Windows 7 black screen after log on

(Windows 7 Home Premium 64 bit)

I've read several threads on this subject, but I can't find anything that matches my particular set of symptoms, so I'm hoping for some help and advice here.

The other day, I started having random popups and redirects. I realized that my antivirus was out of date (bad me), so I downloaded Avast and ran both a normal scan and a boot time scan. I also downloaded Spybot S&D and ran that, immunized the system, etc. I was still having occasional issues. For example, a box would pop up asking me if I wanted to save a file, or I'd get an error message about something not opening (VirtualStore or something like that?).

I also downloaded HijackThis, but it doesn't seem to create a log, and I get an error message about the host file not allowing it or something similar.

Something popped up randomly while I was on Facebook, a message from Windows asking if I wanted to allow Spybot to make changes to my computer. It said something about removing a file. I clicked yes, and it just kept popping up, over and over and over, instantly after clicking. Clicking "no" made no difference, either. I literally couldn't do anything at all, so I turned off the computer.

When I turned it back on, everything was normal at first. My login page came up, so I logged in, and then... nothing. Cursor in the middle of a black screen. I know the computer is still working. Pressing Ctrl Alt Delete brings up my list and I can open task manager and run new processes. I'm on the computer right now, as I typed "firefox.exe" and it opened just fine. I can look at the task manager.

I've been searching for a file, and I found a mention of a kind of fix. It sort of worked. The Run Once Wrapper (runonce.exe) was in my process list. Ending that process brings up my desktop and all of my programs start to load. However... the windows asking for permission for Spybot start popping up again very shortly afterward, and I'm back where I started.

I would greatly appreciate any help, or if this is not in the correct area for support, please point me in the right direction! I have literally thousands of irreplaceable pictures on this computer of my children.

 

Follow all the directions in READ & RUN ME FIRST, then post the logs in the Malware Removal forum.
Good luck

 

I would, and gladly.

However, I'm unable to access most areas of my computer, because of those windows that I mentioned. I can only run new tasks from the Task Manager. If you know of a way to complete those steps through the task manager, or a way to stop those windows, I'll get to work getting the requested logs.

 

When the desktop comes up, are you able to disable Spybot's TeaTimer, for directions on doing this look here?
If not, are you able to boot the computer into Safe Mode to disable TeaTimer?

To boot into Safe Mode or access other boot options:

• Restart the computer.
• As it begins to boot, start tapping the F8 key.
• When you get to the boot menu, use the arrow keys to select Safe mode.
• Press Enter.

 

Safe Mode gave me the same result... I assume because Spybot still runs in Safe Mode? Looking at the instructions, I can disable it by opening Spybot from the task manager.

EDIT: Okay, I can open Spybot. I'm already in advanced user mode. However, that is where the similarities stop with the instructions. There is no "left pane". The third row is labeled "settings & more tools" but the options change settings and services... neither of those seem to have anything about a teatimer.

 

One suggestion is if you haven't used any Safe Mode options yet is to choose Last Known Good Configuration, FIRST, before any other Safe Mode option. Just to see if it will get you in. If not then go ahead and try Safe Mode and the Malware forum.

 

There's an option to stop "Live Protection Background Service." (Desc: "System wide process monitoring to protect your computer and detect malware in r..." There's also an option to stop "Scanner Service." (Desc: "System service responsible for scanning single files during on-access or custom de..." and it's set to "be active after every reboot."

Which of those would I need to stop, or both?

 

I will give this a try if ending these Spybot processes doesn't work. Thank you

 

I don't use SpyBot, so I have no firsthand knowledge.

Spybot's site still has a similar interface as described in the MG guide. http://www.safer-networking.org/en/howto/disable.hs.html Do see no way to get to an option "Resident" to find TeaTimer?

 

No, my version of Spybot looks nothing like the screenshots I saw. It could possibly be because this is a beta version?

Booting into Safe Mode works, but it doesn't connect to the internet in safe mode, so what I have done temporarily is just adjust my user account control to not dim the desktop when a window pops up. I don't have a thumb drive here, or any other way to get programs onto my computer besides the internet. I am going to ignore the pop up for File Remover (Spybot Search & Destroy) and see if I can't just uninstall Spybot altogether, for now, since it's preventing me from getting rid of the other issues.

 

I uninstalled Spybot and rebooted. Everything booted up just fine. I can see my desktop and run all of my programs. No windows popping up.

Now I'm just left with browser redirect, so I'll move to the malware forum. Thank you both!