MalwareTeks: How To Boot Windows To Safe Mode

Table of Contents

1 What is Safe Mode?
2 Do Not Force Safe Mode
3 Booting to Safe Mode

3.1.1 Windows 95
3.1.2 Windows 98
3.1.3 Windows ME
3.1.4 Windows 2000
3.1.5 Windows XP
3.1.6 Windows Server 2003
3.1.7 Windows Vista
3.1.8 Windows Server 2008
3.1.9 Windows 7
3.1.10 Multi-Boot Systems

4 Adding Safe Boot Options to the boot.ini
5 Getting Out of Safe Mode

What is Safe Mode?

Safe Mode enables people who use Microsoft Windows 95, Windows 98, Windows ME, Windows 2000, Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, and Windows 7 to safely login to Windows and correct problems that may be preventing Windows from staring normally. Safe Mode only loads Windows default drivers and settings, allowing users to correct issues that may be preventing them from starting Windows in Normal Mode.

Do Not Force Safe Mode

Using utilities such as BootSafe or Microsoft's System Configuration Utility (MSConfig) to force Safe Mode, is an unsafe method of getting to Safe Mode, when the F8 method does not work.

These programs make changes to the boot.ini file, by adding the /safeboot argument to your Operating System startup up line, in order to force Safe Mode at reboot.

Once you have finished working in "Safe Mode", you would run the Microsoft System Configuration Utility, uncheck the /safeboot option, removing the /safeboot argument from the boot.ini, allowing the system to boot normally.

On an Operating System that is functioning properly, this is normally not a problem. Unfortunately, there are forms of Malware that will delete the "Safeboot" Windows Registry keys, meaning the computer will not boot to "Safe Mode", rendering the system inoperable.

If this happens, the only way to undo the changes and restore proper settings is to boot to the Recovery Console, and rebuild the boot.ini. If you do not have a Windows installation CD or the Recovery Console is not installed, you will be not be able to restore the correct settings in the boot.ini.

Booting to Safe Mode

F8 Method

By pressing the F8 key when your computer begins to boot you will have the option to load into Safe Mode. You will need to press the F8 key before your Windows splash screen displays. The best time to begin pressing the F8 key is as soon as you power your computer on. Your BIOS splash screen will show and begin loading everything. If you have purchased an OEM machine from a manufacturer such as Gateway, Dell, Acer or another company, you will see their logo as a BIOS splash.

Windows 95

If the computer is running, shut down Windows, and then turn off the power.
Wait at least 10 seconds, and then turn the computer on.
As the computer starts, press and hold down the F8 key until the 95 Startup Menu appears.
Ensure that the Safe Mode option is selected.
Press Enter. The computer then begins to start in Safe mode.

Windows 98

If the computer is running, shut down Windows, and then turn off the power.
Wait at least 10 seconds, and then turn the computer on.
As the computer starts, press and hold down the F8 key until the 98 Startup Menu appears.
Ensure that the Safe Mode option is selected.
Press Enter. The computer then begins to start in Safe mode.

Windows ME

If the computer is running, shut down Windows, and then turn off the power.
Wait at least 10 seconds, and then turn the computer on.
As the computer starts, press and hold down the F8 key until the ME Startup Menu appears.
Ensure that the Safe Mode option is selected.
Press Enter. The computer then begins to start in Safe mode.

Windows 2000

If the computer is running, shut down Windows, and then turn off the power.
Wait at least 10 seconds, and then turn the computer on.
When you see the black-and-white Starting Windows bar at the bottom of the screen, start tapping the F8 key. The Windows Advanced Options Menu appears. If you begin tapping the F8 key too soon, some computers display a "keyboard error" message. To resolve this, restart the computer and try again.
Ensure that the Safe Mode option is selected.
Press Enter. The computer then begins to start in Safe mode.

Windows XP

If the computer is running, shut down Windows, and then turn off the power.
Wait at least 10 seconds, and then turn the computer on.
Start tapping the F8 key. The Windows Advanced Options Menu appears. If you begin tapping the F8 key too soon, some computers display a "keyboard error" message. To resolve this, restart the computer and try again.
Ensure that the Safe Mode option is selected.
Press Enter. The computer then begins to start in Safe mode.
Login on your usual account.

Windows Server 2003

If the computer is running, shut down Windows, and then turn off the power.
Wait at least 10 seconds, and then turn the computer on.
Start tapping the F8 key. The Windows Advanced Options Menu appears. If you begin tapping the F8 key too soon, some computers display a "keyboard error" message. To resolve this, restart the computer and try again.
Ensure that the Safe Mode option is selected.
Press Enter. The computer then begins to start in Safe mode.
Login on your usual account.

Windows Vista

If the computer is running, shut down Windows, and then turn off the power.
Wait at least 10 seconds, and then turn the computer on.
Start tapping the F8 key. The Windows Advanced Options Menu appears. If you begin tapping the F8 key too soon, some computers display a "keyboard error" message. To resolve this, restart the computer and try again.
Ensure that the Safe Mode option is selected.
Press Enter. The computer then begins to start in Safe mode.
Login on your usual account.

Windows Server 2008

If the computer is running, shut down Windows, and then turn off the power.
Wait at least 10 seconds, and then turn the computer on.
Start tapping the F8 key. The Windows Advanced Options Menu appears. If you begin tapping the F8 key too soon, some computers display a "keyboard error" message. To resolve this, restart the computer and try again.
Ensure that the Safe Mode option is selected.
Press Enter. The computer then begins to start in Safe mode.
Login on your usual account.

Windows 7

If the computer is running, shut down Windows, and then turn off the power.
Wait at least 10 seconds, and then turn the computer on.
Start tapping the F8 key. The Windows Advanced Options Menu appears. If you begin tapping the F8 key too soon, some computers display a "keyboard error" message. To resolve this, restart the computer and try again.
Ensure that the Safe Mode option is selected.
Press Enter. The computer then begins to start in Safe mode.
Login on your usual account.

Multi-Boot Systems

If the computer is running, shut down Windows, and then turn off the power.
Wait 30 seconds, and then turn the computer on.
When the Boot loader menu (list of the available operating systems) appears, use the arrow keys on the keyboard to select the version of Windows what you want.
Press Enter, and then immediately begin tapping the F8 key. The Windows Advanced Options menu appears.
Ensure that the Safe Mode option is selected.
Press Enter. The computer then begins to start in Safe mode.
Login on your usual account.

Adding Safe Boot Options to the boot.ini

To modify the boot.ini while in Windows, from an Account with "Administrator rights" do the following:

Click-on Start, then Run.
Type the following in the Open: box, attrib -h -s -r "%systemdrive%\boot.ini", Click "OK".
Click-on Start, then Run.
Type the following in the Open: box, notepad "%systemdrive%\boot.ini", Click "OK".

Notepad will open and display the contents of the boot.ini.

Add Minimal Safe Mode

multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition Safe Mode" /noexecute=optin /fastdetect /safeboot:minimal

[boot loader]
timeout=30
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS

[operating systems]
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition Safe Mode" /noexecute=optin /fastdetect /safeboot:minimal
C:\CMDCONS\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons

Add Safe Mode with networking

multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition Safe Mode with Networking" /noexecute=optin /fastdetect /safeboot:network

[boot loader]
timeout=30
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS

[operating systems]
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition Safe Mode" /noexecute=optin /fastdetect /safeboot:minimal
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition Safe Mode with Networking" /noexecute=optin /fastdetect /safeboot:network
C:\CMDCONS\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons

NOTE

Change "Windows XP Home Edition" to match the name of your Operating System.

WARNING

multi(0)disk(0)rdisk(0)partition(1)\WINDOWS must be correct for your Operating System. In other words multi(0)disk(0)rdisk(0)partition(2)\WINDOWS if your Operating System is on Partition 2 and the Windows Directory is \WINDOWS. multi(0)disk(0)rdisk(0)partition(1)\WINNT if your Operating System is on Partition 1 and the Windows Directory is \WINNT or multi(0)disk(0)rdisk(0)partition(2)\WINNT if your Operating System is on Partition 2 and the Windows Directory is \WINNT.

In notepad click "File" and then "Save" to save the changes to boot.ini.
Exit Notepad
Click-on Start, then Run.
Type the following in the Open: box, attrib +h +s +r "%systemdrive%\boot.ini", Click "OK".

That's it. Now, the next time you boot your system you will be presented options to boot to "Normal Mode", "Safe Mode", "Safe Mode with Networking", and the "Recovery Console" if it is installed.

You may not reproduce this article in whole or part without the express permission of the author and MalwareTeks.