Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Laptop Will Not Start In Safe Mode


  • Please log in to reply
35 replies to this topic

#1 58Custom

58Custom

  • Members
  • 31 posts
  • OFFLINE
  •  
  • Local time:05:22 PM

Posted 08 June 2012 - 09:13 AM

Windows 7 Home Premium, Emachines E725 laptop.

I just got through dealing with an infection. Details in this thread:

http://www.bleepingcomputer.com/forums/topic455917.html

I restarted and F8ed my way to Advanced Boot Options and selected Safe Mode with networking. It started up normally, got to the Users page, I selected my profile, typed in my password and the puter suddenly restarted. Huh. So I tried again and typed faster. The puter at first began to start up in safe mode then suddenly restarted. I tried one more time but this time when it got to the Profiles page I left it alone and counted. 12 seconds later it suddenly restarted by itself. So, I can not enter Safe Mode.

The infection has been removed and MSE shows that it is clear. Correlation is not causation so I can not say that the Safe Mode problem is related to the infection, and I can not even remember ever starting this particular machine in Safe Mode since I bought it new.

I welcome any assistance. TIA.

BC AdBot (Login to Remove)

 


#2 Artrooks

Artrooks

  • Members
  • 1,463 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New York
  • Local time:08:22 PM

Posted 08 June 2012 - 03:32 PM

Hello 58Custom,

Can we assume that your system boots up into normal windows without problems and that it just reboots after logging into your safe mode profile?

Things to try:
1) Create a new administrator account as a test (with or without a password).
  • Start-->Control Panel-->(view by large icons)-->User Accounts-->Manage another account-->Create a new account (i.e. name "Test")--> click Administrator--> Create account.
  • Test it by first logging into normal windows and then in safe mode.
  • Does it still reboot in safe mode with the "Test" Account?

2) Check for hard drive corruption by running chkdsk /R: http://www.sevenforums.com/tutorials/433-disk-check.html
  • Option one
  • Be sure to check both boxes (Step 8)
  • Restart the computer. Check disk will proceed through 5 stages and can take several hours to complete. If errors are found, it should be run again.

3) Run the System File Checker: http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html
  • Option two
  • Steps 1-2.
  • "If SFC could not fix something, then run the command again to see if it may be able to the next time. Sometimes it may take running the sfc /scannow command 3 or more times to completely fix everything that it's able to."

Regards,
Brooks



 


#3 58Custom

58Custom
  • Topic Starter

  • Members
  • 31 posts
  • OFFLINE
  •  
  • Local time:05:22 PM

Posted 08 June 2012 - 07:15 PM

Hello 58Custom,

Can we assume that your system boots up into normal windows without problems and that it just reboots after logging into your safe mode profile?


Yes, exactly. I tried your #1 and when attempting a Safe Mode boot under the new account it rebooted, so at least it's consistent. I will now perform your second test.

#4 58Custom

58Custom
  • Topic Starter

  • Members
  • 31 posts
  • OFFLINE
  •  
  • Local time:05:22 PM

Posted 08 June 2012 - 10:02 PM

Here are the results of the Check Disk scan. I shall now proceed to your test #3.



Log Name: Application
Source: Microsoft-Windows-Wininit
Date: 6/8/2012 7:45:21 PM
Event ID: 1001
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: Tom-PC
Description:


Checking file system on C:
The type of the file system is NTFS.
Volume label is eMachines.

A disk check has been scheduled.
Windows will now check the disk.

CHKDSK is verifying files (stage 1 of 5)...
367360 file records processed.

File verification completed.
655 large file records processed.

0 bad file records processed.

0 EA records processed.

93 reparse records processed.

CHKDSK is verifying indexes (stage 2 of 5)...
444672 index entries processed.

Index verification completed.
0 unindexed files scanned.

0 unindexed files recovered.

CHKDSK is verifying security descriptors (stage 3 of 5)...
367360 file SDs/SIDs processed.

Cleaning up 1265 unused index entries from index $SII of file 0x9.
Cleaning up 1265 unused index entries from index $SDH of file 0x9.
Cleaning up 1265 unused security descriptors.
Security descriptor verification completed.
38657 data files processed.

CHKDSK is verifying Usn Journal...
35498720 USN bytes processed.

Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
367344 files processed.

File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
25752916 free clusters processed.

Free space verification is complete.
CHKDSK discovered free space marked as allocated in the
master file table (MFT) bitmap.
Windows has made corrections to the file system.

231506209 KB total disk space.
127859972 KB in 286366 files.
157812 KB in 38658 indexes.
0 KB in bad sectors.
476761 KB in use by the system.
65536 KB occupied by the log file.
103011664 KB available on disk.

4096 bytes in each allocation unit.
57876552 total allocation units on disk.
25752916 allocation units available on disk.

Internal Info:
00 9b 05 00 ac f5 04 00 9b 02 09 00 00 00 00 00 ................
18 21 00 00 5d 00 00 00 00 00 00 00 00 00 00 00 .!..]...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................

Windows has finished checking your disk.
Please wait while your computer restarts.

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Wininit" Guid="{206f6dea-d3c5-4d10-bc72-989f03c8b84b}" EventSourceName="Wininit" />
<EventID Qualifiers="16384">1001</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2012-06-09T02:45:21.000000000Z" />
<EventRecordID>136590</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>Tom-PC</Computer>
<Security />
</System>
<EventData>
<Data>

Checking file system on C:
The type of the file system is NTFS.
Volume label is eMachines.

A disk check has been scheduled.
Windows will now check the disk.

CHKDSK is verifying files (stage 1 of 5)...
367360 file records processed.

File verification completed.
655 large file records processed.

0 bad file records processed.

0 EA records processed.

93 reparse records processed.

CHKDSK is verifying indexes (stage 2 of 5)...
444672 index entries processed.

Index verification completed.
0 unindexed files scanned.

0 unindexed files recovered.

CHKDSK is verifying security descriptors (stage 3 of 5)...
367360 file SDs/SIDs processed.

Cleaning up 1265 unused index entries from index $SII of file 0x9.
Cleaning up 1265 unused index entries from index $SDH of file 0x9.
Cleaning up 1265 unused security descriptors.
Security descriptor verification completed.
38657 data files processed.

CHKDSK is verifying Usn Journal...
35498720 USN bytes processed.

Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
367344 files processed.

File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
25752916 free clusters processed.

Free space verification is complete.
CHKDSK discovered free space marked as allocated in the
master file table (MFT) bitmap.
Windows has made corrections to the file system.

231506209 KB total disk space.
127859972 KB in 286366 files.
157812 KB in 38658 indexes.
0 KB in bad sectors.
476761 KB in use by the system.
65536 KB occupied by the log file.
103011664 KB available on disk.

4096 bytes in each allocation unit.
57876552 total allocation units on disk.
25752916 allocation units available on disk.

Internal Info:
00 9b 05 00 ac f5 04 00 9b 02 09 00 00 00 00 00 ................
18 21 00 00 5d 00 00 00 00 00 00 00 00 00 00 00 .!..]...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................

Windows has finished checking your disk.
Please wait while your computer restarts.
</Data>
</EventData>
</Event>

#5 58Custom

58Custom
  • Topic Starter

  • Members
  • 31 posts
  • OFFLINE
  •  
  • Local time:05:22 PM

Posted 08 June 2012 - 10:21 PM

For test three, Windows Resource Protection did not find any integrety violations.

#6 58Custom

58Custom
  • Topic Starter

  • Members
  • 31 posts
  • OFFLINE
  •  
  • Local time:05:22 PM

Posted 09 June 2012 - 08:33 AM

Good morning. Attempts to boot in safe mode after the above are still futile but the point at which the puter reboots itself happens sooner now. I tried to use SafeBoot.exe and it failed as well.

#7 Artrooks

Artrooks

  • Members
  • 1,463 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New York
  • Local time:08:22 PM

Posted 09 June 2012 - 10:09 AM

Hello,

Well, we can try to replace the safeboot registry keys. This can be done with a free program called Re-Enable2.
It is available as a portable app from here or with an installer from here.
The installer version is much smaller because it doesn't include the Net Framework 3.5 files. These are already installed on Vista/Windows 7, so the choice is yours.

First, before making any changes to the registry, it is important to create a backup.
  • Please create a new System Restore Point:
  • Right click on Computer on your Desktop or in the Start Menu and select Properties.
  • Click System Protection and then Create.
Second, start Re-Enable v2.
  • In the top menu, click Tools, Safe Mode Restore, and Windows Vista/Seven.
  • Click Yes to the confirmation prompt.
Finally, try to access Safe Mode once again.

Regards,
Brooks



 


#8 58Custom

58Custom
  • Topic Starter

  • Members
  • 31 posts
  • OFFLINE
  •  
  • Local time:05:22 PM

Posted 09 June 2012 - 11:01 AM

OK, I created a restore point, D/Led and installed Re-Enable2 and did the restore safe mode as you directed. I rebooted and was still unable to boot up in safe mode as previously described. Stubborn little problem.

#9 Artrooks

Artrooks

  • Members
  • 1,463 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New York
  • Local time:08:22 PM

Posted 09 June 2012 - 11:40 AM

Hello 58Custom,

I'm running out of ideas at the moment. In searching, I've found a few instances of this same problem, but no solutions that worked.

Your computer works in normal windows, so at least that's a plus and maybe something that you can live with in the short run. It may require a full Recovery Restore to repair the Safe Mode issue.

I'll keep looking for a solution. In the mean time, as you intially had a Java virus, make sure your Java is up to date by Checking here:
Uninstall versions older than "Version 7 Update 4" via Control Panel-->Programs and Features.

Maybe someone else will have additional suggestions.

Regards,
Brooks



 


#10 58Custom

58Custom
  • Topic Starter

  • Members
  • 31 posts
  • OFFLINE
  •  
  • Local time:05:22 PM

Posted 09 June 2012 - 12:02 PM

OK, and I performed the Java removal and update.

#11 Artrooks

Artrooks

  • Members
  • 1,463 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New York
  • Local time:08:22 PM

Posted 09 June 2012 - 01:55 PM

Hello,

Have you previously attempted a Startup Repair? It's a long shot but worth a try if you haven't.
  • Turn on or restart the computer.
  • Continually press the F8 key until the Advanced Boot Options Menu appears.
  • Select Repair My Computer.
  • Select your keyboard language preferences and click on Next.
  • Select your user name and type in the password, and then click on OK.
  • At the System Recovery Options screen, select Startup Repair
  • Startup Repair will run and attempt to fix any problems it finds.

Regards,
Brooks



 


#12 AustrAlien

AustrAlien

    Inquisitor


  • Members
  • 6,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cowra NSW Australia
  • Local time:10:22 AM

Posted 09 June 2012 - 08:10 PM

The system is crashing and re-starting when you attempt to start Windows in Safe Mode.

Let's try making a little change to the system settings, so that you get to see the BSOD error message when the system crashes:

Then attempt to start in Safe Mode. When the system crashes, it will not re-start: Instead, you will see a BSOD with error message.

  • Posted Image
  • Record the error message details (contained in the areas outlined in red, in the above example image), and post in your reply.

AustrAlien
Google is my friend. Make Google your friend too.

Posted Image

#13 AustrAlien

AustrAlien

    Inquisitor


  • Members
  • 6,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cowra NSW Australia
  • Local time:10:22 AM

Posted 09 June 2012 - 08:24 PM

I would like to get a look at the boot log.
  • Each Safe Mode startup is logged by default, but I would also like you to create a log of a normal startup also.
Please do the following:
  • Start tapping F8 after powering on the computer.
    The "Advanced Boot Options" menu will appear.
  • Use the UP/DOWN arrow keys to select "Enable Boot Logging".
  • Press <ENTER>.
    Windows will start normally.
This will log the files loaded, in the order in which they were loaded when starting Windows normally.
  • The log can be found in the WINDOWS folder
    C:\WINDOWS\ntbtlog.txt

Please zip up the ntbtlog.txt file and attach to your reply:
  • Right-click on ntbtlog.txt > Send to ... > Compressed (zipped) Folder.
    The zip file will be located in the same directory as the ntbtlog.txt file.
  • Attach the zip file to your next reply.
    When you click on Add Reply, you will see the facility to attach a file just below the box where you type your message.
:exclame: Note: The BC forums will allow a total attachment size of only 512 kb and what you need to attach may exceed this limit. In that case, please upload the zip file to a file sharing website of your choice and and post a link to it in this thread so that we can access your uploaded zip file.

See the suggestions in the following links for recommendations on file sharing websites:
  • http://lifehacker.com/388284/best-online-file-sharing-services
  • http://www.hongkiat.com/blog/15-great-free-online-file-sharing-alternatives/
  • http://www.smashingapps.com/2008/08/28/5-best-free-file-hosting-services-to-store-your-files.html

AustrAlien
Google is my friend. Make Google your friend too.

Posted Image

#14 58Custom

58Custom
  • Topic Starter

  • Members
  • 31 posts
  • OFFLINE
  •  
  • Local time:05:22 PM

Posted 10 June 2012 - 08:47 AM

Okie dokie.

I disabled auto restart and attempted safe mode start but the problem remains, no BSOD. So, after F8, in the advanced boot options page I selected disable auto boot and attempted safe mode start but the problem remains.
So, after F8, in the advanced boot options page I enabled boot logging and then attempted safe mode start and the resulting log file is attached.

Attached Files


Edited by 58Custom, 10 June 2012 - 08:48 AM.


#15 AustrAlien

AustrAlien

    Inquisitor


  • Members
  • 6,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cowra NSW Australia
  • Local time:10:22 AM

Posted 10 June 2012 - 06:39 PM

Let's try this ...

Disconnect ALL external devices that you have connected to the laptop (including mouse and keyboard).
  • Start the system normally.
    Success?

Now, shutdown the system, wait 10 seconds, and then attempt to start Windows in Safe Mode using the F8 method:
  • What happens?

AustrAlien
Google is my friend. Make Google your friend too.

Posted Image




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users