XP continuosly reboots to faux Safe Mode screen

ccwiztech · Feb 4, 2014

I am running XP on an HP Mini PC with a USB port and no CD drive. A few days ago I thought I had the Conficker.1294 trojan. I ran many programs from this site until I thought I removed it with Trojan Killer. I then deleted the programs and shut the computer down. (oops)

The next day, it would not boot. It would continuously boot to a faux Windows Safe Mode screen and reboot.. repeat. I was able to create a bootable USB XP drive to get the PC back on.

I have re-run RogueKiller, MalwareBytes, TDSSKiller, HitManPro and MGTools and have attached logs. I hope someone can help me get to the next step.

Thanks... ccwiztech

Kestrel13! · Feb 5, 2014

I am not seeing any malware in those logs at all.

How are things currently running?

ccwiztech · Feb 5, 2014

Thank you for looking at my logs! The computer still won't boot on it's own. It still goes to what seems like a fake Windows Safe Mode screen, then reboots. It does this continuously. When I boot with the USB XP stick, everything seems to work fine. I can't find anything wrong in the computer either, unless maybe something got into the boot files? I don't know. What do you think?

Kestrel13! · Feb 5, 2014

What makes you think it's a "fake" window if I may ask?

ccwiztech · Feb 5, 2014

Well, it just doesn't "look" right. It started appearing while I was amidst the cleaning process of the trojan. I was under the impression the Conficker had something to do with it. The screen would flash on, then continue on the booting process. Now it gets stuck there. No matter how I navigate the screen or what choice I make, it recycles back to the same screen. It may not be a fake screen. I could be wrong. But it sure is a problem.

I DO thank you for your time!

Kestrel13! · Feb 6, 2014

I suggest that you post about this in the software forum. Best of luck!

If you are not having any other malware problems, it is time to do our final steps:

We recommend you keep Malwarebytes Anti-Malware for scanning/removal of malware.

Renable your Disk Emulation software with Defogger if you had disabled it in step 4 of the READ & RUN ME.

Go to add/remove programs and uninstall HijackThis. If you don't see it or it will not uninstall, don't worry about it. Just move on to the next step.

If running Vista, Win 7 or Win 8, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.

Now goto the C:\MGtools folder and find the MGclean.bat file. Double click ( if running Vista, Win7, or Win 8 Right Click and Run As Administrator ) on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.

Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.

After doing the above, you should work thru the below link:

How to Protect yourself from malware!

ccwiztech · Feb 6, 2014

Thank you Kestrel13! for your time and help. I DO appreciate it. I will post in the software forum. ~ccwiztech

Kestrel13! · Feb 6, 2014

Most welcome. Safe surfing!

Log in or Sign up

XP continuosly reboots to faux Safe Mode screen

ccwiztech Private E-2

Attached Files:

RKreport[0]_S_02032014_153147.txt

mbam-log-2014-02-03 (15-46-38).txt

TDSSKiller.3.0.0.19_03.02.2014_17.30.10_log.txt

HitmanPro_20140203_1818.log

MGlogs.zip

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

ccwiztech Private E-2

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

ccwiztech Private E-2

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

ccwiztech Private E-2

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member