Can only start Windows 7 in "Disable Drivers Signature Enforcement" mode
I'm an IT Pro trying to solve a client's problem. As stated in title, Windows 7 (W7) will only start in "Disable Drivers Signature Enforcement" (DDSE) mode. Specs: Dell Inspiron 1545 running W7 64-bit, 3GB RAM, Dual-Core T4400 CPU History: Laptop PC had multiple trojan infection. Was running Firefox 3.5, which was having issues with links until I upgraded to FF5. Kaspersky is installed but won't run. Norton was installed but wouldn't even show itself except in Add/Remove. Used Norton uninstaller to remove all instances of Norton. Installed Security Essentials and Malwarebytes. SE found and removed multiple virus/trojan infections. Malwarebytes found nothing. Updated W7. Rebooted. Still, it will neither fix the boot nor boot up in normal mode. Nor in any other mode save DDSE. tried bcdedit -set TURNSIGNING OFF (which was successful) but no change in the boot process. (I don't like this option, as it reduces security, but was willing to go there if it worked.) My primary question: Why is the PC booting up in DDSE mode but not Normal mode? I'm at my wit's end. Let me know if you need more data to help solve this problem. Thanks in advance for any help you can provide.
July 16th, 2011 1:47pm

I also ran SIGVERIF and all drivers checked out
Free Windows Admin Tool Kit Click here and download it now
July 16th, 2011 1:53pm

Can you upload your C:\Windows\inf\setupapi.dev.log to a publicly accessible location (like skydrive)?
July 16th, 2011 2:00pm

https://skydrive.live.com/redir.aspx?cid=f5fdf404104fe9cb&resid=F5FDF404104FE9CB!133
Free Windows Admin Tool Kit Click here and download it now
July 16th, 2011 2:52pm

I don't have permissions, can you make sure it's public?
July 16th, 2011 3:17pm

Permission granted
Free Windows Admin Tool Kit Click here and download it now
July 16th, 2011 3:22pm

Use a different computer to put System Sweeper on a CD or USB stick: http://connect.microsoft.com/systemsweeper to make sure there aren't any rootkits left over.
July 16th, 2011 6:09pm

Run these uninstallers for kaspersky and Norton. See if that helps. http://support.kasperskyamericas.com/knowledge-base-article/1464 which leads you here : http://www.kaspersky.com/downloads/utils/kavremover.exe ftp://ftp.symantec.com/public/english_us_canada/removal_tools/Norton_Removal_Tool.exe Have you opened an elevated command prompt and run sfc? Frankly, I would backup any data the client would like to keep and perform a reinstall or a complete pc restore. (I know, there is no image. Perhaps they'll learn this time)
Free Windows Admin Tool Kit Click here and download it now
July 17th, 2011 6:48am

Hi, First I want to know whether your computer can boot to safe mode? If so, you can try to perform a Device Clean Boot in safe mode: Device Clean Boot ================= 1. Click Start, type "devmgmt.msc" (without quotation marks) in the Search bar and press Enter. 2. Expand "Sound, video and game controllers". 3. Right click on your sound card and then click "Properties. 4. In the dropdown menu of Device Usage, please choose "Do not use this device (disable)" and click OK. 5. Please use the same method to disable other dubious hardware such as: internal modem, network card and CD-R drive. Please note some devices such as video adapter are not available to be disabled. In addition, based on my knowledge, there are 2 ways to disable “Disable Drivers Signature Enforcement”, please refer: Method 1: Using command-line tool cmd.exe to execute this command-line bcdedit.exe /set nointegritychecks ON. Method 2: Disabling it through Group Policy Object (GPO) 1. Click Start button, type gpedit.msc in Search bar. 2. Enable and Ignore Code signing for drivers policy under User Configuration -> Administrative Templates -> System -> Driver Installation -> Code signing for drivers Hope that helps Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
July 23rd, 2011 10:43pm

Use a different computer to put System Sweeper on a CD or USB stick: http://connect.microsoft.com/systemsweeper to make sure there aren't any rootkits left over. I could not add that to my dashboard :( Windows MVP, paid Remote Assistance is available for XP, Vista and Windows 7. My page on Video Card Problems is now my most popular landing page. See my gaming site for game reviews etc. Developer | Windows IT | Chess | Economics | Hardcore Games | Vegan Advocate | PC Reviews
Free Windows Admin Tool Kit Click here and download it now
July 23rd, 2011 11:52pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics