cant login in safe mode

i can get to the safemode screen to login as either admin or default (also admin account). both accounts just stall when clicked on to login. so i cant login in safemode at all.

i have windows xp, got all the upgrades. i can login normally with default and have checked for viruses, spyware, malware, etc. everything comes back clean. currently, as of two weeks, have not been connected to the internet. though ive had this problem for about three months and have been trying to figure it out but just cant. also, when i click on control panel/user accounts, nothing comes up, nothing opens. its like there is no files. but there has to be for default to work. its very confusing. im not sure how long this has been happening, i only noticed it a few months ago when installing a video card.

its not something thats an imediate concern to me, but its something thats been bothering and puzzling me for a long while now. thought i would ask about it while i was here asking about another problem in the hardware section.

thank you for your time and help everyone. any advice would be awesome.

 

Hi Lucky Kitten.

Since you can get to the Boot Options screen try selecting "Last good configurartion" and try restarting.
__________________________________

Do you have an XP Installation disc ? This can be used to repair some types of boot problems.
_

 

tried that, i login with the last good config, restart, and still cant login to safe mode afterward. but thank you.

 

Hi again.

Do you have an XP Reinstallation disc ?

_

 

no i do not. got destroyed by a house guest the first week i got my computer. that was 4 years ago.

 

There is a registry key that defines what to load in safe mode, and others that can determine whether or not to allow access to areas such as User Accounts, and both can be compromised by various things. There is a scanning tool that checks for things like that and gives a detailed report. Please note that this tool will also clean out the default temporary folders and temporary internet files when it scans. If you want to run it and post the log it creates, I'll be happy to look it over to see if anything relevant is visible. Details follow.


Note: You must be logged onto an account with administrator privileges to complete the following.

Download Deckard's System Scanner (dss.exe) to your desktop.
Close all applications and windows.
Double-click on dss.exe to run it and follow the prompts.
When the scan is complete, two text files will open; main.txt, which will be maximized and extra.txt, which will be minimized.

Post the contents of main.txt only for now.

If you have HijackThis, it will use it to create a HijackThis log. If you do not, it will automatically download and install HijackThis. Please keep your internet connection active and allow access through your firewall if applicable.

 

Um, Lucky Kitten can't boot at all, much less run a program.
___________________________________________________

Lucky Kitten, you can order replacement Restore/Installation/Recovery discs from the PC manufacturer. You need to go to their web site (e.g., hp.com or dell.com) and navigate to Support, Customer Support or Technical Support. You need to find a link to a telephone number or a on-line "chat" session with a technical support representative. You may have to navigate thru many pages to find this information, but it will be there, somewhere.

Before contacting the Support person have these things at your fingertips:
1) The model name, e.g., Presario, Pavillion, Satellite, etc. This is usually clearly printed or embossed on the case.

2) The model number, e.g., NX6325, D1600, etc. For desktops this will usually be on the front of the case. For laptops this is usually printed on the deck next to the keyboard.

3) The serial number. In the case of Dells this is called the Service Tag. This identifies the exact model, features and date of manufacture to the PC company so they know what PC they are dealing with. For desktops this will be on a sticker on the back of the case. For laptops this will be on a sticker on the bottom of the PC.

4) You may need the XP registration number. For desktops this is often found on its own sticker somewhere on the sides of the case in one corner or perhaps on the back of the case. For laptops the sticker would be on the bottom.
** Many PC manufacturers don't bother to put the XP registration number on the PC at all, so don't worry if you don't find it after looking for it.

Replacement disc(s) typically run around $30 (USD), but I don't know whether that includes shipping & handling costs. At any rate $30 is a real bargain!

** Keep in mind that a Restore will most likely wipe out all your programs and any important files you have on the hard drive. If you want to back up your files you need to do this before restoration.
_

 

Hello WinCrazy,

Where do see that in this thread?



Your suggestion on getting an XP disc should be followed - wouldn't bother with "Recovery" discs.

 

the details were too long to post here, so i uploaded the file to my geocities account. here is the link to it http://www.geocities.com/satansanguis/Dsystemscanlog.txt its just the main.

the extra is http://www.geocities.com/satansanguis/extra.txt thought might as well post it since its links.

sorry took so long for me to reply. i dont have internet at home. my brother inlaw is allowing me to use his comp tonight to reply here. thanks guys for helping me.

btw, i can do the standard login, just not in safemode.

 

my computer is a mutant between an acer case with its motherboard and powersource and drives from my old emachine tower plus some parts i ordered from tigerdirect.com. the only tech support i have is what help i find via the web and books.

 

You've got some nasties onboard there. Click Start>Run and type the following command, then hit enter.

sc stop YCXHNTIA

Now do this one.

sc delete YCXHNTIA

Delete the following file.

C:\WINDOWS\system32\ChCfg.exe

Can you get some files transfered to your PC? If so, here's what I'd like you to do.

Download and install AVG Anti-Spyware (AVG-AS)

Use this link to manually update AVG Anti-Spyware.
AVG Anti-Spyware manual updates.
Download the Full database, transfer it to your PCs desktop, and install it by double clicking the file. Make sure that AVG Anti-Spyware is closed before installing the update.

Now open AVG-AS

• Click on the Scanner tab at the top.
• Click the "Settings" tab and change the recommended action to Quarantine.
• Select Do Not Automatically Generate a Report after Every Scan.
• Go back to the "Scan" tab and click "Complete System Scan ". This scan can take quite a while to run, so sit back and wait.
• AVG-AS will list any infections found on the left hand side. When the scan has finished, it will automatically set the recommended action.
• Click the Apply all actions button. AVG-AS will display "All actions have been applied" on the right hand side.
• Click on "Save Report ", then "Save Report As ". Save the report where you know you can find it again (like on the Desktop) and take note of the name.
• Close AVG-AS and reboot.

Post the AVG-AS report.

See if you can boot to safe mode now.

 

try start >run> msconfig > diagnostic startup
usually if you shut the computer down wrong - say by holding the power button 3 times it will start in safe mode
often by taking out or adding a piece of hardware it will go into safe mode

 

---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 11:55:14 AM 9/27/2007

+ Scan result:



C:\Documents and Settings\default\Cookies\default@aavalue[1].txt -> TrackingCookie.Aavalue : No action taken.
C:\Documents and Settings\default\Cookies\default@getmusicfree.aavalue[1].txt -> TrackingCookie.Aavalue : No action taken.
C:\Program Files\Yahoo!\YPSR\Quarantine\ppq2.tmp -> TrackingCookie.Adjuggler : No action taken.
C:\Program Files\Yahoo!\YPSR\Quarantine\ppqD.tmp -> TrackingCookie.Adjuggler : No action taken.
C:\Documents and Settings\default\Cookies\default@ads.cnn[1].txt -> TrackingCookie.Cnn : No action taken.
C:\Documents and Settings\default\Cookies\default@com[1].txt -> TrackingCookie.Com : No action taken.
C:\Program Files\Yahoo!\YPSR\Quarantine\ppqDD.tmp -> TrackingCookie.Com : No action taken.
C:\Documents and Settings\default\Cookies\default@cpvfeed[2].txt -> TrackingCookie.Cpvfeed : No action taken.
C:\Documents and Settings\default\Cookies\default@e-2dj6wfk4oiczseo.stats.esomniture[2].txt -> TrackingCookie.Esomniture : No action taken.
C:\Documents and Settings\default\Cookies\default@e-2dj6wfkiakdpckp.stats.esomniture[2].txt -> TrackingCookie.Esomniture : No action taken.
C:\Documents and Settings\default\Cookies\default@e-2dj6wjkyglajwfp.stats.esomniture[1].txt -> TrackingCookie.Esomniture : No action taken.
C:\Documents and Settings\default\Cookies\default@e-2dj6wjkykhdpmco.stats.esomniture[2].txt -> TrackingCookie.Esomniture : No action taken.
C:\Documents and Settings\default\Cookies\default@e-2dj6wjkyomdjghq.stats.esomniture[1].txt -> TrackingCookie.Esomniture : No action taken.
C:\Documents and Settings\default\Cookies\default@e-2dj6wjlyemcpsbp.stats.esomniture[2].txt -> TrackingCookie.Esomniture : No action taken.
C:\Documents and Settings\default\Cookies\default@e-2dj6wjmywpcjchp.stats.esomniture[2].txt -> TrackingCookie.Esomniture : No action taken.
C:\Documents and Settings\default\Cookies\default@e-2dj6wjny-1md5ke.stats.esomniture[1].txt -> TrackingCookie.Esomniture : No action taken.
C:\Documents and Settings\default\Cookies\default@adopt.euroclick[2].txt -> TrackingCookie.Euroclick : No action taken.
C:\Program Files\Yahoo!\YPSR\Quarantine\ppq5.tmp -> TrackingCookie.Euroclick : No action taken.
C:\Program Files\Yahoo!\YPSR\Quarantine\ppq95.tmp -> TrackingCookie.Euroclick : No action taken.
C:\Program Files\Yahoo!\YPSR\Quarantine\ppqF.tmp -> TrackingCookie.Euroclick : No action taken.
C:\Documents and Settings\default\Cookies\default@searchportal.information[1].txt -> TrackingCookie.Information : No action taken.
C:\Documents and Settings\default\Cookies\default@search.live[1].txt -> TrackingCookie.Live : No action taken.
C:\Documents and Settings\default\Cookies\default@sales.liveperson[2].txt -> TrackingCookie.Liveperson : No action taken.
C:\Documents and Settings\default\Cookies\default@server.iad.liveperson[2].txt -> TrackingCookie.Liveperson : No action taken.
C:\Program Files\Yahoo!\YPSR\Quarantine\ppq12.tmp -> TrackingCookie.Liveperson : No action taken.
C:\Documents and Settings\default\Cookies\default@image.masterstats[1].txt -> TrackingCookie.Masterstats : No action taken.
C:\Program Files\Yahoo!\YPSR\Quarantine\ppq6.tmp -> TrackingCookie.Masterstats : No action taken.
C:\Documents and Settings\default\Cookies\default@realmedia[2].txt -> TrackingCookie.Realmedia : No action taken.
C:\Program Files\Yahoo!\YPSR\Quarantine\ppq7.tmp -> TrackingCookie.Realmedia : No action taken.
C:\Program Files\Yahoo!\YPSR\Quarantine\ppq97.tmp -> TrackingCookie.Realmedia : No action taken.
C:\Documents and Settings\default\Cookies\default@revsci[2].txt -> TrackingCookie.Revsci : No action taken.
C:\Program Files\Yahoo!\YPSR\Quarantine\ppq15.tmp -> TrackingCookie.Revsci : No action taken.
C:\Program Files\Yahoo!\YPSR\Quarantine\ppq8.tmp -> TrackingCookie.Revsci : No action taken.
C:\Program Files\Yahoo!\YPSR\Quarantine\ppqE2.tmp -> TrackingCookie.Sexcounter : No action taken.
C:\Documents and Settings\default\Cookies\default@statcounter[1].txt -> TrackingCookie.Statcounter : No action taken.
C:\Program Files\Yahoo!\YPSR\Quarantine\ppq9.tmp -> TrackingCookie.Statcounter : No action taken.
C:\Program Files\Yahoo!\YPSR\Quarantine\ppqE3.tmp -> TrackingCookie.Statcounter : No action taken.
C:\Documents and Settings\default\Cookies\default@anad.tacoda[2].txt -> TrackingCookie.Tacoda : No action taken.
C:\Documents and Settings\default\Cookies\default@anat.tacoda[2].txt -> TrackingCookie.Tacoda : No action taken.
C:\Documents and Settings\default\Cookies\default@tacoda[1].txt -> TrackingCookie.Tacoda : No action taken.
C:\Program Files\Yahoo!\YPSR\Quarantine\ppq16.tmp -> TrackingCookie.Tacoda : No action taken.
C:\Program Files\Yahoo!\YPSR\Quarantine\ppqA.tmp -> TrackingCookie.Tacoda : No action taken.
C:\Program Files\Yahoo!\YPSR\Quarantine\ppqB.tmp -> TrackingCookie.Tacoda : No action taken.
C:\Program Files\Yahoo!\YPSR\Quarantine\ppqC.tmp -> TrackingCookie.Tacoda : No action taken.
C:\Program Files\Yahoo!\YPSR\Quarantine\ppqE5.tmp -> TrackingCookie.Tacoda : No action taken.
C:\Program Files\Yahoo!\YPSR\Quarantine\ppq17.tmp -> TrackingCookie.Tracking101 : No action taken.
C:\Program Files\Yahoo!\YPSR\Quarantine\ppqE6.tmp -> TrackingCookie.Tracking101 : No action taken.
C:\Program Files\Yahoo!\YPSR\Quarantine\ppq18.tmp -> TrackingCookie.Webtrends : No action taken.
C:\Documents and Settings\default\Cookies\default@yadro[1].txt -> TrackingCookie.Yadro : No action taken.
C:\Documents and Settings\default\Cookies\default@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : No action taken.
C:\Program Files\Yahoo!\YPSR\Quarantine\ppq1.tmp -> TrackingCookie.Yieldmanager : No action taken.
C:\Program Files\Yahoo!\YPSR\Quarantine\ppqD9.tmp -> TrackingCookie.Yieldmanager : No action taken.
C:\Program Files\Alcohol Soft\Alcohol 120\star_syn_client.dll -> Trojan.Agent.abd : No action taken.


::Report end


---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 2:09:12 PM 9/27/2007

+ Scan result:



C:\System Volume Information\_restore{2EDE8FBE-CD64-4AC6-BB82-21229910E44C}\RP2\A0004135.dll -> Trojan.Agent.abd : Cleaned with backup (quarantined).


::Report end

 

it works now btw, thank you very much. i didnt do it right though. i did the update and set the thing to quaretine but forgot to first do the thing to delete that one file. so when it didnt find that i had to go back and reread your post to see what i missed, do it, and run the scan again. but it works now. thank you so much. you are wonderful noahdfear for helping with the step by step.

was there anything that needed cleaned out?

 

I would suggest running an online virus scan once the computer has an active internet connection again. Is there a problem with the computer preventing access?

 

no, just no money to afford it at this time. thats the only reason we arent online at home. medical bills are too high right now. insurance didnt pay for an operation and im having to make payments on it, and until thats paid off we cant afford the internet.

do you know of any reason why i would have an unreadable private message on this site with a sent date of Dec 31st 1969? just found that odd and didnt know if i was the only person that got it or if it is a site wide glitch.

 

Been there done that ....... I can sympathize with ya.

So long as the computer is working good now, it appears to be clean and you can go on using it as you wish. Once you are again online with it, try to remember getting a scan done.

Haven't heard anything about anyone else getting a PM such as that, but I will sure let Admin know about it.

Thanks!

 

btw, checked it with avast, it found nothing

changed it back to the acer harddrive cause its twice the size of the emachine harddrive and has nothing on it while the emachine one is practically full.

also ran the avg and avast on the acer harddrive, came back clean. but i posted in another thread down in software about it giving me problems with installing stuff from discs. was able to get everything installed though eventually.

thanks again for the help