I need to get into safemode in order to clean up some spyware. But when I
enter safemode and sign in as Administrator, I only get a black screen
indicating Safe Mode in the 4 corners. My desktop never comes up.

Any ideas??

Thanks in advance,
Larry

This behavior is normal.

--
Nighthawk
Microsoft Technologies Enthusiast

"Larry" <Larry@discussions.microsoft.com> wrote in message
news:BBEC232F-3A92-40ED-8007-F42D60B1DB3A@microsoft.com...
>I need to get into safemode in order to clean up some spyware. But when I
> enter safemode and sign in as Administrator, I only get a black screen
> indicating Safe Mode in the 4 corners. My desktop never comes up.
>
> Any ideas??
>
> Thanks in advance,
> Larry
>
>

Nighthawk wrote:

> This behavior is normal.
>
No it isn't. On a healthy system, the OP should get a desktop, taskbar,
etc. with any of the user accounts including the built-in Administrator
account in Safe Mode.

To the OP - you haven't provided enough information to get focused
troubleshooting. The spyware you've got apparently is something that
kills explorer.exe like Vundo or its ilk. Can you start Task Manager
with Ctrl-Alt-Del? If so, you can run a combination of HijackThis,
Process Explorer, and Killbox to remove whatever is preventing
explorer.exe from running. Then you'll be able to finish cleaning the
machine. Here are some general malware removal steps to do once you've
gotten explorer.exe working:

http://www.elephantboycomputers.com/...moving_Malware

If that sounds too complicated, take the computer to a professional
computer repair shop (not your local version of BigStoreUSA).

Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User

All I recieve is a black background with "Safe Mode" in the four corners of
the screen, and an un-themed taskbar.

--
Nighthawk
Microsoft Technologies Enthusiast

"Malke" <notreally@invalid.invalid> wrote in message
news:ORqFwYt5FHA.3312@TK2MSFTNGP15.phx.gbl...
> Nighthawk wrote:
>
>> This behavior is normal.
>>
> No it isn't. On a healthy system, the OP should get a desktop, taskbar,
> etc. with any of the user accounts including the built-in Administrator
> account in Safe Mode.
>
> To the OP - you haven't provided enough information to get focused
> troubleshooting. The spyware you've got apparently is something that
> kills explorer.exe like Vundo or its ilk. Can you start Task Manager
> with Ctrl-Alt-Del? If so, you can run a combination of HijackThis,
> Process Explorer, and Killbox to remove whatever is preventing
> explorer.exe from running. Then you'll be able to finish cleaning the
> machine. Here are some general malware removal steps to do once you've
> gotten explorer.exe working:
>
> http://www.elephantboycomputers.com/...moving_Malware
>
> If that sounds too complicated, take the computer to a professional
> computer repair shop (not your local version of BigStoreUSA).
>
> Malke
> --
> Elephant Boy Computers
> www.elephantboycomputers.com
> "Don't Panic!"
> MS-MVP Windows - Shell/User

Malke,

Thanks for your help. I think the spyware I have is Vundo. My virus
software indicates I have a suspicious file called 'gebdw.dll' (or something
similar). I did some research and it indicated Vundo. But the process it
suggested to clean it up requires that I go into Safemode, which I can't do!

Sometimes I can start Task Manager and sometimes I cannot. Can you please
provide any info on how to run a combination of HijackThis, Process Explorer
and Killbox? I'm not familiar with these.

Thanks again!


"Malke" wrote:

> Nighthawk wrote:
>
> > This behavior is normal.
> >
> No it isn't. On a healthy system, the OP should get a desktop, taskbar,
> etc. with any of the user accounts including the built-in Administrator
> account in Safe Mode.
>
> To the OP - you haven't provided enough information to get focused
> troubleshooting. The spyware you've got apparently is something that
> kills explorer.exe like Vundo or its ilk. Can you start Task Manager
> with Ctrl-Alt-Del? If so, you can run a combination of HijackThis,
> Process Explorer, and Killbox to remove whatever is preventing
> explorer.exe from running. Then you'll be able to finish cleaning the
> machine. Here are some general malware removal steps to do once you've
> gotten explorer.exe working:
>
> http://www.elephantboycomputers.com/...moving_Malware
>
> If that sounds too complicated, take the computer to a professional
> computer repair shop (not your local version of BigStoreUSA).
>
> Malke
> --
> Elephant Boy Computers
> www.elephantboycomputers.com
> "Don't Panic!"
> MS-MVP Windows - Shell/User
>

perhaps the desktop file for the administrator profile has been wiped out
or corrupted. Can you do anything from the start button? can you get to my
computer?


"Larry" <Larry@discussions.microsoft.com> wrote in message
news:59EB1DD4-6C87-4824-B55D-CCC003B79232@microsoft.com...
> Malke,
>
> Thanks for your help. I think the spyware I have is Vundo. My virus
> software indicates I have a suspicious file called 'gebdw.dll' (or
> something
> similar). I did some research and it indicated Vundo. But the process it
> suggested to clean it up requires that I go into Safemode, which I can't
> do!
>
> Sometimes I can start Task Manager and sometimes I cannot. Can you please
> provide any info on how to run a combination of HijackThis, Process
> Explorer
> and Killbox? I'm not familiar with these.
>
> Thanks again!
>
>
> "Malke" wrote:
>
>> Nighthawk wrote:
>>
>> > This behavior is normal.
>> >
>> No it isn't. On a healthy system, the OP should get a desktop, taskbar,
>> etc. with any of the user accounts including the built-in Administrator
>> account in Safe Mode.
>>
>> To the OP - you haven't provided enough information to get focused
>> troubleshooting. The spyware you've got apparently is something that
>> kills explorer.exe like Vundo or its ilk. Can you start Task Manager
>> with Ctrl-Alt-Del? If so, you can run a combination of HijackThis,
>> Process Explorer, and Killbox to remove whatever is preventing
>> explorer.exe from running. Then you'll be able to finish cleaning the
>> machine. Here are some general malware removal steps to do once you've
>> gotten explorer.exe working:
>>
>> http://www.elephantboycomputers.com/...moving_Malware
>>
>> If that sounds too complicated, take the computer to a professional
>> computer repair shop (not your local version of BigStoreUSA).
>>
>> Malke
>> --
>> Elephant Boy Computers
>> www.elephantboycomputers.com
>> "Don't Panic!"
>> MS-MVP Windows - Shell/User
>>

typical computer geek wrote:

> perhaps the desktop file for the administrator profile has been wiped
> out or corrupted. Can you do anything from the start button? can you
> get to my computer?

No, the OP has malware that is preventing explorer.exe from running. See
other posts for details.

Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User

Ah, thank you for pointing that out, I must have misread the question.

--
Nighthawk
Microsoft Technologies Enthusiast

"Malke" <notreally@invalid.invalid> wrote in message
news:uGutnYv5FHA.2560@TK2MSFTNGP12.phx.gbl...
> Nighthawk wrote:
>
>> All I recieve is a black background with "Safe Mode" in the four
>> corners of the screen, and an un-themed taskbar.
>>
>
> That's because you've not got any icons set to show on the desktop for
> that account either by choice or because the account is still set on
> the default XP look. You still have a taskbar. The OP says, "I only get
> a black screen indicating Safe Mode in the 4 corners. My desktop never
> comes up" which I take to mean that he doesn't get the taskbar or any
> icons that he expects. It is common for malware to stop explorer.exe
> from running in order to prevent removal.
>
> Malke
> --
> Elephant Boy Computers
> www.elephantboycomputers.com
> "Don't Panic!"
> MS-MVP Windows - Shell/User