Windows 7 Forums


Reply
Thread Tools

Black screen in safe mode

 
 
Cannapric Cannapric is offline
New Member
Join Date: Dec 2010
Posts: 7
Thanked: 0
 
      12-21-2010
Hi
Yesterday i was trying to delete some viruses from my pc and to do so i had to restart my pc in safe mode. I did this by msconfig, but when the computer started up again the monitor was completely black except for a sign that said safe mode in the corners and my cursor. I've tried to open task mangaer, system recovery and nothing has worked. I cant acces anything and i really dont want to lose all my data so i would really appreciate some help
 
Reply With Quote
 
 
 
 
Nibiru2012 Nibiru2012 is offline
Quick Scotty, beam me up!
Nibiru2012's Avatar
Join Date: Oct 2009
Location: Planet X
Posts: 4,847
Thanked: 1073
 
      12-21-2010
Is this occurring only in Safe Mode or all the time?

Have you tried System Restore to see if that helps?

You may have what's called the "Vundo" trojan. It's a nasty little P.O.S. if ya know what I mean.

Quote:
Discovered: November 20, 2004Updated: March 17, 2010 10:38:59 PMType: TrojanInfection Length: VariesSystems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Vista, Windows XP Trojan.Vundo is a Trojan horse that downloads files and displays pop-up advertisements. It is known to be distributed through spam email, peer-to-peer file sharing, drive-by downloads, and by other malware.

Infection
Trojan.Vundo, also known as VirtuMonde, VirtuMundo, and MS Juan, typically arrives by way of spam email or is hoisted onto the user’s computer by a drive-by download that exploits a browser vulnerability. The Trojan may also be downloaded via file-sharing networks, with the malicious executables having been given innocuous names to trick users into running them.

Trojan.Vundo may also be downloaded by other malware. The mass-mailing worms W32.Ackantta.B@mm and W32.Ackantta.C@mm are known to download variants of this threat family on to compromised computers. Increased levels of infection of these worms has been seen to result in an increase in the number of Trojan.Vundo infections.

Functionality
Trojan.Vundo was designed as a means for displaying advertisements on the compromised computer. The Trojan includes functionality to display pop-ups and is additionally capable of injecting advertisements into search results.

The advertisements and pop-ups that are displayed include those for fraudulent or misleading applications; intrusive pop-ups, fake scan results, and so-called alerts that masquerade as being from legitimate security software appear on the desktops of compromised computers in an attempt to frighten users into clicking buttons for 'further information'. The advertisements generally link to sites offering non-functional (or occasionally outright harmful) programs that purport to be capable of ridding the computer of non-existent malware in return for a fee payable by credit card.

Advertisements for adult Web sites and services may also be displayed by the threat.

In order to make it more difficult to remove, Trojan.Vundo also lowers security settings, prevents access to certain Web sites, and disables certain system software. Some variants attempt to disable antivirus programs.

Recent Trojan.Vundo variants have more sophisticated features and payloads, including rootkit functionality, the capability to download misleading applications by exploiting local vulnerabilities, and extensions that encrypt files in order to extort money from the user.
Download and use the free version of Malwarebyte's Anti-Malware and see if that cures it. IF possible try to run it in safe mode.

I've never had this virus or trojan but the users I know who have been infected by it says it a little difficult to get rid of.

Sometimes persistent virus, spyware or malware processes will not allow a security software to run or to effect a complete removal of the infection, since these processes are themselves up and running on your Windows computer.

RKill is a easy to use tool that kills known processes that stop the use of normal anti-malware applications.

RKill just kills processes, imports a Registry file that removes incorrect file associations and fixes policies that stop us from using certain tools. Then it kills Explorer.exe so it will restart and enable some of the Registry changes. When done, RKill will then create a log listing all processes that were terminated while the program was running.

After running , it will display a log which will show the malware processes it has killed.

Now you should not reboot your computer as any malware processes that are set to start automatically, will just start up again.

Instead, after running RKill you should scan your computer using your malware removal tool of choice.

This will ensure a more complete removal of the malware which may have infected your Windows computer.

For download link & details visit BleepingComputer.
 
Reply With Quote
 
Cannapric Cannapric is offline
New Member
Join Date: Dec 2010
Posts: 7
Thanked: 0
 
      12-21-2010
i think it is thanks, but the problem is I dont know how to get my computer to work. I cant get internet acces or anything (im talking from another computer) so i cant use any anitvirus. I've tried system recovery but i think that because I made the change in contol panel it wont stop until i manage to fix that
 
Reply With Quote
 
Cannapric Cannapric is offline
New Member
Join Date: Dec 2010
Posts: 7
Thanked: 0
 
      12-21-2010
anyone has an idea of how i can get to control panel?
 
Reply With Quote
 
Nibiru2012 Nibiru2012 is offline
Quick Scotty, beam me up!
Nibiru2012's Avatar
Join Date: Oct 2009
Location: Planet X
Posts: 4,847
Thanked: 1073
 
      12-21-2010
Go to the Start Orb (lower left-hand corner of screen) and click on it then on the right side column you'll see it underneath Computer.
 
Reply With Quote
 
Cannapric Cannapric is offline
New Member
Join Date: Dec 2010
Posts: 7
Thanked: 0
 
      12-21-2010
jajajaja the problem is since my screen is frozen like i said before start menu doesn't appear, in fact nothing appears
 
Reply With Quote
 
Cannapric Cannapric is offline
New Member
Join Date: Dec 2010
Posts: 7
Thanked: 0
 
      12-21-2010
its just a blan page dark with my cursor
 
Reply With Quote
 
Cannapric Cannapric is offline
New Member
Join Date: Dec 2010
Posts: 7
Thanked: 0
 
      12-21-2010
Also when i use F8 to run windows normally it still starts up in safe mode
 
Reply With Quote
 
Cannapric Cannapric is offline
New Member
Join Date: Dec 2010
Posts: 7
Thanked: 0
 
      12-21-2010
Quote:
Originally Posted by Nibiru2012 View Post
Go to the Start Orb (lower left-hand corner of screen) and click on it then on the right side column you'll see it underneath Computer.
ok ive managed to get the adress for the porgram that caused all these problems (msconfig) but when i try to open it from cmd.exe it wont let me
 
Reply With Quote
 
 
 
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
NVidia GT220 - blank screen in normal mode roter-kaiser Drivers 3 10-04-2010 02:37 PM
Can not run in safe mode. leox001 General Discussion 0 06-27-2010 06:33 PM
need help booting into safe or normal mode without sight GeorgiaLady General Discussion 18 06-02-2010 08:02 PM
Black flashing screen when playing a video game, please help! Blackwatch89 Windows 7 Support 2 03-02-2010 04:01 PM
Safe Mode Ian System Administration 0 09-02-2009 02:53 PM


All times are GMT +1. The time now is 04:56 PM.
W7Forums is an independent website and is not affiliated with Microsoft Corporation.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33