Can't start in Safe Mode

Syxx_Killer · 10-04-05, 10:18 AM

I'm running Windows XP Pro with SP2.

It basically started when I wanted to scan for spyware. I start Lavasoft Ad-Aware and can't update. It stops responding. I then update and scan with SpyBot. It found nothing alarming. I then went to Lavasoft's website and looked at the FAQ. Nothing, except downloading and manually installing the update. Did that and all Ad-Aware found was some cookies. I then scanned with Norton Antivirus 2004. It found two instances of some adware called Adware.Istbar. It couldn't delete them. I then clicked one of the items and it took me to the Symantec site. I downloaded a utility they said to use and it didn't find any instances on the computer. Now I'm really confused. I quickly run NAV2004 again, and it again found two instances of Adware.Istbar. I then try to start in Safe Mode. I choose Safe Mode and it shows a list of files and then I get the blue screen of death. I then restart in normal mode. What's going on? I recently had the computer crash about two months ago. I really don't want to have it crash again. Help is appreciated!

Gizzmoe · 10-04-05, 10:24 AM

Please tell us the BSOD error message.

Syxx_Killer · 10-04-05, 11:24 AM

Quote:

Originally Posted by Gizzmoe

Please tell us the BSOD error message.

I started out by saying I don't know what BSOD was. Then I started typing blue screen of death and it hit me.

:rotfl: :rotfl:

Anywho, I wish I could, but it quickly flashed and the computer restarted. I then got a message saying Windows did not start up promptly yada yada. I was then presented the choices again and then I just chose to start Windows up normally.

Gizzmoe · 10-04-05, 11:29 AM

ItÂ´s a bit difficult to troubleshoot without knowing the error message... Do you have a digicam with a movie mode?

Syxx_Killer · 10-04-05, 11:47 AM

Quote:

Originally Posted by Gizzmoe

ItÂ´s a bit difficult to troubleshoot without knowing the error message... Do you have a digicam with a movie mode?

No, I don't.

UglyMowgli · 10-04-05, 12:07 PM

What key did you hit during the start up F5 or F8?

with F8 you can get a log of the boot process , after a boot/reboot you can ump the file log to see what device is faulty.
You can also lauch windows selectionning the drivers to be loaded or not with F8 keys.

Syxx_Killer · 10-04-05, 01:08 PM

I used F8 to bring up the choices. How do you get a log?

The only choices I saw were to start in Safe Mode, SM with networking capabilities, some other SM variant (I forgot what it is called), reset to last known good configuration, and start Windows normally.

Gizzmoe · 10-04-05, 01:53 PM

Quote:

Originally Posted by Syxx_Killer

I used F8 to bring up the choices. How do you get a log?

Right-click My Computer, then Properties. Select Advanced, then Settings of Startup and Recovery. Click the Edit button, then Notepad opens boot.ini. It should look like this:

[boot loader]
timeout=30
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOW S
[operating systems]
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Micro soft Windows XP Professional" /fastdetect /NoExecute=OptIn

Add this to the end:
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Safe mode with bootlog" /safeboot:minimal /bootlog

Now it looks like this:
[boot loader]
timeout=30
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOW S
[operating systems]
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Micro soft Windows XP Professional" /fastdetect /NoExecute=OptIn
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Safe mode with bootlog" /safeboot:minimal /bootlog

Save it, reboot, donÂ´t press F5 or F8. You see a boot menu, select "Safe mod with bootlog". After the BSOD reboot to normal mode, then youÂ´ll find ntbtlog.txt in your Windows dir, thatÂ´s the boot log.

Syxx_Killer · 10-04-05, 03:07 PM

Will this be a one time thing or will it be asking for a log everytime I restart Windows?

Gizzmoe · 10-04-05, 03:13 PM

Quote:

Originally Posted by Syxx_Killer

Will this be a one time thing or will it be asking for a log everytime I restart Windows?

Every time. Remove the last line from boot.ini, then itÂ´s gone.

Syxx_Killer · 10-04-05, 03:55 PM

Ok, I did as you suggested. Changed the file to include the text you gave. Rebooted, and chose Safe Mode with Bootlog. Got the BSOD. Restarted Windows normally and looked for the ntbtlog.txt file. I couldn't find it. I then did a search and it didn't find it either. I chose to look in the system folders and hidden files and folders.

Gizzmoe · 10-04-05, 04:08 PM

****!!! Well, itÂ´s late and IÂ´m quite tired, let us continue tomorrow. Maybe someone else can help you in the next few hours...

Syxx_Killer · 10-04-05, 06:18 PM

What bothers me is this is a fresh reinstall of Windows. Only about a month or two old.

Gizzmoe · 10-05-05, 10:05 AM

Any good news?

What you could do is to install all updates from www.windowsupdate.com, it refreshes quite a few system drivers. Well, at least if you havenÂ´t updated Windows for a while.

Jesper · 10-05-05, 10:13 AM

In control panel>system>recovery or somewhere like that there is a check box "reboot automatically" untick it and force your BSOD, then it will not auto reboot but stick with the BSOD.

Else on control panel>administration>event log to check for errors there

SafeMode bootlog is in C:\windows\bootlog.txt or .log I forgot

Adware.Istbar ref:
http://sarc.com/avcenter/venc/data/adware.istbar.html

Sidenote I have never seen it came with adaware from lavasoft. and removal tool here : http://securityresponse.symantec.com...r/FxIstbar.exe

10-04-05, 10:18 AM	#1
Syxx_Killer Admiral Join Date: Aug 2003 Location: Michigan, USA Posts: 2,387 Downloads: 21 Uploads: 0	Can't start in Safe Mode I'm running Windows XP Pro with SP2. It basically started when I wanted to scan for spyware. I start Lavasoft Ad-Aware and can't update. It stops responding. I then update and scan with SpyBot. It found nothing alarming. I then went to Lavasoft's website and looked at the FAQ. Nothing, except downloading and manually installing the update. Did that and all Ad-Aware found was some cookies. I then scanned with Norton Antivirus 2004. It found two instances of some adware called Adware.Istbar. It couldn't delete them. I then clicked one of the items and it took me to the Symantec site. I downloaded a utility they said to use and it didn't find any instances on the computer. Now I'm really confused. I quickly run NAV2004 again, and it again found two instances of Adware.Istbar. I then try to start in Safe Mode. I choose Safe Mode and it shows a list of files and then I get the blue screen of death. I then restart in normal mode. What's going on? I recently had the computer crash about two months ago. I really don't want to have it crash again. Help is appreciated!

10-04-05, 12:07 PM	#6
UglyMowgli Grey Wolf Join Date: Aug 2003 Location: Canada Posts: 784 Downloads: 10 Uploads: 0	What key did you hit during the start up F5 or F8? with F8 you can get a log of the boot process , after a boot/reboot you can ump the file log to see what device is faulty. You can also lauch windows selectionning the drivers to be loaded or not with F8 keys. __________________ Modern Naval Warfare Community Manager

10-05-05, 10:13 AM	#15
Jesper Torpedoman Join Date: Sep 2002 Location: Denmark (GMT+01.00) Posts: 112 Downloads: 0 Uploads: 0	In control panel>system>recovery or somewhere like that there is a check box "reboot automatically" untick it and force your BSOD, then it will not auto reboot but stick with the BSOD. Else on control panel>administration>event log to check for errors there SafeMode bootlog is in C:\windows\bootlog.txt or .log I forgot Adware.Istbar ref: http://sarc.com/avcenter/venc/data/adware.istbar.html Sidenote I have never seen it came with adaware from lavasoft. and removal tool here : http://securityresponse.symantec.com...r/FxIstbar.exe __________________ Jesper [JiD]: jesper@tidesofwar.net My Firefox & Thunderbird Your Firefox & Thunderbird

10-04-05, 10:24 AM	#2
Gizzmoe Silent Hunter Join Date: Mar 2005 Location: Germany Posts: 3,668 Downloads: 4 Uploads: 0	Please tell us the BSOD error message.

10-04-05, 11:29 AM	#4
Gizzmoe Silent Hunter Join Date: Mar 2005 Location: Germany Posts: 3,668 Downloads: 4 Uploads: 0	ItÂ´s a bit difficult to troubleshoot without knowing the error message... Do you have a digicam with a movie mode?

10-04-05, 01:08 PM	#7
Syxx_Killer Admiral Join Date: Aug 2003 Location: Michigan, USA Posts: 2,387 Downloads: 21 Uploads: 0	I used F8 to bring up the choices. How do you get a log? The only choices I saw were to start in Safe Mode, SM with networking capabilities, some other SM variant (I forgot what it is called), reset to last known good configuration, and start Windows normally.

10-04-05, 03:07 PM	#9
Syxx_Killer Admiral Join Date: Aug 2003 Location: Michigan, USA Posts: 2,387 Downloads: 21 Uploads: 0	Will this be a one time thing or will it be asking for a log everytime I restart Windows?

10-04-05, 03:55 PM	#11
Syxx_Killer Admiral Join Date: Aug 2003 Location: Michigan, USA Posts: 2,387 Downloads: 21 Uploads: 0	Ok, I did as you suggested. Changed the file to include the text you gave. Rebooted, and chose Safe Mode with Bootlog. Got the BSOD. Restarted Windows normally and looked for the ntbtlog.txt file. I couldn't find it. I then did a search and it didn't find it either. I chose to look in the system folders and hidden files and folders.

10-04-05, 04:08 PM	#12
Gizzmoe Silent Hunter Join Date: Mar 2005 Location: Germany Posts: 3,668 Downloads: 4 Uploads: 0	****!!! Well, itÂ´s late and IÂ´m quite tired, let us continue tomorrow. Maybe someone else can help you in the next few hours...

10-04-05, 06:18 PM	#13
Syxx_Killer Admiral Join Date: Aug 2003 Location: Michigan, USA Posts: 2,387 Downloads: 21 Uploads: 0	What bothers me is this is a fresh reinstall of Windows. Only about a month or two old.

10-05-05, 10:05 AM	#14
Gizzmoe Silent Hunter Join Date: Mar 2005 Location: Germany Posts: 3,668 Downloads: 4 Uploads: 0	Any good news? What you could do is to install all updates from www.windowsupdate.com, it refreshes quite a few system drivers. Well, at least if you havenÂ´t updated Windows for a while.