none
Can only start Windows 7 in "Disable Drivers Signature Enforcement" mode

    Question

  • I'm an IT Pro trying to solve a client's problem.

    As stated in title, Windows 7 (W7) will only start in "Disable Drivers Signature Enforcement"  (DDSE) mode. 

    Specs:  Dell Inspiron 1545 running W7 64-bit, 3GB RAM, Dual-Core T4400 CPU

    History:  Laptop PC had multiple trojan infection.  Was running Firefox 3.5, which was having issues with links until I upgraded to FF5.  Kaspersky is installed but won't run.  Norton was installed but wouldn't even show itself except in Add/Remove.  Used Norton uninstaller to remove all instances of Norton.  Installed Security Essentials and Malwarebytes.  SE found and removed multiple virus/trojan infections.  Malwarebytes found nothing.  Updated W7.  Rebooted.  Still, it will neither fix the boot nor boot up in normal mode.  Nor in any other mode save DDSE.

    tried bcdedit -set TURNSIGNING OFF (which was successful) but no change in the boot process.  (I don't like this option, as it reduces security, but was willing to go there if it worked.)

    My primary question:  Why is the PC booting up in DDSE mode but not Normal mode? I'm at my wit's end.

    Let me know if you need more data to help solve this problem.

    Thanks in advance for any help you can provide.
    Friday, July 15, 2011 5:59 PM

All replies

  • I also ran SIGVERIF and all drivers checked out
    Friday, July 15, 2011 6:05 PM
  • Can you upload your C:\Windows\inf\setupapi.dev.log to a publicly accessible location (like skydrive)?
    Friday, July 15, 2011 6:12 PM
  • https://skydrive.live.com/redir.aspx?cid=f5fdf404104fe9cb&resid=F5FDF404104FE9CB!133
    Friday, July 15, 2011 7:04 PM
  • https://skydrive.live.com/redir.aspx?cid=f5fdf404104fe9cb&resid=F5FDF404104FE9CB!133
    Friday, July 15, 2011 7:04 PM
  • I don't have permissions, can you make sure it's public?

    Friday, July 15, 2011 7:29 PM
  • Permission granted
    Friday, July 15, 2011 7:34 PM
  • Use a different computer to put System Sweeper on a CD or USB stick: http://connect.microsoft.com/systemsweeper to make sure there aren't any rootkits left over.

    Friday, July 15, 2011 10:21 PM
  • Run these uninstallers for kaspersky and Norton. See if that helps.

    http://support.kasperskyamericas.com/knowledge-base-article/1464   which leads you here : http://www.kaspersky.com/downloads/utils/kavremover.exe

    ftp://ftp.symantec.com/public/english_us_canada/removal_tools/Norton_Removal_Tool.exe

     

    Have you opened an elevated command prompt and run sfc?

     

    Frankly, I would backup any data the client would like to keep and perform a reinstall or a complete pc restore. (I know, there is no image. Perhaps they'll learn this time)

    Saturday, July 16, 2011 11:01 AM
  • Hi,

    First I want to know whether your computer can boot to safe mode?

    If so, you can try to perform a Device Clean Boot in safe mode:

    Device Clean Boot

    =================

    1. Click Start, type "devmgmt.msc" (without quotation marks) in the Search bar and press Enter.

    2. Expand "Sound, video and game controllers".

    3. Right click on your sound card and then click "Properties.

    4. In the dropdown menu of Device Usage, please choose "Do not use this device (disable)" and click OK.

    5. Please use the same method to disable other dubious hardware such as: internal modem, network card and CD-R drive. Please note some devices such as video adapter are not available to be disabled.

    In addition, based on my knowledge, there are 2 ways to disable “Disable Drivers Signature Enforcement”, please refer:

    Method 1:

    Using command-line tool cmd.exe to execute this command-line bcdedit.exe /set nointegritychecks ON.

    Method 2:

    Disabling it through Group Policy Object (GPO)

    1. Click Start button, type gpedit.msc in Search bar.

    2. Enable and Ignore Code signing for drivers policy under User Configuration -> Administrative Templates -> System -> Driver Installation -> Code signing for drivers

    Hope that helps


    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. ”
    Thursday, July 21, 2011 2:53 AM
  • Use a different computer to put System Sweeper on a CD or USB stick: http://connect.microsoft.com/systemsweeper to make sure there aren't any rootkits left over.

    I could not add that to my dashboard :(

     


    Windows MVP, paid Remote Assistance is available for XP, Vista and Windows 7.

    My page on Video Card Problems is now my most popular landing page. See my gaming site for game reviews etc.

    Developer | Windows IT | Chess | Economics | Hardcore Games | Vegan Advocate | PC Reviews

    Thursday, July 21, 2011 4:02 AM