• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1084
  • Last Modified:

Can't boot into SAFE Mode

It seems that I can no longer boot into Safe Mode. The last file listed is c:\windows\system32\giveio.sys then nothing. This has only started since last week. It doesn't seem to matter which Safe option I select, they all do the same thing.
0
normanallen
Asked:
normanallen
  • 22
  • 20
  • 3
1 Solution
 
sundeepgopalCommented:
take a winxp cd  ->recovery console ->at the command prompt type  chkdsk c: /r  (It may revert back to 50% from 60% but completes after that )  ...It checks for any bad sectors and will recovers it
0
 
FriarTukCommented:
try restoring to a previous date before this started occurring, see
http://support.microsoft.com/?kbid=306084    "xp restore o/s to previous state"
http://support.microsoft.com/?kbid=315341    "xp in place upgrade/reinstall (repair)"
0
 
normanallenAuthor Commented:
My SP2 installation disk failed with a corrupt file. My SP1 disk finally brought up the Recovery Console. Chkdsk finally ran. It got to 70% before reverting to 50%. (Why does it do that?). It said one or more errors were fixed (why can't it say how many). I still can't get into Safe Mode. Another list has suggested disabling the giveio service - it's apparently low level access tp things like system monitors, fans, etc.
I have tried Windows Restore points before now, and they run all the way through and then say the system can't be restored. No error message of any kind - not very helpful. Any ideas why?
I would like to think that the O/S restore/reinstall would work, but it didn't the last time I tried it (for something else). I'll try that next.
Any other suggestions?
0
Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

 
FriarTukCommented:
http://support.microsoft.com/kb/307654/en-us
listsvc   (lists all services)
disable  (disable services)

http://support.microsoft.com/kb/304449/en-us   (doing a restore from safemode command prompt)

giveio.sys is a virus see these:
http://www.file.net/process/giveio.sys.html
http://anti-spy.info/process/giveio.sys.html

Giveio.sys is a driver related to ImageSurfer software.
0
 
normanallenAuthor Commented:
I've been able to disable the giveio service, and tried again. It stopped on what I can only assume is the previous file in the list. I don't think we can go on just stopping services, there has to be something else going on.
I'd love to be able to do a restore from a safemode prompt, if only I could get that far!
0
 
sundeepgopalCommented:
try this to see if there are  any bugs or corrupted files
 http://www.windows-repairs.com/  
0
 
FriarTukCommented:
put in your xp cd & reinstall into the same directory like i suggested earlier
http://support.microsoft.com/?kbid=315341    "xp in place upgrade/reinstall (repair)"
0
 
normanallenAuthor Commented:
I'll do the reinstall/repair at the weekend.

I'm VERY surprised about sundeepgoal's suggestion! SiteHound brought up a warning about it. When I permitted it to continue it came up with a completely different URL promoting a program called BugDoctor. Out of curiousity, I downloaded it and let it  run. It (not surprisingly) came up with *lots* of errors, but wouldn't tell you what they were, and wouldn't "correct" them unless you paid for the program. I thought EE provided better advice than that!
0
 
sundeepgopalCommented:
I'm sorry about that ..I have a paid version of bug doctor with me(it is approved by PC mag) , It works fine .......actually I wanted to give you hijackthis software(free version) ..the software I gave you just shows whether you have any bugs or not and gives warning if you are entering any mallicious sites.
0
 
normanallenAuthor Commented:
Something a little wacky is going on. I have the following:
1) Original XP disk
2) Original XP SP1 disk
3) SP2 update disk
As I remember, my original SP2 disk was a combination of 1 & 3.
I have tried to make a new SP2 disk from 2 & 3. (No. 4)
When 1, 2 or 3 are put in the drive while the system is running, they bring up a large blue options box asking what you want to do with the disk. New disk 4 does not, although it does a windows startup if booted from.
The root directories of 1, 2 and 3 have different content.
I have worked through the SP2 procedure from about 4 different sites. One of them doesn't even mention getting the boot image off the disk!
The disk labels are interesting. I started with XP Home (!) 1) is WXHOEM_EN. 2) is XRMHOEM_EN. 3) is VRMSP_EN. What should an SP2 disk be labelled?
Maybe I should just try replacing the duff file on my original slipstreamed disk?

0
 
FriarTukCommented:
i assume 1 & 2 are bootable but 3 isn't since it is just an upgrade, right?  i would use sp1 cd from dos, or either sp2 (or sp1) cd from within windows

from the above link i provided
1) method 1 to boot into normal windows, then put in the cd, wait for its autostart (blue options box) & click install
2) method 2 - reinstall completely, press setup, be sure to select the same windows directory to pick up your current configuration

btw, since you tried combining cd 2 & 3 instead of doing a cd to cd image copy, then the boot partition from cd 2 didn't carry over to your new cd #4
0
 
normanallenAuthor Commented:
Don't forget I was trying to create an SP2 installation disk, so cd to cd image isn't really useful.
The disk IS bootable. I used IsoBuster to extract the boot image and Nero 7 with CD bootable option before copying the files.
However, when I came to run the CD it all started well, then started complaining that files were corrupt. I had no choice other than to abort the attempted repair (F3). Now, when I boot it comes up asking what I want to run XP or XP Setup. How do I get out of this?
0
 
FriarTukCommented:
it is good that your cd is bootable, but it is booting using the sp1 data, & contains the sp2 upgrade install file.
when you tried repairing the system using it, that's when it failed due to corrupted files, so that is why i said use the original sp1 disk, then run setup or repair from it whether doing method 1 or 2.
0
 
normanallenAuthor Commented:
Since it's a SP1 installation disk, it won't let you install from the autostart as it knows the installed system is higher. It tells you that you need to do it with a reboot, etc.
If I do that will I lose the registry? Will exporting it, and reimporting it work? I have a LOT of applications loaded (on C:), and really get p*******d having to have to reload all of them. (Quite apart from the other applications installed on my other partitions. In any case, I need to make sure that all my backups are up to date before doing anything drastic!
0
 
FriarTukCommented:
does anyone you know have a bootable xp sp2 cd (specify home or pro) you can borrow?  i would try & run the reinstall from it using the instructions outlined in method 2 from:    http://support.microsoft.com/?kbid=315341

i not totally sure if reinstalling sp1 will have an adverse affect or not concerning the o/s, however when you reinstall into the same windows folder it will retain all registry settings including installed apps (although this is never 100%)
0
 
FriarTukCommented:
if not you can boot from the sp1 cd & rerun setup

then you'll need to reinstall sp2 & all windows updates
0
 
normanallenAuthor Commented:
Things have not been good over the weekend. My phone line died together with my broadband access. It didn't like trying the SP1 disk, so I need an SP2 one. once the line is back I'll check out the alternatives.
In the meantime something else weird happened after the aborted setup. I tried running one of my games, and it complained that the graphics weren't set up correctly. On Appearance, it now says "default monitor" (and there are no tabs on Advanced, either). There is no tab for Monitor under Devices, and also my graphics card (NVidea GeForce 4) has a yellow exclamation point (!) against with "cannot start device" in its properties. I've already taken the card out and reseated it, but the problem persists.
Is this related or is something else going on?
0
 
FriarTukCommented:
did you try removing the device (then reinstall ) or update the driver?
0
 
normanallenAuthor Commented:
I've managed to get the monitor back by reinstalling both the video driver and then updating the 'plug and play' monitor with the correct driver.
My broadband line is STILL down, so no luck on downloading anything. This is being sent from the office after a long and frustrating wekend.
I have managed (finally) to use the SP1 installation disk to reinstall windows. It seems I now have an XP Home SP1 system with DirectX 8.1, BUT when I tried to get into SAFE mode, it still wouldn't play. I haven't tried all three SAFE options, but I suspect they will be the same.
Any more suggestions?
0
 
FriarTukCommented:
1) original question
it's good that my very first suggestion of a reinstall worked to recover your original problem with safe mode.

2) new issue video
my last about reinstalling the drivers helped fix your video - all the way? ie do have back all the options you listed as not being available like advanced options & no more yellow ! on your vid crd

3) new issue phone line + broadband
did you get hit by lightning or something that ran thru you lines?  is your broadband dsl or cable?


*** for now, install xp sp 2 from your other cd, reboot, then run windows updates, & reboot again

0
 
normanallenAuthor Commented:
2. I haven't checked all the options on the driver - will do so tonight.
3. My telephone company report that there is a major fault on the line, that needs a cable to be replaced. I'm now informed that they have to get permission to dig up the road to fix it (!!!!) and the earliest date they can do this is 2 June (i.e. Friday)
I'll do the xp2 update, but I can't do any updates.
So what do we do about not being able to get into SAFE mode?
0
 
FriarTukCommented:
"BUT when I tried to get into SAFE mode, it still wouldn't play."

by your above stmt, i thought safe mode was working, but that you can't play some game - plz clarify if safe mode works.

after reloading drivers have you verified all settings being avail yet?  once internet is up, download & install dx9
0
 
normanallenAuthor Commented:
I've run the SP2 disk, and the system now says its XP SP2 (and dxdiag says DirectX 9.0c). Still no broadband.
What I meant be "wouldn't play" was that it still wouldn't enter it whatever type of SAFE mode I selected.
The last four files named are:
sfvfs02.sys
sfhlp02.sys
sfdrv01.sys
Mup.sys
all from c:\windows\system32
0
 
FriarTukCommented:
boot from the xp cd & press R for Repair
in recovery console try extracting those files using sfc /scannow

or manually like
expand d:\i386\mup.sy_ c:\windows\system32\drivers

http://support.microsoft.com/kb/898900/en-us
0
 
normanallenAuthor Commented:
Curiouser and curiouser.
I booted from the cd and went to Repair Console. It  found one version of windows in c:\windows, and I selected that.
It could not find the d: drive. When I tried cd d:\ nothing happened, the prompt stayed in the same volume. I had to copy the mup.sy_ file to c: in normal mode, then expanded it under R. Asked if I wanted to overwrite existing file, said Yes.
But still can't get into SAFE mode. Stops exactly as before
0
 
FriarTukCommented:
according to this those sf~ files are probably the virus
http://www.file.net/process/sfdrv01.sys.html

other threads i've read indicate it comes from some games loading StarForce drivers - but still believed to be malware

in devmg - check view hidden - look for & remove starforce

removal tool (may or may not work)
http://www.onlinesecurity-on.com/protect.phtml?c=55
manual removal
http://www.glop.org/forum/viewtopic.php?id=184
0
 
normanallenAuthor Commented:
Sorry to be so long in replying - broadband still down (three weeks now!)
Have removed starforce drivers, and the list when going into SAFE mode now finishes:

speedfan.sys
drivers\sisagpx.sys
drivers\sfvfs02.sys
drivers\Mup.sys

and it still won't go the final step!
0
 
FriarTukCommented:
you couldn't have removed the starforce drivers all the way as it is still loading SFVFS02.SYS

try following the manual removal link i provided (steps 1-22 minus 9 & 12)

0
 
normanallenAuthor Commented:
I did follow the manual instructions and sfvs02 was not mentioned in them, so I should just delete that as well?
0
 
FriarTukCommented:
at the very bottom of that thread is another list of StarForce files to remove, of course you'll need to delete any entries in the registry point to them as well
0
 
normanallenAuthor Commented:
I've now done everything related to StarForce, and the list when trying SAFE mode is

drivers\sr.sys
drivers\PxHelp20.sys
drivers\KSecDD.sys
drivers\Ntfs.sys
speedfan.sys
drivers\SISAGPX.sys
drivers\Mup.sys

A couple of other things seem to be happening as well.
1. The system seems to be taking an extremely long time to shutdown, both after doing Start\Shutdown - the window doesn't appear for quite a while
2. The 'windows is shutting down' screen takes a long time.

I tried a defrag on c: and it said the volume was locked. I tried Norton WinDoctor on c: and it said it needed to run a chkdsk on c:
When I rebooted instead of the chkdsk I got the message "cannot open volume for direct access".
It's not looking good, is it?
0
 
FriarTukCommented:
ok, it now looks like starforce is gone completely, but it still hangs at mup.sys

extracting from i386 didn't help, so how about downloading the updated one from the website
http://support.microsoft.com/kb/898900/en-us

to addr the "can't open volume" issue, remove anything that may be accessing the drive (Norton)
http://support.microsoft.com/kb/555484/en-us
0
 
normanallenAuthor Commented:
I've done the download, and installed it, ut it hasn't made any difference.

As far as the disk problem is concerned, I've looked at the article, and checked the local services. I don't want to go hacking the system and cause myself problems, so I've been able to export the whole list into an Excel file (39Kb). Is there somewhere I can upload this file for you to check (if possible)?
0
 
FriarTukCommented:
copy & paste the data into a bitmap using paint, save as jpg, then upload here
http://imageshack.us/  (click browse & select file on drive, then click Host IT, click Show Friends on right, then copy & paste the new URL here)

ex:
http://img145.imageshack.us/content.php?page=done&l=img145/6296/cberanim68ys.gif
http://img145.imageshack.us/my.php?image=cberanim68ys.gif
0
 
normanallenAuthor Commented:
Just as well I checked the image. It was too big to fit on one file so the results are in two files:

http://img153.imageshack.us/my.php?image=a4fo.jpg

http://img153.imageshack.us/my.php?image=b7wd.jpg

I have a PC at the office also runing XP2 with the same AV software but different firewall, here ZoneAlarm, there company one, so I'm also going to compare the dettings, but I don't think that would help.

Question: are you in the US? I am in the UK, and was wondering about the time of your posts.
0
 
FriarTukCommented:
disable Norton Disk Doctor & any related app's running in the background (run msconfig & create a pic of its Startup tab entries, paste link here)

Re: pics of services
the Logical Disk Manager should be Started & set to run Automatic (try rebooting into safe or running chkdsk /f)
what is PC Tools Spyware Doctor?, i'd stop/disable (uninstall it if not needed)
what is Webroot Spysweeper Engine?, i'd stop/disable (uninstall unless needed)
Window Defender, i'd stop only
also stop all Symantec for testing

when done disabling Norton & stopping spyware & virus services, and starting the diskmgr - try rebooting into safe mode
0
 
normanallenAuthor Commented:
http://img331.imageshack.us/my.php?image=st17kj.jpg
http://img331.imageshack.us/my.php?image=st20kj.jpg
http://img79.imageshack.us/my.php?image=st35ts.jpg
http://img79.imageshack.us/my.php?image=st42gy.jpg

Why can't they permit the window to be bigger?

Starting the Logical Disk Manager, and stopping everything referred to above made no difference. Still can't get into SAFE Mode or run the chkdsk.

Spyware Doctor and Spysweeper are both legitimate anti-spyware programs. Only Spysweeper is active at startup. Spyware Doctor gets used from time to time (as a backup). Windows Defender is MS's attempt to do the same.
0
 
FriarTukCommented:
when you copy & paste your images put them into the same bitmap image while in paint, by making the size larger (tools - image attributes - increase height -ok), then save as jpeg

just use one or two spyw pgms with only one in use at startup, too many causes congestion
you also have too many task related utilities - remove them all (also remove other misc utility pgms)

------
your msconfig,
you have way too much stuff loading at startup - i'll condense all the images into one:

yellow highlight next to items to uncheck for testing
red next to items to remove/uninstall
red ??? - not sure if needed or not
red virus ??? - means they may be a virus instead of a real needed program -> explorer.exe loads automatically as it brings up the desktop & it runs as a service, hence it shouldn't be being started anywhere else)

http://img84.imageshack.us/my.php?image=normanallenmsconfig1oo.jpg


0
 
FriarTukCommented:
you haven't by chance moved your xp drive to new hardware like replacing the mobo or something?

the below thread halts in safe mode on mup.sys too,
http://www.experts-exchange.com/Hardware/Desktops/Q_21889973.html
but was fixed by going to
http://65.24.134.81/KipSolutions/MovingXPNewMotherboard/MovingXP.htm

magicjellybean, keyfinder is here:
http://www.magicaljellybean.com/keyfinder.shtml
0
 
normanallenAuthor Commented:
Sorry, same everything.

Have disabled everything recommended at startup. Still can't chkdsk or SAFE.

I'm starting to wonder whether a claen install is going to be necessary. Just my luck that my Nero upgrade failed and is really screwed up, and I don't have any (safe) disk writing utils available. (use the stuff that came with windows - you must be joking)
0
 
FriarTukCommented:
did you verify / remove the items i marked a possible virus
did you remove the misc app's in red
did you check the link with a similar issue

if yes, then i agree with a fresh install of the o/s which will require you to reinstall everything else too (hardware drivers & software) - be sure to use the keyfinder pgm to make sure you have the xp cd key to use, be sure to back everything up to another drive (cd/dvd, hard drive, usb drive)

pop in sp1 cd & run setup, tell it to delete the existing partition, then recreate & format it before installing o/s
0
 
normanallenAuthor Commented:
Yes
Yes
The link was when new hardware (e.g. motherboard) was installed, so not relevant.

It looks like the fresh install is going to be necessary after all! Now I have Nero working again, I have more files to archive off before I can wipe the system. Not my favourite activity but looks like the only way out.
0
 
FriarTukCommented:
yep i agree, we pretty much exhausted a lot of effort here
0
 
normanallenAuthor Commented:
OK, thanks for all your help, I think you've really earned the points!
0
 
FriarTukCommented:
and thank you too, let us know if you need more assistance.
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

  • 22
  • 20
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now