer until I can get this fixed.

I am running out of things to try and hope someone can help. thank you.

RELEVANCY SCORE 200
Preferred Solution: Endless reboot, fake security warning, safe mode doesnt work

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

A: Endless reboot, fake security warning, safe mode doesnt work

Could you please tell us what your OS is, main antivirus program , and exactly which scans you were running (have tried to run).That might give appropriate information to know what to suggest for you

Read other 16 answers
RELEVANCY SCORE 107.2

Hi I had Uverse (new ISP) installed, and 5 mins after the tech left my screen went blank, and i've not been able to log back into the computer.

I've had a multitude of error messages, the first being: \winnt\system32\config\system is corrupted. Also the blue screen of death. I can't get it to start up in safe mode, and it when i ask it to start up in last good config the screen just goes black and the pc appears to just lock up.

The last codes I got frm the BSOD were as follows:

0xC0000005 0x80849902 0xF8988D48 0x00000000

I've also tried using the XP OS disk, and when i choose R i get the blue screen of death.

Sometimes it doesn't start up at all and i can't even get it to respond to PF8.

Any other suggestions? Appreciate any help!

by the way, the tech came back and said that no drivers were added, and I have also disconnected the new modem and my external hard drive but it didn't help
 

A:PC will not reboot, safe mode doesnt work

Read other 7 answers
RELEVANCY SCORE 100.4

Hi all,

I think my computer (hp desktop with Windows XP) got infected with similar virus(es) as many of you posted. It started with frequent popup windows warning about internet security attack, and 'Programs' and other selections under START are invisible. So I followed instructions on one thread of this forum to download SDFix, then tried to restart in safe mode and failed.

I was able to reboot after performing system recovery, but when I run SDFix, I didn't see the same message as shown in the instruction page, with a y/n choice. Instead, I got many more choices (A-E, 1-3, etc) and none of them looks like the right one. Should I download Malwarebytes' Anti-Malware and run it first?

Thanks a lot for your help!

A:Fake Anti-virus Warning, Programs Under Start Invisible, Endless Reboot

You should not be following specific instructions provided to someone else. Those instructions were given to help fix that particular member's problems, NOT YOURS. Before taking any action, the helper must investigate the nature of the malware issues and then formulate a fix for the victim. Although your problem may be similar, the solution could be different based on the kind of hardware, software, system requirements, etc. and the presence of other malware. Using someone else's fix instructions could lead to disastrous problems with your operating system. It's best that you tell us what specific issues YOU are having rather than point to someone else.Please download Malwarebytes Anti-Malware and save it to your desktop.alternate download link 1alternate download link 2Make sure you are connected to the Internet.Double-click on Download_mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan.If an update is found, the program will automatically update itself.Press the OK button to close that box and continue.If you encounter any problems while downloading the updates, manually download them from here and just double-click... Read more

Read other 6 answers
RELEVANCY SCORE 92.4

okay... so i was trying to get into safemode so i could run an antivirus scan, problem is whenever i tried going in safemode the blue screen would pop up and computer would restart. now for some dumb reason i thought maybe i could get in safemode if i used msconfig and selected safe mode from the boot menu. so the computer restarted and now it boots in safemode but the blue screen and restart happen everytime now. ive tried "start windows normally" but that boots in safemode.... ive tried "last known good config..." and that too boots in safemode. so now im stuck, i cant get on windows. any help please?

im willing to start over but i dont know how to do that from here
 

A:STUCK in safe mode boot, safe mode doesnt work and restarts, REPEAT

Read other 11 answers
RELEVANCY SCORE 92

For some reason, the computer I built a couple of years back has taken to doing an odd reboot loop.

It had been working fine, but now when I turn it on it POSTs as normal, starts to load Windows (7 Home Premium 64bit), but when it gets to the point where it would normally show the login screen it jumps to chkdsk. It goes through the tests, often saying it's fixing things, then restarts. After restarting, it does the same thing again, ad nauseum.

When it starts chkdsk is says 'press any key to skip/cancel', but pressing a key on the keyboard does nothing.

I've tried using the install disc to do a repair, but it doesn't make any difference.

I've run the samsung HDD test tools from the ultimate boot cd which have come back with no errors. I've also run memtest from a flash drive and left it running for over 100 hours. In that whole time it did give two errors, but I don't think that's responsible for causing the constant reboot loop. The worst I ever used to get was an occasional BSOD/reboot.

Someone suggested I try booting into safe mode and trying this - Check Disk - Reset

If I boot into safe mode, it takes as long as it would do to get to desktop/login, then immediately reboots without warning.

I noticed that when safe mode was loading, I got some graphical corruption across the top of the screen.



This led me to think that maybe it was a problem with my gpu (GTX460), so I unplugged it, reset the bios and loaded into safe mode with the onboard gfx i... Read more

A:Endless reboot loop / chkdsk. Safe mode fails to load.

We don't have you system specs that would tell us how many RAM modules you have installed.
I would tend to try to eliminate which module has the errors and run without that if I were you.
You might look at this:
Startup Repair Infinite Loop Recovery

Read other 9 answers
RELEVANCY SCORE 88.8

Hello Bleeping Computer.
 
I'm running Windows 7 Home, 32-Bit
 
This morning I was infected with a fake FBI warning message:
 
"This PC (Windows 7, 32-Bit) is blocked due to at least one of the reasons specified below..." 
 
I powered down, then attempted to reboot in Safe Mode.  It wouldn't restart in Safe Mode, instead it restarted in Normal Mode, the screen went blank white, then redirected to the same fake FBI Warning message.  I'm unable to proceed beyond this fake FBI warning screen.
 
I have access to a clean PC and external USB flash drive, and with your help I'm ready to follow your detailed instructions to remove this infection.
 
Many thanks in advance!
 
ND_Fan
 
 

A:Fake FBI warning, unable to boot in safe mode, please help

Select System restore
If you have a previous restore point ,restore it and let me know if you can boot now

Read other 17 answers
RELEVANCY SCORE 86.4

Hi
I have Thinkpad T43, with windows XP professional.

Since few days whenever i launched my ATI catalyst control center I would get BSOD and laptop will boot automatically and then everything would be fine.

Then while browsing my wife downloaded some media player exe, and since then my IE was redirecting to unknown sites (xalab etc) not to mention various ad pop-ups. One of the online video sites gave a message that I have TROJ/Rustok-N. (Also I would like to mention since couple of months my System Restore was not working although everything else was working fine)

I ran spybot, malawarebytes, trojanremover and removed whatever was reported. But the problem persisted, so I renewed my Norton Internet Security (actually got Norton 360), ran scans but it couldnt find anything.

Then I booted in safe mode and ran all these again, last thing I remember trojanremover prompted to remove something like sv~.exe and i did, when i restarted the system in normal mode I got BSOD and laptop rebooted, I disabled automatic restart on failure but it keeps on doing that.

I then went to Access IBM and restored by configuration which brings back the system files to previous state (the most latest point available was 07/2006)
I still got the BSOD while booting into normal mode, but safe mode was working fine.

I then went into safe mode and disabled couple of services on startup, then my laptop booted fine in normal mode, I found that now windows xp was reset to SP2, so i ran windows update w... Read more

A:BSOD 8E while booting into normal mode, Safe mode fine. Disable automatic restart doesnt work.

FWIW: http://kadaitcha.cx/xp/stop_error.htmlAs stated, it's a matter of hide-and-seek, with no guarantee of finding the culprit.Another link that may be useful: http://aumha.org/a/stop.htmLouis

Read other 1 answers
RELEVANCY SCORE 83.6

I am new here. Hopefully someone can help me. My computer has several problems. The most serious is not being able to get Windows XP to load. I have tried booting in safe mode (F8) but I keep getting an error screen. I installed a game on the computer today that apparent has caused this problem. Any advice on how I can boot to safe mode to remove the program and do a system restore would be appreciated.

Thanks.

[email protected]
 

A:Computer Won't Boot and Safe Mode (F8) Doesnt' Work

Read other 10 answers
RELEVANCY SCORE 83.6

anyways i cant remember the entire error message just something about kernall debugger.

how would i get daemon tools to work in safe mode

A:daemon tools doesnt work in safe mode

Hi.

It isn't intended to. Safe mode only loads the drivers needed to get to desktop in order to troubleshoot the basic operation of the system. You video driver is not even loaded. Instead, a very basic version is applied.

So the quick and short answer is that you can't run it in safe mode.

Read other 1 answers
RELEVANCY SCORE 83.6

Please help!
My PC cannot startup. Every time i turn it on it automatically asks me if i want to start in safe mode, goto last known update etc, but nothing is working ><
The first couple times i tried to start it "normally" it went to the blue screen of death and said that there is an error in the file "system 32/ config/ SOFTWARE"... This didnt sound good, but instead of getting this now it just restarts after the window icon has loaded for arnd 1 minute

When i start in safe mode it loads a load of files and asks me if i want to stop loading a file called "STDP" if i press escape to tell it no, it doesnt make a difference to letting it load.

Recently i have fiddled arnd inside the comp after buying 256 mb extra ram
I started to get blue screens very frequently so i switched the two ram cards and for sum reason it suddenly worked... until a mmonth ago in which it couldnt start up and went instantly to BS OF DEATH, so i took out the extra 256 mb of ram and carried on , however then my keyboard and mosue started to screw up all the time, and my computern would start to beep for arnd a minute and sum times i had to restart to gain back control of mouse and keyboard (sumtimes had to reboot 2-4 times to get them working)
I replaced these however with usb keyboard and mouse and it has been working fine.

arnd 2 weeks after getting these, its screwed up completely
Sorry that this hasnt been written very well, so ask as many questions, a... Read more

A:pc constantly restarts, safe mode doesnt work

Read other 8 answers
RELEVANCY SCORE 82.8

Soooooo,
i go to my friends today and shes starting up her windows and as soon as it starts the bar at the bottom i believe called explorer and all the desktop icons dissapear, all that works is the task manager.
Anyways, so we tried again and then i ran it in safe mode which worked till it actually tried running windows and there is that popup that i believe asks about restore point dissapears in a split second and then nothing loads.
So then i try a different safemode. same problem.
so then we restarted windows and then spy weep hada notification of infected computer. So we ran it and she said it froze last time it ran but this time it did so then it "quarentined" all the problems on the computer.
so then we restarted without internet, which had the explorer and desktop icons back. so i started up the web browsers up i needed and i got a few popups from spysweeper that things were trying to access the internet. some RUNDLL tried running and it was c:\windows\system32\asabmgev.dll.
so then we plugged the internet back in, the explorer disspeared and desktop items but i still had my browsers so i got on here. now we don't know what to do since we cant acess anything on the computer like this. also some weird processes are running on here if anyone knows what they are some dissapear after a second of popping up.
so there is ycommon.exe, hpqimzone.exe, motiveSB.exe, wuaudt.exe, vVX3000.exe, PCLient.exe, ehtray.exe, hpqimzone.exe, and all this othe... Read more

A:Explorer And Desktop Gone. Can't Run Windows Normally, Safe Mode Doesnt Work!

The files you listed have a legitimate use except for one that allows remote control of your computer, but it may be part of the camera software. Follow the instructions below. If you have a problem installing or running Hijack This, change the name by right clicking on the Hijack This.exe and choosing rename. Any name will do such as "mylastchance".http://www.superantispyware.com/Run the online scan for Bit Defender in normal mode. Allow it to quarantine whatever it finds.http://www.bitdefender.com/scan8/ie.html--------------------------------------------------------------------------------Post a Hijack This log in the Hijack This Forum by following the directions in the link below if the programs above have not removed ALL malware. DO NOT post the log in this forum.http://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/ --------------------------------------------------------------------------------How To start Windows in Safe Modehttp://www.bleepingcomputer.com/tutorials/how-to-start-windows-in-safe-mode/

Read other 1 answers
RELEVANCY SCORE 81.2

Hello Everyone,This is my first post here at bleepingcomputer, although I use it frequently for help in my job (IT Manager at a large virtual school setting). I need help...Symptoms: I have a computer infected with a type of fake Windows Security Center which continues to show bubbles in the system tray, along with a replica of the WSC shield icon. Desktop also shows an image of "Detected Spyware! System error #384 (this could be remnant of another virus/malware which was removed from the solutions below and left behind as a background image).Attempted Solutions: I have had the user run MalwareBytes, Super AntiSpyware, smitfraudfix, and Dr. Web all in Safe Mode. None have completely removed the malware, and the malware does run in safe mode.Any help will be greatly appreciated. Thanks in advance.Here is a hijackthis log run in safe mode.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 11:55:44, on 3/22/2010Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: Safe mode with network supportRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Common Files\Symantec Shar... Read more

A:Fake Windows Security Center - Runs in safe mode cannot get rid of it

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 2 answers
RELEVANCY SCORE 81.2

Hello!
I got a bug one day while surfing the internet. It hijacked my browser and made my bandwidth slower. It also put 3 icons on my desktop. Each one had a very generic title so I knew right away that it was a bug. It also came up with a dialog box saying to the effect that, "Windows has been attacked by a virus." It also disabled all administrator rights to everything. I tried getting Task manager up and it was locked. It gave an error message that I "Didn't have the administrator rights."

I downloaded Spybot: Search and Destroy and installed it. I tried to turn the program on but it wouldn't show. So, I did what I would normally do, Try to boot in safe mode and then run it. I went to the f8 screen and chose safe mode. During the loading for safe mode, it flashed a blue screen and went back to a normal start up. I tried using MSCONFIG to get into safe mode, but now I can't even get my PC up because it is stuck in an eternal loop. I'll try to give any information that I can.

Thank you.

A:Fake Security Messages To Safe Mode Locked To No Windows

First thinks first we need to break that nasty loop you're in.

You should be able to boot up normally by pressing F8 before Windows loads (just like when trying to boot in safe mode) then selecting "Return to OS Selection Menu" (I think that's what it says, but it's something to that effect) and then selecting your installation of Windows and pressing enter.

This should bypass the MSConfig setting and allow you to boot normally. When booted, you should remove the MSConfig setting to avoid further looping.

I'll let one of our malware experts take it from here.

Read other 10 answers
RELEVANCY SCORE 80.8

Well there was a hacker in my computera trojan. Now i think he just messed up my registry cus when i try to log in explorer.exe doesnt start and when i start it it crashes after like 30 seconds. Most applications dont work i cant do anything. System restore doesnt work and before this happened i remember my stop zilla removed some haxdoor and hijack thing s tuff like that... Basicaly my computer is unusable and this makes me very mad. Hes been messing with all my stuff please help

PLEASE



EDIT: replaced it with a new explorer.exe kinda works but icons dont show up on tray and when i try to open something it closes and my internet doesnt work... spybot scan got a keylogger and trojan and stopzilla got more hijackers/trojan. basically the computer is uselesss !@!@!$

tried scf /scannow didnt have windows xp professional SP 2 so i tried some torrents and burned them to a cd. didnt register as the windows xp sp2 cd tho =\ so didnt work

A:explorer.exe keeps crashing most applications corrupt cant really start up safe mode doesnt work

Can you get into safe mode w/networking?Do you have a thumb drive or another computer with a CD burner to download some toolsMaybe try theseThe process of cleaning your computer may require you to temporarily disable some security programs. If you are using SpyBot Search and Destroy, please refer to Note 2 at the bottom of this page.Please download Malwarebytes Anti-Malware Free version and save it to your desktop.NOTE: Before saving MBAM please rename it to zztoy.exe....now save it to your desktop.alternate download link 1alternate download link 2Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan.If an update is found, the program will automatically update itself.Press the OK button to close that box and continue.If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install.On the Scanner tab:Make sure the "Perform Quick Scan" option is selected.Then click on the Scan button.If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button. The scan will beg... Read more

Read other 7 answers
RELEVANCY SCORE 80.8

this is a many faceted and increasing in facets issue (ill try to make it as short as possible);

backstory:
the male side of my video cable connection (the part on the motherboard) had bent pins; the pins were unbent and the cable was able to fit back in, BUT

problems:
the picture was garbled--wrong colors, moving lines, etc. the people at a tech store told me the video cable was pinched and knowing that it had been jammed in the hinge for a while, i believed it extremely feasible. I finally ordered a new video cable but replaced it, and to no avail. the picture may have been slightly better--but not significantly if so; additionally (and im not sure if it was this way the first time as well) the computer was displaying at the size of the external.

i restarted, and reazlied that the laptop screen displayed nothing at startup, until logged in--exactly like the external. i figured that at least a portion of what was going on was the computer was sending the external screen signal to the laptop.

things i've tried:

-reseating both ends of the new video cable MANY times
-turning the computer off, taking out battery, holding start button, putitng battery back in, restarting
-every variation of screen resolution/external monitor setting
-pluggin in the external, putting laptop to sleep, unpluggnig external
-reinstalling video/image drivers
function key combinations

when i tried to put in safe mode via F8, the screen went blue or light gray and stayed that w... Read more

A:stuck booting safe mode, which doesnt work; stuck in external monitor mode?

i managed to change the safe mode option, unfortunately the laptop screen still isnt working correctly (the external is)

Read other 1 answers
RELEVANCY SCORE 80.4

Hi guys...it's me again. >_<;
So I have this fake security center coming up, telling me to install an antivirus. It looks like windows security center, but it's not because the only option it has it 'enable protection.' I saw a similiar problem someone else had, and tried to follow their instructions, but unfortunately, it involved downloading smitfraud and rebooting in safe mode, but my computer wont do any form of the three safe modes it offers. Furthermore, when I click on a link from google (such as trying to find this forum) it sends me to some off search website (like offprowl). It's never done that before. The only way to get to the actually site is to press cache. ): Also,anytime I try to run SAS the fake security center pops up and exits out of it. I tried the runSAS thing, and that does the same thing after it scans.
...
and it does it with my HJT log.
D:
Thank you so much in advance. I'm sorry. ):
 

Read other answers
RELEVANCY SCORE 80

Hello all, im new here, i found the site looking for topics like this one I am about to post.

A family members sony vaio will not boot up, the computer doesnt load windows XP (The windows XP loading screen appears but will then goes blank and reboots automatically.) When the computer first turns on a blank screen appears with text saying "we're sorry for the inconvienice, etc..." then has a 30 second timer for which option i would like to choose.
These are my options below (which none work).

It doesnt work on Safe Mode, Safe Mode (Networking), Safe Mode (Command Prompt) or even the "last known to work configurations".

Im totally lost on what i can do from here. I need assistence people!!
 

A:Sony Vaio Wont boot and Continues to Restart (doesnt even work on safe mode)

Read other 13 answers
RELEVANCY SCORE 75.2

Hi I have a computer here that i'm working on and all it does is spam through endless pop ups! THEN, it will start alerting you that your computer is being hijacked, sometimes it will take you to a fake windows scanning site (looks fake at least), and will give you windows alert trying to ask if you want a full scan.
Spybot ran clean, but i have spysweeper, symantec, adaware, cwshredder, kaspersky, and on and on. but i need advice first on further action...
HELP

Logfile of HijackThis v1.99.1
Scan saved at 10:32:13 AM, on 12/10/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\System32\GEARSec.exe
C:\Program Files\Common Files\McAfee\HackerWatc... Read more

A:Please help!! Endless popups and fake security alerts

Hi, sorry for the delay,

If you still need help,

Please click Here to download HijackThis to your desktop.

Click the Download button. When the Trend Micro HJT install box appears, double click on the HJTInstall.exe. Click on Install.

It will be installed by default here: C:\Program Files\Trend Micro\HijackThis

A shortcut to the application will also be placed on your Desktop.

The program will open automatically after installation.

You can double-click the icon that was placed on the Desktop to run subsequent HijackThis scans or you can use the icon inside the folder. The folder HijackThis is where you will find the HJT logs that you save. When you use the application to remove anything, you will also find the backup copies made by HJT inside this folder.

Click on "Do a system scan and save logfile" When the log pops up in Notepad, copy and paste that file back here.

Read other 1 answers
RELEVANCY SCORE 74

I know I am getting on everyone's nerves with all of these posts, but this is my only way to get things resolved.

Safe Mode with Networking: Networking doesn't work.

Any help or suggestions would be appreciated!

A:Networking doesnt work when using Safe Mode with Networking

Originally Posted by Jesse Williams


I know I am getting on everyone's nerves with all of these posts, but this is my only way to get things resolved.

Safe Mode with Networking: Networking doesn't work.

Any help or suggestions would be appreciated!



Guess a question first would be what issues are you having that you need to do this ?

Read other 50 answers
RELEVANCY SCORE 72.8

Not sure whether this is a hardware of a operating system issue, but I have installed an old hard drive from a machine which fell over & died on me into another PC. I need to pull documents and emails off the hard drive before I throw it out.

I have got stuck in an endless loop. The PC boots up, shows the "We apologise, Windows didn't start properly" blah, blah, blah message. It gives me the boot options for safe mode etc. I have tried to get on using every one of the available options - safe mode, last known good configuration etc. However, it loops endlessly back to the same "We apologise" screen. It appears to briefly start to drop to another screen when it goes through the cycle but never manages to actually get out of the loop.

Any advice on how I can break the cycle and access the hard drive would be appreciated. It is an old hard drive - Qantum Fireball CRB and has really seen better days, but I just need to get access to it for an hour or so. It runs Win XP I believe.

Thanks all

Angie
 

Read other answers
RELEVANCY SCORE 72.8

I believe I had a virus... Protection services was forcing me to buy there product and I had all kinds of viruses according to the program they are offering. Part of problem I believe was this offer.. I rejected it and problems compounded. Computer went from loading windows and desktop to a black screen and nothing loaded. I entered safe mode once and attempted to install a antivirus software Webroot Spy sweeper in safe mode, when asked to reboot to complete install, I did that and now I've been stuck in this safe mode loop and cannot go back in? Need help please. I am running XP version home edition version 2002 with service pak 2. it is a pentium processor 4 with 3.2 ghz and 1.0 gb of ram???

A:endless safe mode loop

You have a root kit virus, the best thing to do is to wipe the drive and do a fresh install of XP. If you could get into Safe Mode with Networking you could download some malware removal tools, but if you can't then it's best to format and start again.

Read other 1 answers
RELEVANCY SCORE 71.6

I was told to post in here to check my system for problems, my original post was http://www.bleepingcomputer.com/forums/t/540522/wireless-internet-only-works-in-safe-mode-microsoft-secruity-center-wont-work/
 
As the link above states:
 
My specs
 
Dell Inspiron 1720 Laptop
windows vista home premium, Service Pack 2
32 bit
4 gb ram
 
Hello, my laptop will not connect to the wireless internet unless it is in safe mode with networking, along with not connecting to the internet it will not run microsoft security center and tells me i have to run it manually but computer wont do it manually eithier. These worked about two months ago but no longer do.  I have not added any hardware and have not applied any kind of updates besides for normal windows system updates.
 
I've ran all the 'fix it" solutions provided by microsoft but it does not fix the problem.
I've ran chkdsk /f /r multiple times back to back and it deletes corrupt files and then restores orphan files (its always the same ones)
I've ran windows update but that finds nothing
I've tried to run Malwarebytes but it has an error saying that it stopped working when i double click to open it.
I ran CC cleaner and it fixed a bunch of stuff but the problem still persists.
I've restarted and ran the diagnostic disc that came with the laptop but that doesnt fix the problem eithier.
I ran minitool box and did the following but it did not fix,
Flus... Read more

A:Wireless internet only works in safe mode + Microsoft security center wont work

As an important followup, I have noticed that I have Muvic SmartBar and Muvic SmartBar engine installed on the computer on 3/31/2014. I did research on this and it says it is a third party application that comes with the Snap.Do virus.. I vaguely remember having remnants of this virus in the past but thought I had removed it..  
 
When I try to uninstall Muvic SmartBar from the add/remove options I get an error message saying "The windows installer service could not be accessed. This can occur if the windows installer is not correctly installed. Contact your support personelle for assistance."
 
When I try to uninstall Muvic SmartBar engine from the add/remove options nothing happens and I can just click uninstall forever.
 
I ran HitmanPro 3.7.9  and it found Snap.do and AskBar so I told it to delete them. After I restarted the computer in regular mode but the internet problem still exists and muvicsmartbar is still listed in add/remove.
 
I will not download or run any more tools/programs until furthur help here as been provided. Thank you so much to whoever takes on my problem!

Read other answers
RELEVANCY SCORE 69.2

As the title suggests, I am getting a, "attempt to write to read only memory" blue screen when I try to boot my computer. It goes through the regular start up motions, then gets to the "windows was not shut down properly" screen. No matter if I choose to start windows normally or the last known good configuration it gets to the black XP loading screen then blue screens, reboots and the cycle begins all over again. Neither of the three options for safe mode will load either; I'll get the typical flood of text like it's going to load and then the same BSOD reboot.

None of the hardware has been touched aside from the removal of the USB mouse for use in another computer if you can even count that. I've ran the XP recovery console with chkdsk fixboot and fixmbr to no avail. I also ran an AVG recovery disk which found no viruses as well as Memtest86 which found no errors in the RAM. None of the cables are loose and there's hardly anything on the hard drive so low space isn't an issue either. Any insight into this would be greatly appreciated. Thank you.

A:Attempt to Write to Read Only Memory...Endless Rebooting...Cannot Start Safe Mode

Unfortunatley...that error message is pretty generic, can be caused by any number of problems from drivers to bad hardware.

System/motherboard manufacturer and model?

Any onscreen error messages that you ignored...prior to the reboot looping?

Any clues that something was wrong...before the looping?

Louis

Read other 12 answers
RELEVANCY SCORE 68.4

Every few minutes there will be a pop up right beside my clock saying "Warning! You have a security problem" and every 2 ~ 3 intervals of the pop up it comes out with another pop up - "Alert! You have a security problem! DO you want to scan your computer for viruses?" And when i click ok , it'll bring me to a site thats now reported attacked by google i think. But if i've guessed right the previous one is selling fake anti-virus which itself's a malware. Besides that every few minutes theres this pop up showing a fake anti-virus scan which is really annoying. Your Help is really appreciated. Thank you in advance.
DDS (Ver_09-03-16.01) - NTFSx86
Run by user at 20:30:47.98 on Thu 04/09/2009
Internet Explorer: 7.0.5730.13
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.767.244 [GMT 8:00]

AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated)

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
C:\WINDOWS\system32\userinit.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\PROGRA~1\AVG\AVG8\avgtray.ex... Read more

A:Fake "Warning! You have a security problem" pop up.

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.comDDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow the instructio... Read more

Read other 8 answers
RELEVANCY SCORE 68.4

Hello,

I need help. I've tried to run spybot and anti-virus programs, etc. Whatever planted itself in my computer is not allowing me to run ANY applications (it did allow me to open firefox and access the web, however) It doesn't even allow me to run Task Manager!

For instance, attempting to run task manager results in a Security Warning that says: Application cannot be executed. The File taskmgr.exe is infected. Do you want to activate your antivirus software now?

There are a few other fake antivirus security and software alert pop-ups happening as well.

I don't know what this is and I don't know what to do. Please help!

A:Help! Fake 'security warning'; won't allow applications to run

Hello and welcome to TSF.

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

--------------------

It's likely that the infection will prevent our tools from running. The following tool will help running them.

If you have an active internet connection, copy/paste the links below into your browser, don't click them or the rogue might redirect. If you don't have an active internet connection, download the tools from another machine, and transfer them to the affected machine via USB flash drive.


Please download and run the following tool to help allow other programs to run. (courtesy of BleepingComputer.com)

There are 4 different versions. If one of them won't run then download and try to run the other one. You only need to get one of them to run, not all of them.

Vista and Win7 users need to right click and choose Run as Admin

http://download.bleepingcompute... Read more

Read other 1 answers
RELEVANCY SCORE 68.4

Running windows XP, and have a fake virus checking software that has disabled my AVG and networking.
A couple of the security tool pop up windows appear with the messages

"mpsevh.exe is infected with Trojan.BAT.DelAll.b trying bto send your credit card details using mopsevh.ext to connect to remote host"

mcuicnt.exe is infected with virus.DOS.LoveBuzz.381. This worm is trying to send your credit card details using mcuicnt.exe to a remote host

Help please!!

A:fake security tool warning -

Hello and Welcome.

We want all our members to perform the steps outlined in the link I'll give you below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

---------------------------------------------------------------------------------------------

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed. I currently have as many open topics as I can effectively handle; this will have you back in queue with the proper logs so an available helper would be able to assist.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

Read other 1 answers
RELEVANCY SCORE 68.4

Hi. I recently was infected and now I'm getting redirections.I now have PC Antispyware 2010 installed on my computer (unknownigly). Now I get redirected urls, can't scan with MBAM, and theres a warning symbol in the bottom right corner about that I should pay for the thing to be uninfected. I tried renaming MBAM and even installed it to my desktop and it gets disable.ThanksHere are the logs.DDS (Ver_09-07-30.01) - NTFSx86Run by Administrator at 19:26:40.17 on Wed 08/05/2009Internet Explorer: 7.0.5730.13Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.2942.2304 [GMT -5:00]AV: Webroot Internet Security Essentials *On-access scanning disabled* (Updated) {77E10C7F-2CCA-4187-9394-BDBC267AD597}AV: avast! antivirus 4.8.1335 [VPS 090805-0] *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}FW: Webroot Internet Security Essentials *enabled* {63671000-11A2-46DD-BADD-A084CABCDEAE}============== Running Processes ===============C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcssvchost.exesvchost.exeC:\Program Files\Alwil Software\Avast4\aswUpdSv.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\Explorer.EXEsvchost.exeC:\Program Files\Common Files\... Read more

A:MBAM doesnt work, Redirections, and Warning symbol.

Hello! My name is Sam and I will be helping you. In order to see what's going on with your computer I'll ask for you to post various logs from the tools that we will use to resolve your issue. Please also share with me any information about how your computer is reacting and behaving each step of the way as we work through this process.Please download ComboFix from one of these locations:Link 1Link 2Link 3Important!You should NOT use Combofix unless you have been instructed to do so by a Malware Removal Expert. It is intended by its creator to be used under the guidance and supervision of an Malware Removal Expert, not for private use.Using this tool incorrectly could lead to disastrous problems with your operating system such as preventing it from ever starting again. Make sure that you save ComboFix.exe to your DesktopDisable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools

Double click on ComboFix.exe & follow the prompts.

As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.

Follow ... Read more

Read other 2 answers
RELEVANCY SCORE 68

The reset button case was pulled from the pin on the motherboard while the computer was still running, after re-attaching the female part of the cable to the pin and testing the button, all i got was a beep. I turned off the computer and turned it on to try again but still nothing, all i get is a beep. Any suggestions?

A:Reboot button doesnt work.

Hi and Welcome to TSF

Can you take a screwdriver and jump the 2 pins for the reset button? If so, does it work?

Read other 2 answers
RELEVANCY SCORE 68

Hello,

I have a Satellite Pro C850 1KU running Windows 7 Enterprise. When it is started in normal mode, it will load until the login page, then just reboot about 20 seconds afterwards. Over and over. The computer runs fine in Safe Mode. I have tried many different things, the recovery tools all say that the Windows installation is fine, the hard drive is in good shape and rather cool (41 C). I have tried all possible power setting combinations, have disabled all CPUs but one, stopped all programs and services in msconfig, ...

Having looke through various forums, I noticed that a frequent problem with Toshiba Satellite laptops seems to be the NEC/TOKIN capacitor on the mainboard. It dies after some time and seems to cause just the problems that I observe. There are many videos (search youtube satellite+toshiba+nec+tokin) and forum entries which describe the problem quite accurately (e.g. thread 8991 on badcaps dot net)

So before I disassemble my laptop, I have a few questions which hopefully someone has an answer to:
- Is there also a NEC/TOKIN capacitor on the mainboard of the Satellite Pro C850 1KU and could this cause the problems I have?
- Would it be in principle possible to just exchange the complete mainboard without having to reinstall Windows? Which mainboards would work, any of the C850 series (e.g. with 2.6 instead of 2.3 GHz)?

Thank you very much and best regards.

Read other answers
RELEVANCY SCORE 67.6

I got fake warnings about trojans. I installed defender pro 2010 and when it went to restart my computer windows comes up then redirects to the blue screen. I am now in safemode. I know nothing about computers!! I need help in trying to fix this. I did run malwarebytes and got a couple of things removed. Not sure what else to do.

Read other answers
RELEVANCY SCORE 67.6

Hi, I have a small circular tray icon, that reads: Security Warning: Your Computer May be Inected with harmful or unwanted files.Any help with removing this would be very very much appreciated have tried and tried.Thanks in advance:Oh I understand I may need to post a hijackthis log or something so I downloaded the program and here it is:Thanks againJames.Logfile of HijackThis v1.99.1Scan saved at 19:33:14, on 19/11/2006Platform: Windows XP SP1 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\System32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exeC:\WINDOWS\System32\CTsvcCDA.EXEC:\Program Files\HP\hpcoretech\hpcmpmgr.exeC:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb10.exeC:\Program Files\Java\jre1.5.0_06\bin\jusched.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exeC:\... Read more

A:Security Warning: (fake Virus Alert) + Lop.aq

You should print out these instructions, or copy them to a NotePad file for reading while in Safe Mode, because you will not be able to connect to the Internet to read from this site.Please download SmitfraudFix (by S!Ri)Extract the content (a folder named SmitfraudFix) to your Desktop.Next, please reboot your computer in Safe Mode by doing the following :Restart your computerAfter hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;Instead of Windows loading as normal, a menu with options should appear;Select the first option, to run Windows in Safe Mode, then press "Enter".Choose your usual account.Once in Safe Mode, open the SmitfraudFix folder again and double-click smitfraudfix.cmdSelect option #2 - Clean by typing 2 and press "Enter" to delete infected files.You will be prompted: "Registry cleaning - Do you want to clean the registry?"; answer "Yes" by typing Y and press "Enter" in order to remove the Desktop background and clean registry keys associated with the infection.The tool will now check if wininet.dll is infected. You may be prompted to replace the infected file (if found); answer "Yes" by typing Y and press "Enter".The tool may need to restart your computer to finish the cleaning process; if it doesn't, please restart it into Normal Windows.A text file will appear onscreen, with results from the cleaning process; please copy/pa... Read more

Read other 8 answers
RELEVANCY SCORE 66.8

Everytime I start my system I get a pop up page that says "Scanning for malware please wait" System Defender then pops up. I have also been receiving strange pop up ads and warnings in my task bar as follows:SysGuard Hidden Malicious code found at ox13cf3439 Data interception could not be stoppedTracking process is activated ox10A300713 Can't deactivate spyware programSysFader: IE7explorer.exe Application fatal error. The instruction at ox01cf34739 referenced memory at 0x02df2e50. The memory could not be read.Your system is unstable. A problem has been detected and Windows has been shutdown buggy application to prevent damage to your computer. Kernel32x.SYS 0xA73C20AE base error code C03200, Date Stamp 56b836A3, Kernel debugger on port: COM3 (Port 0x19f, baud rate 9201)Explict content is detected Location: Cached Media Files Files cannot be erased. Click baloon to fix problemCritical event occurred STOP 0x01C0107B (0x0A140184, 0xFC3034) In accesible handler or device/These pop ups are accompanied by fake yellow or red shields in the task bar. Words are misspelled. Also, I get this message: System Shutdown. The system is shutting down. Please save all data. This shutdown was initiated by STUDY/Rakale. It has a timer that counts down before the system does actually shut down. It also says: lsass.ese, module: kernel [email protected] 0x78221981. Instruction is referenced memory at 0x00000000. Null pointer exception. I am using Window XP, IE... Read more

A:Pop Ups Warning Of Fake Security Warnings/system Shutdown

I apologize for the very long delay. We have a huge backlog of HijackThis Logs to handle and it has been taking us greater time than normal to get caught up. If you are still having a problem, and want us to analyze your information, please post a brand new HijackThis log, along with a description of any problems you are experiencing. If we do not hear back from you within a couple of days we will need to close your topic.When posting your logs please post them directly into the reply. Do not attach them.Thank you for your patience.

Read other 19 answers
RELEVANCY SCORE 66.8

Everytime I try to run a program or do anything on the computer, I get a pop-up saying Security Warning saying "Cannot run application. program is infected do you want to run antivirus?" then it redirects me to purchase from Antivirmore.com.

Please help.

Thank you.

A:Fake security warning directs me to purchase Antivirmore

antivirmore.com is a browser hijacker/trojan horse. it infects your computer then sends you error messages that refer you to buy the thing and then the viruses would jsut disappear, this is an easy way for the hacker to make money. My friend is encountering the same problem atm and were figuring out on how to fix it, best solution so far seems to be Spyware Doctor 8just google it).PEOPLE, DONT RELY ON FREE ANTIVIRUSES. THEY ARE THE PROBLEMS THAT CAUSE YOU THIS KIND OF bleep.

Read other 1 answers
RELEVANCY SCORE 66.8

Hey guys!My laptop did not detect internet connections so i went into safe mode to see if ithelped. I wanted to come out of it and used 'mscongfig' to uncheck the safe mode option. When i tried to restart it, the windows woud just say 'restarting' and this would go on for an undefined period. I cannot get out of safe mode. What should i do?

A:Laptop doesnt restart after safe mode

Hi, See if you can cancel safe boot using the bcdedit command - this is detailed under Option 3 on the link below. http://www.tenforums.com/tutorials/2304-safe-mode-start-windows-10-a.html#option3 and use the shutdown /r /t 00 command to restart. Regards, DP-K

Read other 1 answers
RELEVANCY SCORE 66.8

Hi

In order to load a game which im have trouble installing, i was told to try installing it in safe mode. but when i load safe mode the screen stays black (apart from having safe mode in the four corners) but the desktop doesnt load up. The only thing i can do is ctrl,alt & del to bring up the task manager but it will not let me load anything from there either!
 

A:Safe Mode Doesnt Load To Desktop???

Ive just googled the problem and i cannot find a solution elsewhere.
 

Read other 1 answers
RELEVANCY SCORE 66.4

Hello, This just started today, and I have noticed a few people who have similar problems, one being a new member on here, their thread is at

http://forums.techguy.org/malware-removal-hijackthis-logs/710530-htj-log-fake-spyware.html

The wallpaper turns a light blue, says, "Warning: Spyware Threat has been detected on your PC" It says some more, then a link at the bottom that says "click here to scan your pc for spyware..."

Along with this, there are popups imitating Windows Security, and the warning triangle pops up in the clock area, with one of 4 warnings:

"Your computer is infected with spyware"
"Internet attack attempt detected"
"Your Computer is working slowly"
"Your Computer is not protected against spyware..."

Every now and then, a webpage opens, with the title on the top of the screen of "Top Rated Spyware Removers"
Ran Avast, have 4 infections, and can not delete/repair/move
Either win32:Spyware-gen(Tri) or Win32ialer-567(Tri)

Hope that helps.

On windows XP Media Center Edition
Here is a Hijack This log, and thank you for any help.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:00:45 AM, on 5/8/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost... Read more

A:Solved: Fake Windows Security Center system Warning

Read other 11 answers
RELEVANCY SCORE 66

I've run all my antivirus and spyware programs. No luck on removing the pop up machine that I installed with some fake video codec.

I removed part of the stuff from the add/remove programs in my control panel, but the codec installed like 4 programs.

I can NOT enter safe mode. It won't let me when I reboot.

ANY suggestions would be much appreciated, the constant slow dsl and pop-ups every 5 minutes is getting old fast :)

Sincerely, Sean
PS: Here is the logfile





Logfile of HijackThis v1.99.1
Scan saved at 6:23:32 PM, on 11/9/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\MKFDClient.exe
C:\WINDOWS\XPUSBK.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\System32\nvraidservice.exe
C:\WINDOWS\System32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\VidCodecs\pmmon.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\Java\jre1.5.... Read more

A:Fake Codec/No Safe-mode

~bump~

Read other 11 answers
RELEVANCY SCORE 66

I cant reboot my computer without my computer getting to the windows screen and then restarting and going to system restore. I have down MalwareBytes scans and Microsoft Essential Security scans that came up with some trojans. Was told that it was removed but it still happens.

A:Everytime I reboot,It doesnt work. Last check sirefef trojan.

Download OTL to your DesktopDouble click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.OTL should now start. Change the following settings
Change Drivers to AllChange Standard Registry to AllUnder File Scans, change File age to 30Under the Custom Scan box paste this in
netsvcs
set /c
/md5start
consrv.dll
UXTHEME.DLL
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
sceclt.dll
ntelogon.dll
logevent.dll
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
nvrd32.sys
Userinit.exe
Explorer.exe
Winlogon.exe
Regedit.exe
SCLWAPI.dll
/md5stop
%SYSTEMDRIVE%\*.*
%systemroot%\System32\config\*.sav
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job
%systemroot%\assembly\tmp\U\*.* /s

Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt (first run only). These are saved in the same location as OTL.Please post the contents of the OTL.txt file and attach the Extras.Txt, if any, in your next reply.

Read other 24 answers
RELEVANCY SCORE 66

Hi I am using windows xp and just moments ago I get a problem. windows will not boot at all. Nothing unusual at start up but no windows icons/usual windows start up appear and computer sits there fans running. If I try to start in safe mode the computer hangs at ...system32/config/system along with the usual prerequisites and does nothing after that.

Circumstances right before this started:
I plugged in an old IDE harddrive(making 2 harddrives plugged in) in order to retrieve some old data. Everything starts up fine but windows freezes 30 sec into startup and the mouse moves but nothing happens(much like my previous registry problems). Restarting leads to the problem stated above. Any help?
 

A:windows doesnt boot, safe mode hangs...

Read other 16 answers
RELEVANCY SCORE 65.2

In the process of the last week, I have seen 2 different alerts.1. A program supposedly called "antivirus action - innovative protection for your pc"2. Microsoft Security Essentials Alert
 Attach.txt   11.11KB
  2 downloadsI have tried to run a few apps like Combofix, Gmer, rkill, MBAM, ad-aware, and keep getting reinfected after I connect to the internet. I have at this point what I thing is a clean system and want to see if anyone can determine if I have missed anything before I get reinfected all over again. I have not reconnected since my last clean sweep. I have WinXP Pro sp3DDS (Ver_10-11-27.01) - NTFSx86 Run by user at 14:32:28.67 on Wed 12/01/2010Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_20Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2558.429 [GMT -5:00]============== Running Processes ===============C:\WINDOWS\system32\nvsvc32.exeC:\WINDOWS\system32\svchost -k DcomLaunchC:\WINDOWS\system32\svchost -k rpcssC:\WINDOWS\System32\svchost.exe -k netsvcsC:\WINDOWS\system32\svchost.exe -k NetworkServiceC:\WINDOWS\system32\svchost.exe -k LocalServiceC:\Program Files\Lavasoft\Ad-Aware\AAWService.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\svchost.exe -k LocalServiceC:\Program Files\Internet Explorer\IEXPLORE.EXEC:\Program Files\Inte... Read more

A:infected with fake security alerts - after reboot they come back

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the ... Read more

Read other 14 answers
RELEVANCY SCORE 65.2

I followed the step-by-step instructions for removing Malware Defense, but my problem came in that the program never installed on the computer. Instead I would wake up with dreadful Fake Windows Security/Malware Defensepop-ups. When I used rkill, I was able to run Malware Defense. It removed four files, then I found the same problem on reboot. I get those same pop-ups incessantly, although MWB turned up a clean scan. Obviously, my computer is sick, though this seems worse than before.Here we go:DDS (Ver_09-12-01.01) - NTFSx86 Run by Erin at 6:53:40.42 on Thu 01/28/2010Internet Explorer: 6.0.2900.2180Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.503.130 [GMT -6:00]AV: Microsoft Security Essentials *On-access scanning enabled* (Updated) {BCF43643-A118-4432-AEDE-D861FCBCFCDF}============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exec:\Program Files\Microsoft Security Essentials\MsMpEng.exeC:\WINDOWS\System32\svchost.exe -k netsvcsC:\Program Files\Intel\Wireless\Bin\S24EvMon.exesvchost.exesvchost.exeC:\WINDOWS\system32\spoolsv.exesvchost.exeC:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exeC:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exeC:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exeC:\Program Files\Common Files\Apple\Mobile Devi... Read more

A:Fake Windows Security Removed with MWB...and Returns on Reboot

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 2 answers
RELEVANCY SCORE 65.2

My PC shuts down with no error message with no warning, I don't know what else to do, I've tried Spybot, AdAware, Spyware Terminator, AVG, VundoFix plus a few online scans... I'm on the verge of formatting the hard drive, but if anyone can see what the problem is B4 I do that, I shall be grateful...Thanx, Here's the log:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 4:16:29 PM, on 12/20/2008Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16705)Boot mode: Safe mode with network supportRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\SYSTEM32\WISPTIS.EXEC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\ctfmon.exeC:\Program Files\Mozilla Firefox\firefox.exeC:\Program Files\Apple Software Update\SoftwareUpdate.exeC:\WINDOWS\explorer.exeC:\Program Files\Trend Micro\HijackThis\HijackThis.exeR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = htt... Read more

A:PC shuts down w/no warning if not in safe mode.

Hello! My name is Sam and I will be helping you. In order to see what's going on with your computer I may ask for you to post various logs from the tools that we will use to resolve your issue. Please also share with me any information about how your computer is reacting and behaving each step of the way as we work through this process.Please download random's system information tool (RSIT) and save it to your desktop.Double click on RSIT.exe to run it.Click Continue at the disclaimer screen.Once it has finished, two logs will open. Please post the contents of both log.txt (<<will be maximized) and info.txt (<<will be minimized)

Read other 6 answers
RELEVANCY SCORE 65.2

My wife's computer has the FBI warning virus and I am unable to boot to safe mode with networking or safemode. I am able to boot to safemode with comand prompt, but not sure how to proceed from there.

Appriciate any support.

Thanks
David

A:FBI warning with shutdown on safe mode

Greetings and Welcome to The Forums!!My name is Gringo and I'll be glad to help you with your malware problems.I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of usPlease do not run any tools unless instructed to do so.
We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.
Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.
Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.
A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE: At the top o... Read more

Read other 21 answers
RELEVANCY SCORE 65.2

Hey guys,

I downloaded the dump files, which are attached. I had some trouble from time time but today the PC is not starting anymore. It crashed and since then only goes to safe mode or throws a BSOD.

1. Tried reinstalling latest drivers of nvidia in safe mode
2. one tutorial (youtube) from repacking the nvlddmkm.sys and replacing the old one.
3. Uninstalled the old nvidia driver with driver fusion -> works to start in normal mode. as soon as I install the driver and restart -> bsod.
4. reinstalled direct X, no change
5. tried installing windows update driver for my graphics card -> install failed.
6. checked furmark, but only works with drivers installed
7. uninstalled nvidia driver, installed gforce experience and tried to update drivers
7. uninstalled nvidia driver, installed gforce experience and tried to update ONLY driver + clean installation -> bsod
8. downloaded latest driver on nvidia website for GTX 570 -> bsod
9. tried uninstalling logitech webcam software & drivers - > bsod

Edit: Seems like I have a very similar Problem as this guy here: BSOD when GPU driver is loaded/detected 0x116 and 9F
but no 9F bsod. So it is all about the 116 and my msi graphics card. A lot of people tried to reduce some clocking speeds (as shown on videos on youtube) and it might work. But how can I do that, while in safe mode OR while driver not installed in normal mode.
Is this a sign, that my graphics card is broken and I just have to rep... Read more

A:BSOD nvlddmkm.sys while startup, pc doesnt launch - only safe mode

Hello Kruzifix you don't have any mini dumps for to BSOD to look at, so please follow these instruction.
Blue Screen of Death (BSOD) Posting Instructions

Read other 4 answers
RELEVANCY SCORE 64.8

yup, one of those. it doesn't seem to be messing with anything but who knows. it's taking cpu juice and making my fan run higher.
i've tried the various malwarebites, microsoft scan, and one other with the ccleaner afterwords. nothing worked. i was on a different thread and read about combo fix. i ran it and the problem seemed to go away. back in non safe mode the tray icon was gone but my comodo security kept updating over and over and didn't recognize previously trusted apps and programs on startup. i tried to uninstall comodo to reinstall fresh and the fake icon came back.
i ran combofix in safemode and here's the log. please help me get rid of the stupid thing entirely.
thanks
gt

A:fake windows security center with system tray icon and warning balloons

Hello, Welcome to TSF.
I'm nasdaq and will be helping you.

You may wish to Subscribe to this thread (Thread Tools > Subscribe to this thread) so that you are notified when you receive a reply.

Please read these instructions carefully and then print out or copy this page to Notepad in order to assist you when carrying out the fix.

Note that the fix may take several posts. Please continue to respond to my instructions until I confirm that your logs are clean. Remember that although your symptoms may vanish, this does NOT mean that your system is clean.

If there is anything you don't understand, please ask BEFORE proceeding with the fixes.

Please ensure that you follow the instructions in the order I have them listed.

Please do not install or uninstall any programs, or run any other scanners or software, unless I specifically ask you to do so. Also please copy and paste logs into the thread, rather than add them as attachments.
===

Please download and run the following tool to help allow other programs to run. (courtesy of BleepingComputer.com)
There are 3 different versions. If one of them won't run then download and try to run the other one.
Vista and Win7 users need to right click and choose Run as Admin
You only need to get one of them to run, not all of them.

rkill.exe
rkill.com
rkill.scr

It is possible that the infection you are trying to remove will not allow you to download files on the infected computer. If this is the case, then ... Read more

Read other 2 answers
RELEVANCY SCORE 64.8

Hi,

There are essentially three symptoms that I am seeing. There is a fake Security Center Warning that pops up periodically asking me to enable autoprotect. It says that the computer has been infected with a "Spyware.ISPYNow", a high risk virus. The popup also contains a link that I haven't clicked.

When I bring up either (IE or Firefox) of the browsers that I use, it gets automatically redirected to a page with a warning about "Insecure Browsing" and has links to download and install protective software.

I believe the infection came from a site that I was browsing via Firefox. I recognized it within minutes of setting in and started acting to fix it. Since then, I have ran a variety of programs. They are:

Norton Antivirus with the latest updates
SDFix
HijackThis
Ad-aware
ATF Cleaner
SuperAntiSpyware and finally
ComboFix

Norton reported Backdoor.TiServ, but couldn't remove or quarantine it. Between SDFix and HijackThis, a lot of the TSSServ virus files and registry entries got removed. I also manually cleaned up some files including some TSSServ tmp files in my Local Settings folder. Ad-Aware then reported and removed ctl_w32.sys from the temporary internet files folder. It also removed a number of "suspicious" cookies, temp files and registry entries. However, it was not able to remove a hidden registry entry under HKLM/System\ControlSet0001\Control that looked like it was related to ctl_w32.sys. ATF Cleaner and SuperAntiSpywar... Read more

A:Computer Infected, IE / Firefox getting Redirected and a Fake Security Center Warning Popup

Hello! My name is Sam and I will be helping you. In order to see what's going on with your computer I may ask for you to post various logs from the tools that we will use to resolve your issue. Please also share with me any information about how your computer is reacting and behaving each step of the way as we work through this process.Please download random's system information tool (RSIT) and save it to your desktop.Double click on RSIT.exe to run it.Click Continue at the disclaimer screen.Once it has finished, two logs will open. Please post the contents of both log.txt (<<will be maximized) and info.txt (<<will be minimized)

Read other 9 answers