# Why can't I boot into safe mode?

**URL:** <https://boards.straightdope.com/t/why-cant-i-boot-into-safe-mode/397652>\
**Category:** Factual Questions\
**Created:** [March 27, 2007, 5:10am UTC](https://boards.straightdope.com/t/why-cant-i-boot-into-safe-mode/397652 "2007-03-27T05:10:26Z")\
**Posts on this page:** 18\
**Page:** 1

<div class="post-metadata">

**Author:** ![MerryMagdalen](https://avatars.discourse-cdn.com/v4/letter/m/c2a13f/32.png) [@MerryMagdalen](https://boards.straightdope.com/u/MerryMagdalen)\
**Post date:** [March 27, 2007, 5:10am UTC](https://boards.straightdope.com/t/why-cant-i-boot-into-safe-mode/397652/1 "2007-03-27T05:10:26Z")

</div>

(I did read the “Computer Questions” thread, I swear…well, ok, I went through it with the “Find” command, but still…)

I have a computer which is about 8 years old. It runs Windows 2000 Pro. AVG runs and updates every morning automatically, and I have just run both AdAware and SpyBot.

When I run AdAware/Spybot my AVG pops up with a “Threat Detected!” box, but I can neither heal nor quarantine the file.

Some cursory googling told me that mssync2020 is a Trojan. I also found detailed instructions on how to remove it. This requires going into safe mode. I then found instructions for getting into safe mode. Bully.

Except not. I purchased my computer from the company I used to work for. Since multiple people used the same computer we all had passwords to log on. When I try to boot into safe mode it will not take my password. It will not take no password at all.

So my questions are several: Am I missing something? Is there some extra step I’m missing (F8 during startup, select “Safe Mode”, waiting, getting rejected)?

And if it turns out that I cannot get into safe mode, could I use a program like Hijack This to remove this Trojan?

---

<div class="post-metadata">

**Author:** ![drachillix](https://avatars.discourse-cdn.com/v4/letter/d/48db29/32.png) [@drachillix](https://boards.straightdope.com/u/drachillix)\
**Post date:** [March 27, 2007, 5:38am UTC](https://boards.straightdope.com/t/why-cant-i-boot-into-safe-mode/397652/2 "2007-03-27T05:38:46Z")

</div>

There are several programs out there that can strip an XP password and IME they work on 2K as well.

> **[Active@ Password Changer - Windows Account Password Recovery Software &...](https://www.password-changer.com/index.html)**
>
> Active@ Password Changer is a password recovery software for Windows 8/7/Vista/XP... in case an Administrator's password is forgotten or lost.

This is the one I use in my business, works like a charm. There may be free ones out there but I also know many of the free solutions are not all that trustworthy.

Hijack this really only helps with browser modifications.

---

<div class="post-metadata">

**Author:** ![MerryMagdalen](https://avatars.discourse-cdn.com/v4/letter/m/c2a13f/32.png) [@MerryMagdalen](https://boards.straightdope.com/u/MerryMagdalen)\
**Post date:** [March 27, 2007, 5:44am UTC](https://boards.straightdope.com/t/why-cant-i-boot-into-safe-mode/397652/3 "2007-03-27T05:44:56Z")

</div>

Please explain “strip a password”?

From looking at the link you posted, I could get this program, run it, and access my system from now on without a password. Is this correct? Because that would be sweet. I have/had enough admin privileges on this box to download programs (and do anything else day-to-day), but I know I don’t have full access.

---

<div class="post-metadata">

**Author:** ![drachillix](https://avatars.discourse-cdn.com/v4/letter/d/48db29/32.png) [@drachillix](https://boards.straightdope.com/u/drachillix)\
**Post date:** [March 27, 2007, 5:54am UTC](https://boards.straightdope.com/t/why-cant-i-boot-into-safe-mode/397652/4 "2007-03-27T05:54:45Z")

</div>

[QUOTE=MerryMagdalen]  
Please explain “strip a password”?

From looking at the link you posted, I could get this program, run it, and access my system from now on without a password. Is this correct?  
[/QUOTE]

correct.

---

<div class="post-metadata">

**Author:** ![MerryMagdalen](https://avatars.discourse-cdn.com/v4/letter/m/c2a13f/32.png) [@MerryMagdalen](https://boards.straightdope.com/u/MerryMagdalen)\
**Post date:** [March 27, 2007, 5:59am UTC](https://boards.straightdope.com/t/why-cant-i-boot-into-safe-mode/397652/5 "2007-03-27T05:59:59Z")

</div>

Do you think it would be reasonably easy for a non-expert/IT person to use that program, or should I wait until I have my Dad on standby? 🙂

---

<div class="post-metadata">

**Author:** ![Klaatu](https://avatars.discourse-cdn.com/v4/letter/k/e0b2c6/32.png) [@Klaatu](https://boards.straightdope.com/u/Klaatu)\
**Post date:** [March 27, 2007, 7:45am UTC](https://boards.straightdope.com/t/why-cant-i-boot-into-safe-mode/397652/6 "2007-03-27T07:45:42Z")

</div>

You might want to wait for your dad. 🙂 Even if you get into safe mode, “manual” removal instructions for many trojans/malware can involve editing the registry, deleting files from system folders, and generally doing things that can screw up your computer if you are not real familiar with the system.

I really don’t know your knowledge, and mean no offense. If you are comfortable playing around with the “guts” of the system, go for it.

---

<div class="post-metadata">

**Author:** ![MerryMagdalen](https://avatars.discourse-cdn.com/v4/letter/m/c2a13f/32.png) [@MerryMagdalen](https://boards.straightdope.com/u/MerryMagdalen)\
**Post date:** [March 27, 2007, 9:10am UTC](https://boards.straightdope.com/t/why-cant-i-boot-into-safe-mode/397652/7 "2007-03-27T09:10:27Z")

</div>

Well, it helps that I know what I’m looking for. I did Autorun and there are several copies of the program on their list (which I figured, since I couldn’t close the threat window from AVG just once).

Dad is a truck driver (formerly employed by Diebold and Avaya…damn economy) so I don’t know when he’ll be available and undistracted again.

When I was little I did use DOS on our computer (I even wrote programs in BASIC) so I’m somewhat familiar with the guts. I’ve even installed my own memory!

I’m not totally ignorant, but I’m definitely not a master either.

---

<div class="post-metadata">

**Author:** ![Jake](https://avatars.discourse-cdn.com/v4/letter/j/f475e1/32.png) [@Jake](https://boards.straightdope.com/u/Jake)\
**Post date:** [March 27, 2007, 4:45pm UTC](https://boards.straightdope.com/t/why-cant-i-boot-into-safe-mode/397652/8 "2007-03-27T16:45:18Z")

</div>

When the box asking for your password comes up, have you tried just hitting “Enter”? This occasionally works for me.

---

<div class="post-metadata">

**Author:** ![drachillix](https://avatars.discourse-cdn.com/v4/letter/d/48db29/32.png) [@drachillix](https://boards.straightdope.com/u/drachillix)\
**Post date:** [March 27, 2007, 5:00pm UTC](https://boards.straightdope.com/t/why-cant-i-boot-into-safe-mode/397652/9 "2007-03-27T17:00:36Z")

</div>

[QUOTE=MerryMagdalen]  
Do you think it would be reasonably easy for a non-expert/IT person to use that program, or should I wait until I have my Dad on standby? 🙂  
[/QUOTE]

The password stripper program is pretty straightforward, the only tricky thing is you have to burn it to a CD and boot from it, from there on out its just follow the prompts.

For me its been a real treat, I get to charge a 1hr minimum call @$49 for something that takes 3 min. I also get a free upgrade to the vista version since I was already a paying user 🆒 …didn’t know that until I went to the site to grab a link for you.

---

<div class="post-metadata">

**Author:** ![MerryMagdalen](https://avatars.discourse-cdn.com/v4/letter/m/c2a13f/32.png) [@MerryMagdalen](https://boards.straightdope.com/u/MerryMagdalen)\
**Post date:** [March 27, 2007, 10:49pm UTC](https://boards.straightdope.com/t/why-cant-i-boot-into-safe-mode/397652/10 "2007-03-27T22:49:36Z")

</div>

So I download the program onto a CD, and during startup I push F8 and direct the computer to boot from the CD? Other than that, I think I can figure it out. Thanks so much for the help!

---

<div class="post-metadata">

**Author:** ![drachillix](https://avatars.discourse-cdn.com/v4/letter/d/48db29/32.png) [@drachillix](https://boards.straightdope.com/u/drachillix)\
**Post date:** [March 28, 2007, 1:13am UTC](https://boards.straightdope.com/t/why-cant-i-boot-into-safe-mode/397652/11 "2007-03-28T01:13:55Z")

</div>

[QUOTE=MerryMagdalen]  
So I download the program onto a CD, and during startup I push F8 and direct the computer to boot from the CD? Other than that, I think I can figure it out. Thanks so much for the help!  
[/QUOTE]

Yup

---

<div class="post-metadata">

**Author:** ![Klaatu](https://avatars.discourse-cdn.com/v4/letter/k/e0b2c6/32.png) [@Klaatu](https://boards.straightdope.com/u/Klaatu)\
**Post date:** [March 28, 2007, 3:44am UTC](https://boards.straightdope.com/t/why-cant-i-boot-into-safe-mode/397652/12 "2007-03-28T03:44:23Z")

</div>

[QUOTE=MerryMagdalen]  
Well, it helps that I know what I’m looking for. I did Autorun and there are several copies of the program on their list (which I figured, since I couldn’t close the threat window from AVG just once).

Dad is a truck driver (formerly employed by Diebold and Avaya…damn economy) so I don’t know when he’ll be available and undistracted again.

When I was little I did use DOS on our computer (I even wrote programs in BASIC) so I’m somewhat familiar with the guts. I’ve even installed my own memory!

I’m not totally ignorant, but I’m definitely not a master either.  
[/QUOTE]

Cool. You should be able to take this on easily. Good luck, and please let us know what you had to do to eradicate this pest.

---

<div class="post-metadata">

**Author:** ![MerryMagdalen](https://avatars.discourse-cdn.com/v4/letter/m/c2a13f/32.png) [@MerryMagdalen](https://boards.straightdope.com/u/MerryMagdalen)\
**Post date:** [March 28, 2007, 4:54am UTC](https://boards.straightdope.com/t/why-cant-i-boot-into-safe-mode/397652/13 "2007-03-28T04:54:26Z")

</div>

Well, I discovered that this is a password-stealing Trojan, as well as a keylogger. I haven’t noticed any strange activity in my bank account or anything - I don’t think it finds me particularly interesting. 😃 However, I’d hate for it to start now.

So I am going to a _different_ computer to purchase that program that **drachillix** recommended. When I can get into safe mode, I’ll go from there.

'Cept I also have to figure out what SAM databases and logical drives are. Gurf.

---

<div class="post-metadata">

**Author:** ![drachillix](https://avatars.discourse-cdn.com/v4/letter/d/48db29/32.png) [@drachillix](https://boards.straightdope.com/u/drachillix)\
**Post date:** [March 28, 2007, 5:06am UTC](https://boards.straightdope.com/t/why-cant-i-boot-into-safe-mode/397652/14 "2007-03-28T05:06:59Z")

</div>

[QUOTE=MerryMagdalen]  
Well, I discovered that this is a password-stealing Trojan, as well as a keylogger. I haven’t noticed any strange activity in my bank account or anything - I don’t think it finds me particularly interesting. 😃 However, I’d hate for it to start now.

So I am going to a _different_ computer to purchase that program that **drachillix** recommended. When I can get into safe mode, I’ll go from there.

'Cept I also have to figure out what SAM databases and logical drives are. Gurf.  
[/QUOTE]

Sequencial Access via Metadata, for your purposes, its where windows keeps its user and password data.

Logical drives are the partitions.

For example one drive divided into two partitions, C: and D: are one physical drive but two logical drives. There are RAID systems that can merge multiple physical drives into one logical drive as well just to make things illogical 😃

---

<div class="post-metadata">

**Author:** ![Klaatu](https://avatars.discourse-cdn.com/v4/letter/k/e0b2c6/32.png) [@Klaatu](https://boards.straightdope.com/u/Klaatu)\
**Post date:** [March 28, 2007, 6:17am UTC](https://boards.straightdope.com/t/why-cant-i-boot-into-safe-mode/397652/15 "2007-03-28T06:17:02Z")

</div>

Oh, and **drachillix** is damn good, but don’t fall for the “Special SDMB Rate” of $89.00/hr for “personal service” 😛

---

<div class="post-metadata">

**Author:** ![MerryMagdalen](https://avatars.discourse-cdn.com/v4/letter/m/c2a13f/32.png) [@MerryMagdalen](https://boards.straightdope.com/u/MerryMagdalen)\
**Post date:** [March 28, 2007, 6:18am UTC](https://boards.straightdope.com/t/why-cant-i-boot-into-safe-mode/397652/16 "2007-03-28T06:18:36Z")

</div>

I ran the password-change program. I had it scan all drives - logical, illogical, illegible, whatever. One SAM database.

It contained two profiles - the default admin and the default guest. My profile and username are firstinitiallastname. It’s not there.

How dangerous would it be to erase the password for the default admin and then try to log into safe mode that way? If I logged in as the admin, would I still have access to all the programs in my (personal) profile? Am I asking way too many questions? Should I just give in and get a new computer? (I can’t afford one at all, so it’s this one or none for at least a year.)

**Klaatu** if I actually get this fixed it will be a miracle and I will bake and send cookies. And I don’t bake.

---

<div class="post-metadata">

**Author:** ![Klaatu](https://avatars.discourse-cdn.com/v4/letter/k/e0b2c6/32.png) [@Klaatu](https://boards.straightdope.com/u/Klaatu)\
**Post date:** [March 28, 2007, 6:45am UTC](https://boards.straightdope.com/t/why-cant-i-boot-into-safe-mode/397652/17 "2007-03-28T06:45:50Z")

</div>

Well, you have taken the plunge. I would wait for **drachillix** to answer as I have not used that particular prog.

---

<div class="post-metadata">

**Author:** ![MerryMagdalen](https://avatars.discourse-cdn.com/v4/letter/m/c2a13f/32.png) [@MerryMagdalen](https://boards.straightdope.com/u/MerryMagdalen)\
**Post date:** [March 28, 2007, 9:43am UTC](https://boards.straightdope.com/t/why-cant-i-boot-into-safe-mode/397652/18 "2007-03-28T09:43:49Z")

</div>

I think that part of the problem is that I’m a user on a network that no longer exists. So I can log into my own computer, but all the stuff that would have been taken care of by Those IT People Over There is no longer available to me.
