Can't access safe mode to delete System Security fake anti virus virus. HELP.

Hi, our SL500 has become infected with "System Security" fake anti virus software. We have tracked down how to remove it.
http://www.geekstogo.com/forum/system-security-malware-t222291.html
However when we get to the "reboot your computer in safe mode" (see instructions below) we can't as this is not possible.
We have tried F8...........Repeatedly . And also  Run->msconfig->BOOT.INI->/SAFEBOOT . But to no avail . Actually we get a pop up stating that Windows  can not find said command and have we typed it in correctly . Please could some one help us as this is driving us insane . One last thing . A computer WITHOUT a "safe mode " option, isn't that kinda of unsafe and a tad.....
Thanks in advance.  
Instructions for malware removal. 
You will need to print out a copy of these instructions, or save them to NotePad and put a shortcut to the file on the desktop so that you can refer to while you complete this procedure as you will be required to boot into Safe Mode where you wont have internet access.
Please download ATF Cleaner by Atribune.
Caution: This program is for Windows 2000, XP and Vista only
Double-click ATF-Cleaner.exe to run the program.
Under Main choose: Select All
Click the Empty Selected button.
If you use Firefox browser
Click Firefox at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
If you use Opera browser
Click Opera at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
Click Exit on the Main menu to close the program.
Run MBAM again, only this time perform a full scan and post the log.
Please click here to download AVP Tool by Kaspersky.
Save it to your desktop.
Reboot your computer into SafeMode.
You can do this by restarting your computer and continually tapping the F8 key until a menu appears.
Use your up arrow key to highlight SafeMode then hit enter.
Double click the setup file to run it.
Click Next to continue.
It will by default install it to your desktop folder.Click Next.
Hit ok at the prompt for scanning in Safe Mode.
It will then open a box There will be a tab that says Automatic scan.
Under Automatic scan make sure these are checked.
System Memory
Startup Objects
Disk Boot Sectors.
My Computer.
Also any other drives (Removable that you may have)
After that click on Security level then choose Customize then click on the tab that says Heuristic Analyzer then choose Enable Deep rootkit search then choose ok.
Then choose OK again then you are back to the main screen.
Then click on Scan at the to right hand Corner.
It will automatically Neutralize any objects found.
If some objects are left un-neutralized then click the button that says Neutralize all
If it says it cannot be Neutralized then chooose The delete option when prompted.
After that is done click on the reports button at the bottom and save it to file name it Kas.
Save it somewhere convenient like your desktop and just post only the detected Virus\malware in the report it will be at the very top under Detected post those results in your next reply.
Note: This tool will self uninstall when you close it so please save the log before closing it.
In your next reply I would like to see:
C:\RSIT\info.txt
MBAM log
Kaspersky AVP scan results
Also let me know how the computer is behaving. 
This post has been edited by Octagonal: Dec 27 2008, 08:08 AM 

Thanks for trying to help. Sadly, I followed the instructions and it rebooted to the blue screen again.
It's going to have to go to Apple for repairs now. I'm out of options.
I am wondering how much easier it would have been if I'd created a time machine restore point. I got what I deserved for failing to do that, but I'm doubtful even that would have worked in this case. It does seem to be because of that piece of widely reported malware that didn't want to leave without causing damage.
The most frustrating aspect is the safe boot. I get to the desktop but without any menu, finder or dock. It seems to be similar to the problem below...
http://www.macsmarts.com/?p=109
But that's for Tiger. I tried that to no effect.
Like I said, it's going to have to go to Apple now because I've done so many things I don't know if I'm just digging myself a deeper hole.
Thanks again for offering help.

Similar Messages

  • Can's access Safe Mode or any other mode!!

    I'm on a MacBook Air 2014 - bought three weeks ago.
    I'm a Mac user for several years now, and this has never happened to me:
    I can't acces Disk Diagnostics, Safe Mode, reset PRAM or any of the other options available!
    This Mac came with OS X Mavericks 10.9.4.
    I updated to OS X Yosemite 10.10.
    Before updating I couldn't use any of the options I mentioned. After updating the same happens.
    I've checked every single Apple Forum page & Apple page with information regarding this subjects. I've done everything according to what I read!
    NON OF THIS OPTIONS WORK ON MY MAC.
    Any suggestion?!
    Thank you.
    P.S: No, I'm not experience any troubleshooting with my Mac. The functions I mentioned simply aren't working. Why?!
    Shouldn't they work on a new MacBook Air? They still work on my Macbook - Late 2010...

    The warranty entitles you to complimentary phone support for the first 90 days of ownership.
    If you bought the product in the U.S. directly from Apple (not from a reseller), you have 14 days from the date of delivery in which to exchange or return it for a refund. In other countries, the return policy may be different. If you bought from a reseller, its return policy applies.

  • Not able to access Safe Mode nor boot off of Tiger DVD

    I am running an iMac with Tiger 10.4.11. After doing an update of software I cannot boot. I have not been able to access Safe Mode or boot off a Tiger DVD. With DVD inserted I wait till I hear the bong noise then I press the letter C. It thinks for a few seconds then spits the DVD out. I am able to see the contents of the DVD when I insert into my PowerBook running Leopard. This DVD is not the same one that was used to install Tiger. The Tiger DVD is in excellent shape.
    I have reset the PRAM.
    I was able to access Single User Mode. I ran /sbin/fsck -fy and it found no problems.
    I was able to access the iMac in Target Disk Mode. I deleted .plist files that were dated on July 2nd, the last day it worked. But when I restarted it I received the same response. Apple icon with a spinning circular wheel.
    I deleted the following files:
    * com.apple.kernelcaches (a folder in /System/Library/Caches)
    * Extensions.kextcache (a file in /System/Library)
    * Extensions.mkext (a file in /System/Library/)
    * com.apple.ATS (a folder in /Library/Caches/)
    * com.apple.loginwindow.plist (a file in /Library/Preferences/)
    * Files that start with com.apple.LaunchServices (in /Library/Caches)
    Is there any thing else I could do in Target Disk Mode that would be helpful?
    Any suggestion on how I might be able to fix this problem would be appreciated.
    Thank you for looking.

    Well, kicking out the Disk on boot is generally one of two things... bad optical, or the HD Driver munged early on.
    If the Power book boots off that Install Disk, I'd put the iMac into Target mode, try an Archive & Install, which gives you a new OS, but can preserve all your files, pics, music, settings, etc...
    http://docs.info.apple.com/article.html?artnum=107120

  • How can I use Safe Mode to troubleshoot in Windows 8 or Windows 7?

    QuestionHow can I use Safe Mode to troubleshoot in Windows 8 or Windows 7?
    AnswerWindows has a special mode known as Safe Mode. It is not fully functional, but it allows you to make changes to the laptop to hopefully fix normal mode. We're going to attempt to boot into Safe Mode to use it fix the laptop.
    For more information on how to boot into Safe Mode please see the following articles:
    How To: Safe Mode and other Advanced Startup Options in Windows 8
    Creating a System Repair Disc for Windows 8 (useful for entering Safe Mode)
    How To: Start your Windows 7 computer in Safe Mode
    Use Safe Mode to undo recent changes
    When a computer won't start Windows, it's usually due to a recent change. If you installed a new piece of software before your laptop began to have trouble booting, you may want to uninstall it. Similarly, if you recently made a change to any system settings, you may want to change it back. If you have antivirus software, you may want to perform a scan. If you're not sure what to do here, feel free to skip to the next step!
    Use Safe Mode to perform a system restore
    Windows includes a utility called System Restore that can help with many problems. While this won't alter or remove any of your personal files, it will roll back your system settings and files to an earlier date. We'll use this to attempt to fix Windows.
    To learn how to use System Restore, please check the following articles:
    How To: Understanding System Restore, Refresh, Reset, and, Recovery options in Windows 8 + Video
    How To: Perform a system restore in Windows 7
    Use Safe Mode to initiate a clean boot
    As Windows loads, it loads many additional components such as services and startup items. Some of these are not vital. For example, some tools start immediately with Windows, such as antivirus software. From Safe Mode, we can instruct Windows not to load many of these. This will help you determine if one is causing Windows not to load properly. Note that this step is more advanced than the previous steps. If it seems difficult for you, you may consider asking for help from someone who is more comfortable with computers.
    Please view the following article for more information:
    How can I perform a clean startup without my startup items to troubleshoot a problem?
    If Windows loads normally, you'll know one of those startup items or services was causing the problem. If this is the case, you may want to return to the System Configuration Utility and re-enable some items and services to determine which specific one caused the problem.
    Backing up your data
    If you're able to enter Safe Mode, backing up your data should be easy. Connect a USB flash drive or external drive to your computer while in Safe Mode and then copy your important  files to the flash drive or external drive.
    You may also want to consider taking your computer to a professional.

    Would love to know if this is possible. Found forums dating back years asking exactly the same thing, no solutions. And I do not want to change my headset (Sennheiser MM-50), or use the onboard mic (which sounds like you are using your Mac in a wind tunnel once the fans kick in).

  • Are my issues something I can repair in Safe Mode?

    I just recently upgraded to Mavericks 10.9.2 - Since my upgrade, my Adobe no longer works, mail stops working and now my calendar stopped working.  Are my issues something I can repair in Safe Mode?

    Please follow these directions to delete the Mail "sandbox" folders. In OS X 10.9 there are two sandboxes, while in 10.8 there is only one. If you're running a version older than 10.8, this comment isn't applicable.
    Back up all data.
    Triple-click anywhere in the line below on this page to select it:
    ~/Library/Containers/com.apple.mail
    Right-click or control-click the highlighted line and select
    Services ▹ Reveal
    from the contextual menu.* A Finder window should open with a folder named "com.apple.mail" selected. If it does, move the selected folder—not just its contents—to the Desktop. Leave the Finder window open for now.
    Log out and log back in. Launch Mail and test. If the problem is resolved, you may have to recreate some of your Mail settings. You can then delete the folder you moved and close the Finder window. If you still have the problem, quit Mail again and put the folder back where it was, overwriting the one that may have been created in its place. Repeat with this line:
    ~/Library/Containers/com.apple.MailServiceAgent
    Caution: If you change any of the contents of the sandbox, but leave the folder itself in place, Mail may crash or not launch at all. Deleting the whole sandbox will cause it to be rebuilt automatically.
    *If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination  command-C. In the Finder, select
    Go ▹ Go to Folder...
    from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.

  • Can't enter safe mode in XP

    Im5tryingtoenter safe mode on an older Toshiba Satellite A105 laptop, model no. PSAU-813000. I re had reinstalled the XP OS earlier this year and the computer appeared to run as new.however, I never tried safe mode after the installation. I'm trying to enter safe mode so I can eliminate the sign in password. As the computer is booting up I press f8repeatedly but it keeps booting up to the signin screen.. any ideas? Thanks.

    If you can boot into Windows XP... 
    1. You can get into Safe Mode this way. Open the System Configuration Utility (msconfig.exe), check /SAFEBOOT on the BOOT.INI tab, OK, and restart Windows.
    2. You can bypass the Welcome (Windows sign-in) screen this way. Open the hidden User Accounts dialog by running this..
       control userpasswords2
    On its Users tab, clear the check box for...
        Users must enter a user name and password to use this computer.
    You'll be asked for your password.
    -Jerry

  • The Firefox window doesn't open at all I can't run safe mode or make other trubleshot changes

    since yesterday 08/10/2011 the Firefox window doesn't open at all I can't run safe mode or make other trubleshot changes. When I click on the desktop short-cut the Firefox windows starts loading but before open is crushing.I have sent several messages to you but no answer and my Firfox is not working.

    Which version of Firefox and which OS are you using?
    There are other ways of opening safe mode given at http://kb.mozillazine.org/Safe_Mode - See if that helps.

  • Mac Pro 1,1 dual-core intel xeon 2.66Ghz, NVIDIA GeForce 7300 GT OSX 10.5.8 hangs on boot, can boot in safe mode, disc permissions verified, disc verified.  Please help me start it normally?

    Hi there, when I turn on my computer it just hangs on a grey screen with an apple logo.  I didn't install any new software on purpose lately.  It initially froze when I moved the mouse to get rid of the screensaver where it had been behaving normally.  When the screen saver went away the screen was messed up and everything was frozen and the date and time were huge and distorted.  I did a hard reset and I'm just stuck on that grey screen.  If I leave it for hours one of the screens turns blue and the other is black, but I can move the mouse.  A ghostly image of the cursor is stuck in the top left corner of the screen,
    I can boot into safe mode and everything is normal.  I reset the PRAM.  I verified the discs and the permissions.  I don't seem to have any data loss.  When I restart normally I still get the grey screen.  The only weird thing in the console is 24/09/09 10:59:27 AM kernel unknown SIGSEGV code 0 .  I would really like my computer to work.  Thank you.

    Have you run the check for non-Apple kernel extensions suggested above?
    It's easy, you just cut-and-paste the command into terminal. If there is any output, you just cut-and paste it back in here.
    Linc Davis suggests this as a way to find those non-Apple extensions:
    Please copy or drag -- *don't type* -- the following command into a Terminal window, press Return, and post the output (if any):
    kextstat -kl | awk ' !/apple/ { print $6 } '

  • IMac G5 running OS 10.4.11. Started playing with a bluetooth speaker (may or may not be related). Now I cannot get past the blue screen on startup. I can get into safe mode. Tried install disc for disc utility and reloaded OS. Still get blue screen.

    I have an older iMac G5 running OS 10.4.11. The other day I started playing with a bluetooth speaker (may or may not be related). Now I cannot get past the blue screen on startup.
    I can get into safe mode. But no regular startup.
    I tried disabling bluetooth, thinking that might be related. It didn't help.
    I even tried using the install disc to run disc utility. That didn't work so I reloaded the OS.
    But I still get hung on the blue screen when trying a normal startup.
    All help would be appreciated.

    Try resetting the PMU/SMU and PRAM/NVRAM. You'd need to identify the mode of resetting depending on the model of your G5 iMac. The Apple support sites that would help you for this are –
    http://support.apple.com/kb/HT1436
    http://support.apple.com/kb/HT1939
    http://support.apple.com/kb/HT1767
    http://support.apple.com/kb/HT1379
    I hope this solves your problem.

  • I can not access preview mode in safari

    Choosing file > Preview takes me somewhere else and I can not access preview mode at all. Every time I select preview it takes me to some strange site with att and my first name in it. Very Frustrating.
    I am using the latest upgrade for Muse 2014, so I don't think the version is to blame. Has anyone else had a similar problem, and what did you do to resolve it, and did it work?

    Hi
    When you click on preview, what is the url in the browser? Also, Muse uses the default browser of the OS, so is it possible to change the default browser and test it again to see if it works.

  • Running Mac 10.5.8 Updated to FF 8.0 - keeps crashing whenever FF opens - can not launch safe mode either - looks like many people here are having same issue - solutions all keep saying it ha.... see detail

    Running Mac 10.5.8 Updated to FF 8.0 - keeps crashing whenever FF opens - can not launch safe mode either - looks like many people here are having same issue - solutions all keep saying it has something to do with roboform 7.6.2 (which is for windows) or the profile. I have created new profile and updated the mac roboform - still no luck - have sent in MANY crash reports with no response ( one was Crash ID: bp-0eea6eb2-aba3-478a-bfb1-8f00d2111110 ) - anyone else find solution other than roboform or profile, or how do i get back to prior version?

    Any suggestions?
    My mail is still not functioning and crashes everytime I open it or check archived messages.

  • Someone hacked my computer and set up a new administrative account by re-registering my computer. I can not access this account nor delete it. How can I fix this and get my computer back to the way it was?

    Someone hacked my computer and set up a new administrative account by re-registering my computer. I can not access this account nor delete it. How can I fix this and get my computer back to the way it was? And also prevent this from being able to happen again. I have the link the kid used (http://www.ihackintosh.com/2009/05/how-to-hack-the-user-password-in-mac-os-x-wit hout-an-os-x-cd/) Apparently he used hack 2. HELP PLEASE!

    Not sure why you can't delete that account. If you have admin privileges, you should be able to. Sounds like you only removed the Home Folder for that account.
    You should highlight/select the account you want to remove and then click the minus button. Might need to unlock the padlock with your admin password.
    Have a look at these articles from Apple, if necessary.
    http://docs.info.apple.com/article.html?path=Mac/10.5/en/8235.html
    http://docs.info.apple.com/article.html?path=Mac/10.5/en/8162.html
    http://support.apple.com/kb/DL1399

  • Image loading can't find safe mode on this Windows XP version (3.6.24) notwhere supposed to be

    I'm having huge problems with tabs loading sometimes they will load text no images. I can't find safe mode in this version of Win XP 3.6.24 Firefox. It's not where they say it is supposed to be. Below I will List the trouble shooting info. I don't even know if safe mood will fix the problem. I tried the suggested fixes that didn't work. I've checked all browser settings that I thought of There's no proxy's set. Sometimes text appears with boxes whee images should be, sometimes the tab opens and it stays blank while it clams that it's trying to load sometimes I get error messages not so much lately maybe something I tried fixed that but they still pop up sometimes.I could try loading a tab go to bed and it would still be trying to load when i got up in the morning.It used to work pretty well I even went with a not so new version since my version of windows (XP) might not interact with a nerwer version. I don't think that changed anything, that's why I feel it's a plug-in or add on maybe. Would greatly appreciate some help I've been living with this for weeks!

    See:
    *http://kb.mozillazine.org/Images_or_animations_do_not_load
    *https://support.mozilla.com/kb/Images+or+animations+do+not+show

  • My imac won't startup past the spinning gear and my apple keyboard is wireless but it won't connect, how do I fix the problem so I can get into safe mode?

    My imac won't startup past the spinning gear and my apple keyboard is wireless but it won't connect, how do I fix the problem so I can get into safe mode?
    Can anybody help me on this issue? I have already tried to replace the batteries but since the computer won't get past the spinning wheel of death then the keyboard won't connect.

    Please follow Apple's advice in http://support.apple.com/kb/TS2570. If you need to get your hands on a wired USB keyboard, even a PC one will work fine.
    Do not follow the previous poster's advice, that option is a "last chance" option. OS X is stable and in most cases a reinstall is never needed. Follow the directions in Apple's letter.

  • HT1338 I have macbook without a firewire port, I have usb 2.0 port, now my os is not working I can not get through apple logo loading , I can not enter safe mode, I can only enter one user mode, how can I backup my data, I have very important data in my h

    I have macbook without a firewire port, I have usb 2.0 port, now my os is not working I can not get through apple logo loading , I can not enter safe mode, I can only enter one user mode, how can I backup my data, I have very important data in my hdd

    Here is what worked for me:
      My usb hub, being usb2, was too fast. I moved the wire to a usb port directory on my pc. That is a usb1 port which is slow enough to run your snyc.

Maybe you are looking for

  • Moving itumes from pc to mac went ok, but no applicaitons.

    switching from pc to mac... I moved my iTunes from win to mac using backup...everything seems to have worked ok, except applications. None of them would sync. So, I went to iTunes and got all apps that were free, and then they synced as expected. The

  • Error message says Itunes on locked disk or no write permissions

    I have used ITUNES recently but today when I started it up I get the following error message. "the folder "Itunes" is on a a locked disk or you do not have write permission for this folder" I tried to download a new version, same problem.  HELP.

  • Yosemite 10.10 problem - 10.9 drive not mac extended format ??

    I am attempting to upgrade to 10.10 and the system is not allowing me to install on my 10.9 drive because it thinks the drive is either not mac extended formatted or journal not activated.  It will not install the update.  It requires a drive format

  • Can I use iphone 4 with tomtom traffic?

    I want to be able to connect wirelessly to my TomTom 720 to use their Traffic Service. I have managed to connect using Bluetooth and have managed to make a handsfree call, however I can't get the Traffic Service to work. The TomTom website says that

  • I cant buy new songs on a new computer.

    Ok so the computer i used to use to buy songs crashed and i trying to buy songs on a new computer. its making me answer security qustions that i dont know the answer to. when i tried to reset the questions it sent it to my old email. when i tried to