XP thinks it's in Safe Mode

[Chicago_XP_user]

Hello,

I searched the forum and didn't see this exact problem addressed.

My PC (XP SP3) suffered a rough recovery from a malware infection. I.e.,
some services (like Print Spooler) no longer run.

The malware is gone, but when I go into Computer Management and try to
restart the services (like Print Spooler), an error message pops up saying
"Cannot start service in Safe Mode".

However, the PC is definitely not in safe mode. So, there must be some
internal flag that says otherwise. Restarting XP in safe mode and then in
normal mode doesn't un-stick it.

Additional info:

1. SFC produces the error:
C:\>sfc /scannow

Windows File Protection could not initiate a scan of protected system files.
The specific error code is 0x000006ba [The RPC server is unavailable.].


2. In the registry, SafeBoot_Option = Network. If I set it to zero and
reboot, it simply reverts to Network.


Thanks!!!!

 

[Jose]

Hello,

I searched the forum and didn't see this exact problem addressed.

My PC (XP SP3) suffered a rough recovery from a malware infection. I.e.,
some services (like Print Spooler) no longer run.

The malware is gone, but when I go into Computer Management and try to
restart the services (like Print Spooler), an error message pops up saying
"Cannot start service in Safe Mode".

However, the PC is definitely not in safe mode. So, there must be some
internal flag that says otherwise. Restarting XP in safe mode and then in
normal mode doesn't un-stick it.

Additional info:

1. SFC produces the error:
C:\>sfc /scannow

Windows File Protection could not initiate a scan of protected system files.
The specific error code is 0x000006ba [The RPC server is unavailable.].

2. In the registry, SafeBoot_Option = Network. If I set it to zero and
reboot, it simply reverts to Network.

Thanks!!!!

Sounds like Safe Mode to me.

That is exactly the error you get when you try to run sfc /scannow in
Safe Mode which makes it bad advice.

Offering advice to run sfc /scannow in Safe Mode is a waste of time so
if anybody suggests that to you, tell them to try it on their own
system first. It is generally a waste of time and cause for must
frustration even in Normal mode.

You won't be able to do a Repair Install without an XP installation
CD. As usual, that little is often missing from that bit of advice.
Do you have a genuine bootable XP installation CD?

You do not have to "try" things, you need to figure things out and fix
things.

What instructions are you following that compel you to look to the
registry to resolve the issue? Was a registry change what got you
into this situation in the first place?

Did you use msconfig to change any settings in the boot.ini file
during your troubleshooting?

Paste up the contents of your boot.ini for a look see if you are not
sure.

 

[db]

you might try to either
initiate a system restore
point or

see if you can run>msconfig
and look under the boot tab.

sometimes the safe mode
option is checked / enabled.

--
db·´¯`·...¸><)))º>
DatabaseBen, Retired Professional
- Systems Analyst
- Database Developer
- Accountancy
- Veteran of the Armed Forces
- @Hotmail.com
- nntp Postologist
~ "share the nirvana" - dbZen

~~~~~~~~~~~~~~~

Hello,

I searched the forum and didn't see this exact problem addressed.

My PC (XP SP3) suffered a rough recovery from a malware infection. I.e.,
some services (like Print Spooler) no longer run.

The malware is gone, but when I go into Computer Management and try to
restart the services (like Print Spooler), an error message pops up saying
"Cannot start service in Safe Mode".

However, the PC is definitely not in safe mode. So, there must be some
internal flag that says otherwise. Restarting XP in safe mode and then in
normal mode doesn't un-stick it.

Additional info:

1. SFC produces the error:
C:\>sfc /scannow

Windows File Protection could not initiate a scan of protected system
files.
The specific error code is 0x000006ba [The RPC server is unavailable.].


2. In the registry, SafeBoot_Option = Network. If I set it to zero and
reboot, it simply reverts to Network.


Thanks!!!!

 

[Chicago_XP_user]

Philo & Jose, thanks for your responses.

I have been installing PC operating systems since 1986, but haven't done a
repair install in years. So, I am trying to manually fix the system first,
and do a repair install as a last-resort.

Jose - aside from the failed services, the system is operating normally and
clearly not in Safe Mode. My assumption is that an internal software flag is
stuck on, and that's what drove me to inspect the registry. Also, one of the
malware infections I had was "Vundo", which according to some user groups
changes the Safe Mode registry entries.

In msconfig, no boxes are checked in the BootIni tab. The code is:
[boot loader]
timeout=30
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Windows XP Media Center
Edition" /noexecute=optin /fastdetect
C:\CMDCONS\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons

As you can see, the recovery console is activated (I did that), which slows
down boot-up because the system prompts the user to select Normal or Recovery
mode. Now that I am virus-free, I don't know how to uninstall/deactivate the
Recovery console so that it no longer prompts at boot-up.


Paul

Hello,

I searched the forum and didn't see this exact problem addressed.

My PC (XP SP3) suffered a rough recovery from a malware infection. I.e.,
some services (like Print Spooler) no longer run.

The malware is gone, but when I go into Computer Management and try to
restart the services (like Print Spooler), an error message pops up saying
"Cannot start service in Safe Mode".

However, the PC is definitely not in safe mode. So, there must be some
internal flag that says otherwise. Restarting XP in safe mode and then in
normal mode doesn't un-stick it.

Additional info:

1. SFC produces the error:
C:\>sfc /scannow

Windows File Protection could not initiate a scan of protected system files.
The specific error code is 0x000006ba [The RPC server is unavailable.].

2. In the registry, SafeBoot_Option = Network. If I set it to zero and
reboot, it simply reverts to Network.

Thanks!!!!

Sounds like Safe Mode to me.

That is exactly the error you get when you try to run sfc /scannow in
Safe Mode which makes it bad advice.

Offering advice to run sfc /scannow in Safe Mode is a waste of time so
if anybody suggests that to you, tell them to try it on their own
system first. It is generally a waste of time and cause for must
frustration even in Normal mode.

You won't be able to do a Repair Install without an XP installation
CD. As usual, that little is often missing from that bit of advice.
Do you have a genuine bootable XP installation CD?

You do not have to "try" things, you need to figure things out and fix
things.

What instructions are you following that compel you to look to the
registry to resolve the issue? Was a registry change what got you
into this situation in the first place?

Did you use msconfig to change any settings in the boot.ini file
during your troubleshooting?

Paste up the contents of your boot.ini for a look see if you are not
sure.
.

 

[Jose]

Philo & Jose, thanks for your responses.

I have been installing PC operating systems since 1986, but haven't done a
repair install in years.  So, I am trying to manually fix the system first,
and do a repair install as a last-resort.

Jose - aside from the failed services, the system is operating normally and
clearly not in Safe Mode.  My assumption is that an internal software flag is
stuck on, and that's what drove me to inspect the registry.  Also, one of the
malware infections I had was "Vundo", which according to some user groups
changes the Safe Mode registry entries.

In msconfig, no boxes are checked in the BootIni tab. The code is:
[boot loader]
timeout=30
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Windows XP Media Center
Edition" /noexecute=optin /fastdetect
C:\CMDCONS\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons

As you can see, the recovery console is activated (I did that), which slows
down boot-up because the system prompts the user to select Normal or Recovery
mode.  Now that I am virus-free, I don't know how to uninstall/deactivate the
Recovery console so that it no longer prompts at boot-up.

Paul

Hello,
I searched the forum and didn't see this exact problem addressed.
My PC (XP SP3) suffered a rough recovery from a malware infection. I.e.,
some services (like Print Spooler) no longer run.
The malware is gone, but when I go into Computer Management and try to
restart the services (like Print Spooler), an error message pops up saying
"Cannot start service in Safe Mode".
However, the PC is definitely not in safe mode. So, there must be some
internal flag that says otherwise. Restarting XP in safe mode and then in
normal mode doesn't un-stick it.
Additional info:
1. SFC produces the error:
C:\>sfc /scannow
Windows File Protection could not initiate a scan of protected systemfiles.
The specific error code is 0x000006ba [The RPC server is unavailable.].
2. In the registry, SafeBoot_Option = Network. If I set it to zero and
reboot, it simply reverts to Network.
Thanks!!!!

Sounds like Safe Mode to me.

That is exactly the error you get when you try to run sfc /scannow in
Safe Mode which makes it bad advice.

Offering advice to run sfc /scannow in Safe Mode is a waste of time so
if anybody suggests that to you, tell them to try it on their own
system first.  It is generally a waste of time and cause for must
frustration even in Normal mode.

You won't be able to do a Repair Install without an XP installation
CD.  As usual, that little is often missing from that bit of advice.
Do you have a genuine bootable XP installation CD?

You do not have to "try" things, you need to figure things out and fix
things.

What instructions are you following that compel you to look to the
registry to resolve the issue?  Was a registry change what got you
into this situation in the first place?

Did you use msconfig to change any settings in the boot.ini file
during your troubleshooting?

Paste up the contents of your boot.ini for a look see if you are not
sure.
.

Your boot time is slow because you are telling it to wait 30 seconds
for you to decide to boot XP or RC.

timeout=30 <--seconds

If you don't chose, it will take the default which in your case is XP.

I have mine set to 3 and I like it like that.

The RC and Safe Mode are not the same thing. Is that your problem -
too long too boot?

sfc /scannow will still not run in Safe Mode though

Make sure you are choosing/booting XP, then see if you still have
issues to resolve and if yes, do this next:

Reduce the chances of malicious software by running some scans.

Download, install, update and do a full scan with these free malware
detection programs
then resolve any remaining issues:

Malwarebytes (MBAM): http://malwarebytes.org/
SUPERAntiSpyware: (SAS): http://www.superantispyware.com/

These can be uninstalled later if desired.

Reduce the number of questions, guessing and trying things that might
work maybe
by supplying more information:

Click Start, Run and in the box enter:

msinfo32

Click OK, and when the System Summary info appears, click Edit, Select
All, Copy and then paste
back here.

There would be some personal information (like System Name and User
Name) or whatever appears to
be only your business that you can delete from the paste.

 

[Chicago_XP_user]

everything I could get my hands on - ZASS, SpyBot, Housecall, Hijack This,
Malwarebytes, Super Antispyware, RootkitBuster, RegistryMechanic, TeaTimer,
RuBotted.

What software did you use to clean your system?

--


--

Philo & Jose, thanks for your responses.

I have been installing PC operating systems since 1986, but haven't done a
repair install in years. So, I am trying to manually fix the system
first,
and do a repair install as a last-resort.

Jose - aside from the failed services, the system is operating normally
and
clearly not in Safe Mode. My assumption is that an internal software flag
is
stuck on, and that's what drove me to inspect the registry. Also, one of
the
malware infections I had was "Vundo", which according to some user groups
changes the Safe Mode registry entries.

In msconfig, no boxes are checked in the BootIni tab. The code is:
[boot loader]
timeout=30
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Windows XP Media Center
Edition" /noexecute=optin /fastdetect
C:\CMDCONS\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons

As you can see, the recovery console is activated (I did that), which
slows
down boot-up because the system prompts the user to select Normal or
Recovery
mode. Now that I am virus-free, I don't know how to uninstall/deactivate
the
Recovery console so that it no longer prompts at boot-up.


Paul

On Dec 18, 11:53 am, Chicago_XP_user
Hello,

I searched the forum and didn't see this exact problem addressed.

My PC (XP SP3) suffered a rough recovery from a malware infection.
I.e.,
some services (like Print Spooler) no longer run.

The malware is gone, but when I go into Computer Management and try to
restart the services (like Print Spooler), an error message pops up
saying
"Cannot start service in Safe Mode".

However, the PC is definitely not in safe mode. So, there must be some
internal flag that says otherwise. Restarting XP in safe mode and then
in
normal mode doesn't un-stick it.

Additional info:

1. SFC produces the error:
C:\>sfc /scannow

Windows File Protection could not initiate a scan of protected system
files.
The specific error code is 0x000006ba [The RPC server is unavailable.].

2. In the registry, SafeBoot_Option = Network. If I set it to zero and
reboot, it simply reverts to Network.

Thanks!!!!

Sounds like Safe Mode to me.

That is exactly the error you get when you try to run sfc /scannow in
Safe Mode which makes it bad advice.

Offering advice to run sfc /scannow in Safe Mode is a waste of time so
if anybody suggests that to you, tell them to try it on their own
system first. It is generally a waste of time and cause for must
frustration even in Normal mode.

You won't be able to do a Repair Install without an XP installation
CD. As usual, that little is often missing from that bit of advice.
Do you have a genuine bootable XP installation CD?

You do not have to "try" things, you need to figure things out and fix
things.

What instructions are you following that compel you to look to the
registry to resolve the issue? Was a registry change what got you
into this situation in the first place?

Did you use msconfig to change any settings in the boot.ini file
during your troubleshooting?

Paste up the contents of your boot.ini for a look see if you are not
sure.
.

.

 

[Chicago_XP_user]

The RC and Safe Mode are not the same thing. Is that your problem -

too long too boot?

I don't care about boot time - my concern was that I thought Recovery
Console might be a partial cause (or symptom) of XP thinking it is in Safe
Mode. So, if I could uninstall or deactivate RC, maybe that would solve all
or part of my issue.

Download, install, update and do a full scan with these free malware

yep, I've done that with a half-dozen different spps - system is clean. My
Safe Mode problem stems from either the original virus infection or damage
during disinfection.

Click Start, Run and in the box enter: msinfo32

Here it is; did you also want driver info?
OS Name Microsoft Windows XP Professional
Version 5.1.2600 Service Pack 3 Build 2600
OS Manufacturer Microsoft Corporation
System Name
System Manufacturer TOSHIBA
System Model Satellite A105
System Type X86-based PC
Processor x86 Family 6 Model 15 Stepping 6 GenuineIntel ~1662 Mhz
BIOS Version/Date Phoenix Technologies LTD 2.00, 8/30/2006
SMBIOS Version 2.31
Windows Directory C:\WINDOWS
System Directory C:\WINDOWS\system32
Boot Device \Device\HarddiskVolume1
Locale United States
Hardware Abstraction Layer Version = "5.1.2600.5512 (xpsp.080413-2111)"
User Name
Time Zone Central Standard Time
Total Physical Memory 1,024.00 MB
Available Physical Memory 466.59 MB
Total Virtual Memory 2.00 GB
Available Virtual Memory 1.96 GB
Page File Space 2.38 GB
Page File C:\pagefile.sys


Thank you.

Paul

Philo & Jose, thanks for your responses.

I have been installing PC operating systems since 1986, but haven't done a
repair install in years. So, I am trying to manually fix the system first,
and do a repair install as a last-resort.

Jose - aside from the failed services, the system is operating normally and
clearly not in Safe Mode. My assumption is that an internal software flag is
stuck on, and that's what drove me to inspect the registry. Also, one of the
malware infections I had was "Vundo", which according to some user groups
changes the Safe Mode registry entries.

In msconfig, no boxes are checked in the BootIni tab. The code is:
[boot loader]
timeout=30
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Windows XP Media Center
Edition" /noexecute=optin /fastdetect
C:\CMDCONS\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons

As you can see, the recovery console is activated (I did that), which slows
down boot-up because the system prompts the user to select Normal or Recovery
mode. Now that I am virus-free, I don't know how to uninstall/deactivate the
Recovery console so that it no longer prompts at boot-up.

Paul

On Dec 18, 11:53 am, Chicago_XP_user
Hello,

I searched the forum and didn't see this exact problem addressed.

My PC (XP SP3) suffered a rough recovery from a malware infection. I.e.,
some services (like Print Spooler) no longer run.

The malware is gone, but when I go into Computer Management and try to
restart the services (like Print Spooler), an error message pops up saying
"Cannot start service in Safe Mode".

However, the PC is definitely not in safe mode. So, there must be some
internal flag that says otherwise. Restarting XP in safe mode and then in
normal mode doesn't un-stick it.

Additional info:

1. SFC produces the error:
C:\>sfc /scannow

Windows File Protection could not initiate a scan of protected system files.
The specific error code is 0x000006ba [The RPC server is unavailable.].

2. In the registry, SafeBoot_Option = Network. If I set it to zero and
reboot, it simply reverts to Network.

Sounds like Safe Mode to me.

That is exactly the error you get when you try to run sfc /scannow in
Safe Mode which makes it bad advice.

Offering advice to run sfc /scannow in Safe Mode is a waste of time so
if anybody suggests that to you, tell them to try it on their own
system first. It is generally a waste of time and cause for must
frustration even in Normal mode.

You won't be able to do a Repair Install without an XP installation
CD. As usual, that little is often missing from that bit of advice.
Do you have a genuine bootable XP installation CD?

You do not have to "try" things, you need to figure things out and fix
things.

What instructions are you following that compel you to look to the
registry to resolve the issue? Was a registry change what got you
into this situation in the first place?

Did you use msconfig to change any settings in the boot.ini file
during your troubleshooting?

Paste up the contents of your boot.ini for a look see if you are not
sure.
.

Your boot time is slow because you are telling it to wait 30 seconds
for you to decide to boot XP or RC.

timeout=30 <--seconds

If you don't chose, it will take the default which in your case is XP.

I have mine set to 3 and I like it like that.

The RC and Safe Mode are not the same thing. Is that your problem -
too long too boot?

sfc /scannow will still not run in Safe Mode though

Make sure you are choosing/booting XP, then see if you still have
issues to resolve and if yes, do this next:

Reduce the chances of malicious software by running some scans.

Download, install, update and do a full scan with these free malware
detection programs
then resolve any remaining issues:

Malwarebytes (MBAM): http://malwarebytes.org/
SUPERAntiSpyware: (SAS): http://www.superantispyware.com/

These can be uninstalled later if desired.

Reduce the number of questions, guessing and trying things that might
work maybe
by supplying more information:

Click Start, Run and in the box enter:

msinfo32

Click OK, and when the System Summary info appears, click Edit, Select
All, Copy and then paste
back here.

There would be some personal information (like System Name and User
Name) or whatever appears to
be only your business that you can delete from the paste.


.

 

[Chicago_XP_user]

I don't have 100% confidence in a repair install, so I want to try to fix it
manually first. Also, all of my restore points vanished after I turned off
system restore to install Malwarebytes (which they recommended).

Sounds like you have left over damage from the malware, either perform a
repair install or use a system restore point from before the infection,
keeping in mind that your restore points can re-infect the machine if
they're compromised.

--


--

Hello,

I searched the forum and didn't see this exact problem addressed.

My PC (XP SP3) suffered a rough recovery from a malware infection. I.e.,
some services (like Print Spooler) no longer run.

The malware is gone, but when I go into Computer Management and try to
restart the services (like Print Spooler), an error message pops up saying
"Cannot start service in Safe Mode".

However, the PC is definitely not in safe mode. So, there must be some
internal flag that says otherwise. Restarting XP in safe mode and then in
normal mode doesn't un-stick it.

Additional info:

1. SFC produces the error:
C:\>sfc /scannow

Windows File Protection could not initiate a scan of protected system
files.
The specific error code is 0x000006ba [The RPC server is unavailable.].


2. In the registry, SafeBoot_Option = Network. If I set it to zero and
reboot, it simply reverts to Network.


Thanks!!!!

.

 

[Jose]

Hello,

I searched the forum and didn't see this exact problem addressed.

My PC (XP SP3) suffered a rough recovery from a malware infection. I.e.,
some services (like Print Spooler) no longer run.

The malware is gone, but when I go into Computer Management and try to
restart the services (like Print Spooler), an error message pops up saying
"Cannot start service in Safe Mode".

However, the PC is definitely not in safe mode. So, there must be some
internal flag that says otherwise. Restarting XP in safe mode and then in
normal mode doesn't un-stick it.

Additional info:

1. SFC produces the error:
C:\>sfc /scannow

Windows File Protection could not initiate a scan of protected system files.
The specific error code is 0x000006ba [The RPC server is unavailable.].

2. In the registry, SafeBoot_Option = Network. If I set it to zero and
reboot, it simply reverts to Network.

Thanks!!!!

I do not have a safeboot_option in my registry...

Let me do some more testing since there are a couple things...

I would leave the RC alone for the moment.

 

[Jose]

I don't have 100% confidence in a repair install, so I want to try to fixit
manually first.  Also, all of my restore points vanished after I turnedoff
system restore to install Malwarebytes (which they recommended).

Where does MBAM recommend turning off System Restore for installation?

Do you have SAFEBOOT_OPTION in your registry?

If yes, where and what are the values?

I am trying to recreate your problem to no avail!

 

[Chicago_XP_user]

Malwarebytes doesn't recommend turning of system restore to install it, just
to clear restore points during cleanup to remove possible infected points.

Several user forums recommended that stubborn malware infections were best
treated by disabling Sys Restore, rebooting into Safe Networking mode, and
then downloading & installing MBAM (and some other anti-malware apps). After
I did that, all of my system restore points vanished.

--


--

I don't have 100% confidence in a repair install, so I want to try to fix
it
manually first. Also, all of my restore points vanished after I turned
off
system restore to install Malwarebytes (which they recommended).

Sounds like you have left over damage from the malware, either perform a
repair install or use a system restore point from before the infection,
keeping in mind that your restore points can re-infect the machine if
they're compromised.

--


--
message Hello,

I searched the forum and didn't see this exact problem addressed.

My PC (XP SP3) suffered a rough recovery from a malware infection.
I.e.,
some services (like Print Spooler) no longer run.

The malware is gone, but when I go into Computer Management and try to
restart the services (like Print Spooler), an error message pops up
saying
"Cannot start service in Safe Mode".

However, the PC is definitely not in safe mode. So, there must be some
internal flag that says otherwise. Restarting XP in safe mode and then
in
normal mode doesn't un-stick it.

Additional info:

1. SFC produces the error:
C:\>sfc /scannow

Windows File Protection could not initiate a scan of protected system
files.
The specific error code is 0x000006ba [The RPC server is unavailable.].


2. In the registry, SafeBoot_Option = Network. If I set it to zero and
reboot, it simply reverts to Network.


Thanks!!!!

.

.

 

[Chicago_XP_user]

Do you have SAFEBOOT_OPTION in your registry?

If yes, where and what are the values?

My registry contains 2 instances of SAFEBOOT_OPTION = NETWORK

1. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\Session Manager\Environment

2. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session
Manager\Environment

I am trying to recreate your problem to no avail!

it's not on your machine if you boot to Safe Mode with Networking?

 

[Jose]

My registry contains 2 instances of SAFEBOOT_OPTION = NETWORK

1. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\Session Manager\Environment

2. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session
Manager\Environment


it's not on your machine if you boot to Safe Mode with Networking?

When my system boots if I press F8 and actually choose some kind of
Safe Mode (with Networking for example), the registry entry is there.

If I choose a normal boot, or just let XP boot by itself, it is not
there. This is good.

Are you sure you are booting normally and not choosing some kind of
Safe Mode and then you still see that value in the registry?

I'm not saying it isn't so, I just want to understand it and fix it.
It is hard to make it not work!

There is malware that thwarts boot methods involving Normal and Safe
Modes so sometimes you have to outsmart it.

You posted your boot.ini - where did you get that? Whatever method
you used (it looks okay), let's do it another way.

Right Click My Computer, Properties, Startup and Recovery, Settings
and click Edit to open your boot.ini with Notepad.

Select all the text, copy and paste back here and exit your way out
without making any changes, or you can change your timeout from 30 to
5 seconds if 30 is too long, save, reboot, etc.

You installed Recovery Console which is good. Next time you boot,
choose Recovery Console to make sure it works.

It should go something like this:

Select the installation you want to access (usually 1: C:\WINDOWS)

You may be asked to enter the Administrator password (usually empty).

You should be in the C:\WINDOWS folder. This is the same as the C:
\WINDOWS folder you see in explorer.

Just type exit from the RC prompt to reboot your system and let it
boot normally. I just want to make sure RC works if we need it.

 

[Chicago_XP_user]

Are you sure you are booting normally and not choosing some kind of

Safe Mode and then you still see that value in the registry?

it's just the ordinary normal mode.

There is malware that thwarts boot methods involving Normal and Safe
Modes so sometimes you have to outsmart it.

yep - my Safe Mode problem stems either from the virus itself or from damage
by one of the anti-malware programs I ran. The system is virus-free.

You installed Recovery Console which is good. Next time you boot,
choose Recovery Console to make sure it works.

I can enter into RC with no problem. I don't care about the 30 second
timeout right now.

Right Click My Computer, Properties, Startup and Recovery, Settings
and click Edit to open your boot.ini with Notepad.

[boot loader]
timeout=30
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Windows XP Media Center
Edition" /noexecute=optin /fastdetect
C:\CMDCONS\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons

I will be @ my mom's over Xmas, so pls be patient if my replies to this
thread take a day or two.

Have a good Christmas!!!