This thread's last reply is from August 4, 2010, 1:08 AM UTC. Software, malware, and removal-tool
advice below may be out of date — treat specific steps and download links with caution.
Help please!
I've got something nasty!!! I can boot up and run in Safe mode only (with the usual limitations), but cannot boot up in normal mode. Have done a system restore from 3 weeks ago to enable me to run HijackThis, but the last time I did a restore, the next time I rebooted, it failed again.

We understand that you are having difficulty running certain programs, including HijackThis. However, in order for us to help you it is necessary that you provide us with a HijackThis log, and it is possible you may be able to trick the malware into letting you do this. First, download HijackThis to a clean computer, then rename it from HijackThis.exe to any other name you want, using an .exe extension, for example... YourLastName.exe. Once you have done that, burn it to a CD (preferable to using a flash drive that may easily become infected) then transfer the renamed file to the infected computer and run a scan, then start a new topic and include your HijackThis log.
If that does not work, try the following:
Download/run Rkill:
Please download Rkill from one of the following links and save to your Desktop:
One, Two, orThree
- Double click on Rkill.
- A command window will open then disappear upon completion, this is normal.
- Please leave Rkill on the Desktop until otherwise advised.
Note: If your security software warns about Rkill, please ignore and allow the download to continue.
Next, please follow the guideline at the link below to start a new topic and post your HijackThis log. If you are unable to create and post a HijackThis log, then your only option may be to reformat your computer and reinstall the operating system.
This topic is now closed. Please start a new topic by following the HijackThis Guideline posted here: >Guideline for posting your HijackThis log<