can't get out of safe mode - windows me

[delsag]

Hi,

I'm new here and as you've guessed I have a problem!
I had a virus and I've been hijacked. I don't know if I've completely removed it (it seems so). My internet page looks OK, but windows ME only starts in safe mode. I've used Norton Antivirus, CWShredder, Adaware and Spybot.

Can anyone out there help me?

I've opened msconfig, checked normal boot, forced it to ask which way to boot, but it's still in safe mode.

Here is my log of hijackthis:

Logfile of HijackThis v1.97.7
Scan saved at 6:30:52 PM, on 10/12/2004
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v5.50 (5.50.4134.0100)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\EXPLORER.EXE
C:\TNT2-64\VI_GRM.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSTEM\IRMON.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAM FILES\WEBSHOTS\WEBSHOTSTRAY.EXE
C:\WINDOWS\DESKTOP\HIJACKTHIS.EXE

R3 - URLSearchHook: (no name) - {43F02779-6D88-4958-8AD3-83C12D86ADC7} - (no file)
F1 - win.ini: load=C:\TNT2-64\vi_grm.exe
F1 - win.ini: run=hpfsched hpfsched
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX
O2 - BHO: (no name) - {F1982002-5660-4D54-9C4B-8641A71A936F} - (no file)
O2 - BHO: (no name) - {7B55BB05-0B4D-44fd-81A6-B136188F5DEB} - (no file)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [MSConfigReminder] C:\WINDOWS\SYSTEM\msconfig.exe /reminder
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [PCHealth] C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [IrMon] irmon.exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe
O4 - HKLM\..\RunOnce: [Index Washer] C:\Program Files\Webroot\Washer\WashIdx.exe "x"
O4 - HKCU\..\RunOnce: [Index Washer] C:\Program Files\Webroot\Washer\WashIdx.exe "x"
O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\WebshotsTray.exe
O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1\Plugins\NPDocBox.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/s...sh/swflash.cab
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {11111111-1111-1111-1111-111111111123} - file://c:\Recycled\1.exe

[DMC]

No Idea, Search Microsfoft
And also contact them if unsussefull

[FenderGtrsRock]

hey dude,

There are two solutions that i can currently think of..

first is the computer actually starting up in safe mode(with safe mode displayed in the 4 corners) or does it just have 16 colors.

if it isnt really safe mode, an just 16 colors it could just be a bad video driver.

Otherwise have you tried holding F8 on boot to bring up the boot menu for windows? It should bring you to your boot menu, and allow you to startup in normal mode. This possibly could put your computer back to startup in normal mode. once this happend to me on a clients windows ME machine i worked on.

another solution that is possible could be found here:
http://support.microsoft.com/default...;en-us;q306615

if that doesnt help... hopefully a more knowelgeable person may come along and help you.

[delsag]

Thanks for replying. It isn't truly safe mode, as no writing appears in the 4 corners. Do you think I should reinstall the video driver?
I didn't use F8, but I did change the settings in msconfig to ask upon boot which way to start.

Originally posted by FenderGtrsRock
hey dude,

There are two solutions that i can currently think of..

first is the computer actually starting up in safe mode(with safe mode displayed in the 4 corners) or does it just have 16 colors.

if it isnt really safe mode, an just 16 colors it could just be a bad video driver.

Otherwise have you tried holding F8 on boot to bring up the boot menu for windows? It should bring you to your boot menu, and allow you to startup in normal mode. This possibly could put your computer back to startup in normal mode. once this happend to me on a clients windows ME machine i worked on.

another solution that is possible could be found here:
http://support.microsoft.com/default...;en-us;q306615

if that doesnt help... hopefully a more knowelgeable person may come along and help you.

[TiSwAs]

Yes remove from device manager, re-boot and see if it picks it up, if not download the latest driver from your graphics card vendor and install.

[DMC]

I woudnt uninstall it just install drivers first. Then if that doesnt work then try your vid card on another computer. there maybe something wrong with it.

[delsag]

Thanks to everyone that replied to my post. I've reinstalled the video driver and now it works! I was losing hope of solving it because I had removed a lot of junk from my computer (due to the virus and spyware) and I thought I had also removed something important, but now it's fine!
Thanks again...

Originally posted by DMC
I woudnt uninstall it just install drivers first. Then if that doesnt work then try your vid card on another computer. there maybe something wrong with it.