I'm an IT Pro trying to solve a client's problem.
As stated in title, Windows 7 (W7) will only start in "Disable Drivers Signature Enforcement" (DDSE) mode.
Specs: Dell Inspiron 1545 running W7 64-bit, 3GB RAM, Dual-Core T4400 CPU
History: Laptop PC had multiple trojan infection. Was running Firefox 3.5, which was having issues with links until I upgraded to FF5. Kaspersky is installed but won't run. Norton was installed but wouldn't even show itself except in Add/Remove. Used Norton uninstaller to remove all instances of Norton. Installed Security Essentials and Malwarebytes. SE found and removed multiple virus/trojan infections. Malwarebytes found nothing. Updated W7. Rebooted. Still, it will neither fix the boot nor boot up in normal mode. Nor in any other mode save DDSE.
tried bcdedit -set TURNSIGNING OFF (which was successful) but no change in the boot process. (I don't like this option, as it reduces security, but was willing to go there if it worked.)
My primary question: Why is the PC booting up in DDSE mode but not Normal mode? I'm at my wit's end.
Let me know if you need more data to help solve this problem.Thanks in advance for any help you can provide.
Run these uninstallers for kaspersky and Norton. See if that helps.
Have you opened an elevated command prompt and run sfc?
Frankly, I would backup any data the client would like to keep and perform a reinstall or a complete pc restore. (I know, there is no image. Perhaps they'll learn this time)
First I want to know whether your computer can boot to safe mode?
If so, you can try to perform a Device Clean Boot in safe mode:
Device Clean Boot
1. Click Start, type "devmgmt.msc" (without quotation marks) in the Search bar and press Enter.
2. Expand "Sound, video and game controllers".
3. Right click on your sound card and then click "Properties.
4. In the dropdown menu of Device Usage, please choose "Do not use this device (disable)" and click OK.
5. Please use the same method to disable other dubious hardware such as: internal modem, network card and CD-R drive. Please note some devices such as video adapter are not available to be disabled.
In addition, based on my knowledge, there are 2 ways to disable “Disable Drivers Signature Enforcement”, please refer:
Using command-line tool cmd.exe to execute this command-line bcdedit.exe /set nointegritychecks ON.
Disabling it through Group Policy Object (GPO)
1. Click Start button, type gpedit.msc in Search bar.
2. Enable and Ignore Code signing for drivers policy under User Configuration -> Administrative Templates -> System -> Driver Installation -> Code signing for drivers
Hope that helps
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. ”
Use a different computer to put System Sweeper on a CD or USB stick: http://connect.microsoft.com/systemsweeper to make sure there aren't any rootkits left over.
I could not add that to my dashboard :(
Windows MVP, paid Remote Assistance is available for XP, Vista and Windows 7.