hijackthis wont run in safe mode!!

Unknown

please please help me....

i have been getting the bsod 0x0000008E, but my laptop only runs in safe mode, otherwise in normal mode, it boots up, then after all the start up programs have started the blue screen comes up!

i have tried to run the installation file of hijackthis (in order to Do a system scan and save a logfile) in safe mode but nothing happens when i click on it....is there anyway to resolve this??

Veka

Hi, welcome to Icrontic.

Please check your private messages for instrcutions.

fizzpop

*** STOP: 0X0000008e (0xc0000005, 0Xa9a5eB75, 0xA2121784, 0X00000000)

fizzpop

and its a hp compaq nc8430 laptop running windows xp sp2

fizzpop

i rebooted in safe mode and ran the tddump.exe file that you told me to and nothing reaally happend, then i double clicked on the tddump reg file that came with it and i ended up with the following notepad file poppoing up...it had the following contents.

hkey_local_machine\system\currentcontrolset\enum\root\legacy_tdssserv.sys
nextinstance REG_Dword 1 (0X1)

hkey_local_machine\system\currentcontrolset\enum\root\legacy_tdssserv.sys\0000
service reg_sz tdssserv.sys
legacy reg_dword 1 (0x0)
configflags regdword 0 (0x0)
class reg_sz legacydriver
classGUID reg_sz {8ECC055D-047F-11D1-A537-0000F8753ED1}
devicedesc reg_sz tdssserv.sys
capabilities reg_dword 0 (0x0)

hkey_local_machine\system\currentcontrolset\enum\root\legacy_tdssserv.sys\0000\logconf

hkey_local_machine\system\currentcontrolset\enum\root\legacy_tdssserv.sys\0000\control
activeservice reg_sz tdssserv.sys

TDSS infection active!

Veka

Happy New Year!

Please check your Private Messages for instructions. Follow them first and come back here.


We will begin with ComboFix.exe. Please visit this webpage for download links, and instructions for running the tool:

http://www.bleepingcomputer.com/comb...o-use-combofix

Please ensure you read this guide carefully and install the Recovery Console first.

The Windows Recovery Console will allow you to boot up into a special recovery (repair) mode. This allows us to more easily help you should your computer have a problem after an attempted removal of malware. It is a simple procedure that will only take a few moments of your time.

Once installed, you should see a blue screen prompt that says:

The Recovery Console was successfully installed.

Please continue as follows:

1. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
2. Click Yes to allow ComboFix to continue scanning for malware.

When the tool is finished, it will produce a report for you.

Please include the following reports for further review, and so we may continue cleansing the system:

C:\ComboFix.txt
New HijackThis log.