Use the advanced clean boot troubleshooting or troubleshooting console to fix Windows XP startup Problems
Many of the problems you encounter on Windows XP-based computers may be caused by incompatibility or corrupted programs. To determine whether this is the case, run the clean boot command or restart Windows but do not start the problematic program.
This article describes how to perform advanced clean startup troubleshooting to determine whether the problem lies in the core operating system or the program that is loaded in the Windows environment.
For more information about how to clean up your computer, click the following article number to view the article in the Microsoft Knowledge Base:
310353
(Http://support.microsoft.com/kb/310353/) how to perform a clean boot in Windows XP
Clean startup troubleshooting is specifically used to troubleshoot performance problems. To perform a clean boot troubleshooting, you need to take a series of operations and restart the computer after each operation (to test whether the operation has solved the problem ).
The Clean start troubleshooting Plan includes the following steps:
- Restart in security mode or security mode with network support
- Delete Unsigned Drivers
- Delete registry key
- Test user configuration file
- Disable third-party services
- Delete a program
Back to the top, how to restart in security mode or in security mode with network support
To troubleshoot possible environment problems, restart the computer in security mode or in security mode with network support. If the problem involves a program that does not rely on network connections, the security mode should be used. If the problem involves a network program and you are using a network adapter to connect to the network, you can use security mode with network support to test the Network Program, including browser problems.
Note:: If you use a modem or PC Card to connect to the network, you cannot use the security mode with network support. This is because in the security mode or the security mode with network support, the modem driver and PC card driver are not loaded.
If you start a computer in security mode or in security mode with network support, you can perform the previously problematic operation, which may be an environmental problem.
Note:: In Windows XP, you can use the System Configuration Utility (msconfig.exe) to perform a clean start.
For additional information about the System Configuration Utility, click the following article number to view the article in the Microsoft Knowledge Base:
310560
(Http://support.microsoft.com/kb/310560/) How to Use the msconfig tool in Windows XP to solve the problem
See the "how to delete registry keys" section for information about how to determine which program components may cause problems.
Note:: In security mode, some operations may not be tested because not all services and devices are loaded in security mode or security mode with network support. For example, in security mode, problems related to audio multimedia and suspension or sleep cannot be tested.
If the problem persists after the computer is started in security mode or in security mode with network support, it may still be an environmental problem. In safe mode, many features or filter drivers installed by third-party software may continue to be loaded. Therefore, you may need to take other steps to test and delete a third-party driver in safe mode.
To start a computer in safe mode, follow these steps:
- Print these instructions before proceeding to step 1. After you shut down the computer in step 1, you will not be able to see the instructions.
- Restart the computer.
- Use the F8 key. On a computer configured to start multiple operating systemsStartPress F8 in the menu.
- Use the arrow keys to select the security mode option and press Enter.
Note:: To use the arrow keys on the keyboard, you must disable the Num Lock function.
- If you are using a dual-boot or multi-boot system, use the arrow keys to select the installation to be accessed, and then press Enter.
In safe mode, you can only access basic files and drivers (such as mouse, monitor, keyboard, large-capacity storage devices, basic videos, default system services, and so on, but does not include network connections ). You can select from the following options:
- The "safe mode with network support" option loads all these files and drivers and the services and drivers required to start the network.
- The "safe mode with command line prompt" option is the same as the safe mode option, except that the former starts the command line prompt and the latter starts the graphical user interface (GUI ).
- The last correct configuration option uses the registry information that was saved when the computer was shut down to start the computer.
The security mode helps you diagnose problems. If the problem does not recur after being started in safe mode, you can exclude the possibility that the default setting and the most basic device driver are faulty. If a new device or a new driver causes problems, you can remove the device or cancel the replacement in safe mode.
In some cases, the security mode cannot help. For example, when Windows system files required to start a computer are damaged or damaged, security mode will not help you. In this case, you can use the fault recovery console.
Back to Top how to delete Unsigned Drivers
All drivers that come with Windows XP use digital signatures to verify that they have been tested by Windows Hardware Quality Lab (WHQL. Many third-party programs written for Windows XP must install other drivers without WHQL testing. Therefore, these drivers are not digitally signed.
Note:: Some third-party vendors have some tools that they can use to generate valid digital signatures for these products, even without WHQL testing. The following procedure cannot be used to determine whether these drivers are installed.
Windows XP includes the file signature verification tool (sigverif.exe ). You can use this tool to find all unsigned files on your computer. For troubleshooting of Windows XP, you only need to test the files in the % WINDIR % \ system32 \ drivers folder.
To use the sigverif.exe tool, follow these steps:
- ClickStart, ClickRun, InOpenEnter
Sigverif, and then clickOK.
- ClickAdvanced, ClickSearch for other unsigned files, ClickBrowse, Find the windows \ system32 \ drivers folder, and then clickOKTwice.
- ClickStart.
After sigverif.exe is running, a list of all unsigned drivers installed on your computer is displayed.
Note:: Many video drivers are not digitally signed. The following steps may cause video resolution problems. These problems may prevent you from starting your computer.
The list of all signed and unsigned drivers found by the sigverif.exe tool is located in the sigverif.txt file in the % WINDIR % folder (usually winnt or Windows Folder. All Unsigned drivers are marked as unsigned ).
After determining which drivers are unsigned, create a folder and move these Unsigned drivers into it. Generally, sysdriversbak is a folder name that is easy to remember.
Move the unsigned driver, restart the computer (the unsigned driver is not in the windows \ system32 \ drivers folder), and then test the program or other functions, check whether the same error message or problem still occurs.
Note:: Because most driver files are associated with registry keys that have not changed, you may receive the following error message:
At least one driver or service failed to start...
If the problem no longer occurs, it is caused by a third-party unsigned filter or function driver. A function driver is a driver used to load a specific device that uses a computer's bus. The filter driver is loaded at the upper or lower level of the function driver to add or modify the behavior of the function driver.
To determine which unsigned driver causes a problem, use one of the following methods:
- Put the drivers related to the same program or device back in the windows \ system32 \ drivers folder in the same test.
- In the same test, place the first half of the driver into the windows \ system32 \ drivers folder.
The previous technique is generally better suited to identifying the cause of the problem, but may not be able to determine the relevant driver. After determining which driver causes the problem, you can delete the driver or program, disable the driver or close the service.
To disable the service, follow these steps:
- ClickStartAnd then clickRun.
- Type % SystemRoot % \ system32 \ Services. MSC/s, and then clickOK.
- Double-click the service and clickStartup TypeIn the listDisableAnd then clickOK.
- Restart the computer.
Search for drivers or other program updates, or replace the software or driver with a program or driver specifically compiled for Windows XP.
To disable the driver, follow these steps:
- ClickStartAnd then clickRun.
- Type % SystemRoot % \ system32 \ compmgmt. MSC/s, and then clickOK.
- ClickDevice Manager.
- Double-click the device and clickDevice usageDo not use this device (disable) in the list, and then clickOK.
- Find the update driver for the device from the vendor.
For information on how to contact the program manufacturer, click the appropriate article number in the following list to view the article in the Microsoft Knowledge Base:
65416
(Http://support.microsoft.com/kb/65416/) Hardware and Software third-party supplier contact list, A-K
60781
(Http://support.microsoft.com/kb/60781/) Hardware and Software third-party supplier contact list, L-P
60782
(Http://support.microsoft.com/kb/60782/) Hardware and Software third-party supplier contact list, Q-Z
Microsoft provides third-party contact information to help you seek technical support. These contact information will be changed without notice. Microsoft does not guarantee the accuracy of such third-party contact information.
Note:: The Windows XP user interface does not list all devices and services.
If the device or service is not in the Windows XP user interface, use the fault recovery console to disable the driver or service.
For other information, click the following article number to view the article in the Microsoft Knowledge Base:
314058
(Http://support.microsoft.com/kb/314058/) Windows XP Recovery Console instructions back to top how to delete registry entries
Warning: Improper use of the Registry Editor may cause serious problems and you may need to reinstall the operating system. Microsoft cannot guarantee that you can solve problems caused by improper use of the Registry Editor. You are at your own risk to use the Registry Editor.
If the problem persists after running the program in safe mode, the problem may be caused by the program loaded when the Windows XP computer starts.
Programs that are part of the Windows XP startup process are usually added to one of the following locations:
- ProgramThe "start" folder on the menu.
- The "run" row of all users in the registry.
- The "run" line of a specific user in the registry.
- "Load" for all users in the registry.
Note:: Because the registry is the place where all computer settings and program settings of Windows XP are stored, make sure that the Registry and specific registry items are backed up to prevent the computer from being started after the registry is edited. To back up the Windows XP registry, use Windows backup and perform a full system backup, including the system status.
Note:: The backup utility is not included in the default installation of Windows XP Home Edition. In Windows XP Home EditionStartThe "backup" icon does not exist in the menu, and is not listed in the "Add/delete programs" tool of Windows XP Home Edition.Backup.
For more information about how to install the backup utility in Windows XP Home Edition, click the following article number to view the article in the Microsoft Knowledge Base:
302894
(Http://support.microsoft.com/kb/302894/) how to install backup tools from a Windows XP Home Edition Disc
To back up system status data, follow these steps:
- ClickStart, PointingAll programs(OrProgram), ClickAttachment, ClickSystem ToolsAnd then clickBackup.
- ClickAdvanced Mode.
- ClickBackupTab, and then click to selectSystem statusCheck box.
- ClickStart backup.
This method backs up system status data and any other data selected for the current backup operation.
For more information about how to back up the system registry, click the following article number to view the article in the Microsoft Knowledge Base:
240363
(Http://support.microsoft.com/kb/240363/) how to back up and restore system status using a backup program in Windows 2000
StartThe folder icon is loaded from two locations. To delete these items, follow these steps:
- Right-clickStartAnd then clickResource Manager.
- Find and select the following folder, and clickCut: Documents and Settings \ All Users \ "START" Menu \ "Program" \ "START"
- Create a sysdriversbak folder on the desktop, create a userstartup folder in the folder, open the "userstartup" folder, and clickEditOn the menuPaste.
- Repeat steps 1st and 2nd and go to the All Users \ "START" Menu \ "Program" \ "START" folder.
- InEditClickCut, Find and click the "sysdriversbak" folder on the desktop, create a allusersstartup folder, and then clickPaste.
To delete all users'RunPerform the following steps for the row value:
- ClickStart, ClickRun, Type regedit, and then clickOK.
- Find and click the following registry key:HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Run
- ClickFileOn the menuExport.
- Find the "sysdriversbak" folder you createdFile NameIn the dialog box, type hklmrun, and then click
Save.
- In the right pane, right-clickDefaultValues other than values, clickDeleteAnd then clickYesTo confirm.
- View relatedRunonceAndRunonceexTo check whether there are programs not fully installed, and then use different save names to repeat steps 3rd to 5th to reflect
RunonceAndRunonceex.
To deleteRunPerform the following steps for the row value:
- ClickStart, ClickRun, Type regedit, and then clickOK.
- Find and click the following registry key:HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ Run
- ClickFileOn the menuExport.
- Find the "sysdriversbak" folder you created, type hkcurun in the "file name" box, and clickSave.
- In the right pane, right-click each value, and then clickDelete.
- View relatedRunonceTo check whether there are programs not fully installed, and then repeat steps 3rd to 5th, but the name should be changed to reflect
Runonce.
To deleteLoadFollow these steps:
- ClickStart, ClickRun, Type regedit, and then clickOK.
- Find and click the following registry key:HKEY_CURRENT_USER \ Software \ Microsoft \ Windows NT \ CurrentVersion \ WINDOWS
- In the right pane, clickFileOn the menuExport. IfLoadIf the value has any numeric values, find and click the "sysdriversbak" folder, and type
Hkcuload, and then clickSave.
- Double-click the "LOAD" value in the right pane, delete the value in the "value data" box, and then clickOK.
- Restart the computer and perform a test.
If the problem no longer occurs, merge the values you deleted in the following order:
- All Users Group and the startup icon of the user account you are using to log on
- Hkcurun
- Hklmrun
- Hkcuload
Note:: To merge these values, you can double-click the. reg file in Windows resource manager or my computer to automatically complete the import process. When you perform this operation, the system prompts you to confirm whether to merge the data into the registry. ClickYesStart the merge process. After the file is successfully merged into the registry, a successful message is displayed. If the File Syntax is incorrect and cannot be merged, you will receive an error message stating that the file is not a registry script and cannot be imported into the registry.
To addStartTo view the menu icons, follow these steps:
- ClickStart, PointingAll programs(OrProgram), PointingAttachmentAnd then click
Windows Resource Manager.
- Find and click the created "sysdriversbak" folder, open the "allusersstartup" folder, and clickSelect AllAnd then clickEditOn the menuCopy.
- Find and click the folder below, and then clickPaste:Documents and Settings \ All Users \ "START" Menu \ "Program" \ "START"
- Find and click the "sysdriversbak \ userstartup" folder, and then clickEditOn the menuCopy.
- Find and click the folder below, and then clickPaste: Documents and Settings \User Name\ "START" Menu \ "Program" \ "START"
Where,User NameIs the name of the user you use to log on.
- Restart the computer and perform a test.
How to test the user configuration file
Sometimes, the specific information of a user may be damaged, but other users on the same computer may have no problems. To determine whether this is the case, log on as a new user, or create a new user account, and then test the new logon.
Note:: Some programs work normally only when you log on with the default Administrator account. For example, this behavior may occur in programs installed earlier.
If the default Administrator configuration file is corrupted, reinstall Windows XP to correct the problem.
All user-specific configuration information (displayed in
HKEY_CURRENT_USER
Registry items) are stored in Documents and Settings \User NameFolder in the ntuser. dat file.
How to close third-party services at the top
To avoid or solve some problems, you may need to disable the installed third-party services. The security mode and the security mode with network support do not load third-party services. If the security mode works normally, the problem may be caused by the attached third-party services.
The following table lists some of the loaded core operating system services. However, this list varies with the installed Service and the version of Windows XP you are using.
Collapse the table and expand the table.
Service |
Description |
Startup Mode |
Alarm |
Alarm |
Automatic |
Appmgmt |
Application Management |
Manual |
Clipsrv |
Clipboard |
Manual |
EventSystem |
COM + Event System |
Manual |
Browser |
Computer Browser |
Automatic |
DHCP |
DHCP Client |
Automatic |
DFS |
Distributed File System |
Automatic |
TrkWks |
Distributed Link tracing Client |
Automatic |
Trksrv |
Distributed Link tracing Server |
Manual |
MSDTC |
Distributed Transaction Processing Coordinator |
Automatic |
Dnscache |
DNS Client |
Automatic |
EventLog |
Event Log |
Automatic |
Fax |
Fax Service |
Disable |
Ntfr |
File Replication |
Manual |
IISADMIN |
IIS Management Service |
Automatic |
Cisvc |
Index Service |
Manual |
Sharedaccess |
Internet Connection Sharing (firewall) |
Manual |
PolicyAgent |
IPsec Policy proxy (IPSec Service) |
Automatic |
LicenseService |
License Record Service |
Automatic |
Dmserver |
Logical Disk Manager |
Automatic |
Dmadmin |
Logical Disk Manager Management Service |
Manual |
Messenger Service |
Messenger Service |
Automatic |
Mspadmin |
Microsoft Proxy Server Management |
Automatic |
Wspsrv |
Microsoft Winsock Proxy Service |
Automatic |
Netlogon |
Network logon |
Automatic |
Mnmsrvc |
NetMeeting Remote Desktop Sharing |
Manual |
Netman |
Network Connection |
Manual |
NetDDE |
Network DDE |
Manual |
NetDDEdsdm |
Network DDE DSDM |
Manual |
NtLmSsp |
Nt lm Security Support Provider |
Automatic |
Onlbroad |
Online presentation Broadcast |
Manual |
SysmonLog |
Performance Logs and alarms |
Manual |
Plugplay |
Plug-and-play |
Automatic |
Spooler |
Background print program |
Automatic |
Protectedstorage |
Protected Storage |
Automatic |
Mailalrt |
Proxy alarm notification service |
Automatic |
RSVP |
QoS RSVP |
Manual |
RasAuto |
Remote access to the Automatic Connection Manager |
Manual |
RASMAN |
Remote access to the Connection Manager |
Automatic |
RPCSS |
Remote Procedure Call (RPC) |
Automatic |
RpcLocator |
Remote Procedure Call (RPC) Locating Program |
Manual |
RemoteRegistry |
Remote Registry Service |
Automatic |
Ntmssvc |
Removable Storage |
Automatic |
Seclogon |
RunAs Service |
Automatic |
SamSs |
Security Account Manager |
Automatic |
LanmanServer |
Server |
Automatic |
SCardSvr |
Smart Card |
Manual |
SCardDrv |
Smart Card Helper |
Manual |
SNMP |
SNMP Service |
Automatic |
SNMPTRAP |
SNMP Trap Service |
Manual |
Sens |
System Event Notification |
Automatic |
Schedule |
Task Scheduler |
Automatic |
LmHosts |
TCP/IP NetBIOS Helper Service |
Automatic |
Tapisrv |
Phone number |
Manual |
W3svc |
Web Publishing Service |
Automatic |
Lanmanworkstation |
Workstation |
Automatic |
Other services that can be installed include the following:
- ASC
- Asynmac
- BEEP
- Diskperf
- Fastfat
- Fsrec
- Ftdisk
- GPC
- Ismserv
- Mountmgr
- Msftpsvc
- Msiserver
- Mskssrv
- Mspcq
- NDIS
- NDISTAPI
- Ndiswan
- Ndproxy
- Netbios
- Netbt
- Netdetect
- Partmgr
- Parvdm
- RCA
- Schedule
- Schedulingagent
- Termservice
- Tlntsrv
- Trksrv
- UPS
- Utilman
- W32time
- Winmgmt
- WMI
Third-party products mentioned in this article are provided by companies other than Microsoft. Microsoft does not provide any implied guarantee or other forms of guarantee for the performance or reliability of these products. How to delete a program at the top
If none of the above methods solve the problem, you can use the Add/delete programs tool in Control Panel to delete the program. Restart the computer and then perform the test after each deletion.
If the problem persists, contact Microsoft Product Support Service or reinstall the operating system and program.