NEED HELP QUICK! - EXPLORER.EXE NOT LOADING

[WithoutMotive]

I have a MAJOR problem at the moment and no idea how to get around it without formatting, etc.

 

This laptop I'm on right now had a weird virus a couple of days ago. Cleaned it. Sorted it. No problem.

 

This morning, it took ages to log on. I saw my desktop wallpaper and that was all. No icons. No taskbar. Nothing.

I can run Task Manager and run programs from there but can't open any windows.

 

When I go to the Windows directory and try and run explorer.exe from there I'm told I don't have the right permissions to do so. I've tried replacing explorer.exe and it says the same thing. I've even tried running a copy of explorer.exe from my pen drive and get the same error. It seems like something is stopping me running any file called explorer.exe.

 

I tried to delete explorer.exe from the Windows directory but it appeared again all by itself. I've done virus scans and spyware scans but all turned up with nothing.

 

So, help! Otherwise it's going to be a rebuilding job.

 

Thanks.

[bizzel]

Have you tried the system file checker? If you can get a command prompt up type "SFC /SCANNOW" and let it do its thing.

[Michael]

Have you tried going into Safe Mode? If Explorer.exe suffers from the same problem(s) here, then I suspect the virus may or may not still be active or has damaged other Windows components.

 

If you're still experiencing problems, I suggest you backup your data and re-install Windows from new. This'll then guarantee the virus is no longer there.

[WithoutMotive]

In Safe Mode, explorer.exe seems to loads perfectly ok.

 

@bizzel I'll have to wait until Tuesday when I'm back in work to run SFC. I don't have an XP disc with me. THanks, anyway.

[FN-GM]

If you go into MSconfig and stop anything unnecessary running that might help. Can you take ownership of explorer.exe?

 

Z

[linkazoid]

 

@bizzel I'll have to wait until Tuesday when I'm back in work to run SFC. I don't have an XP disc with me. THanks, anyway.

 

This is why i always copy the I386 folder to the C: and change - "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SourcePath" to C:\I386

 

Little handy tip to save having to have the CD all the time.

 

Michael

[ZeroHour]

Create another admin account and see if it happens for them.

It could be profile corruption.

[Jamman960]

MSConfig/HiJackthis should help if its a virus/autoit script causing the problem, also look out for duplicate processes running in taskmanager, a friends laptop had a virus that was basically an autoit script setup to capture key strokes - it was renamed svchost.exe so blended in with all the other processes except it was running as the user rather than system/network service.

 

have you tried renaming explorer.exe and setting the renamed exe as the default shell?

[mattx]

f its a virus/autoit script causing the problem,

 

Autoit script is NOT a virus, its a Windows automation language. But you can [ just like you can with any other similar type language knockup some nasties. ]

 

I would suggest using autoruns, process explorer and as already suggested Hijack this to check whats running when the PC boots up - oddly enough all these are avilable on the Admin Bar [ see below ] - plus Trend's sysclean which is also on it may help.....

[WithoutMotive]

Well, I've managed to get rid of the viruses (touch wood) and, regarding the explorer problem, I renamed explorer.exe and renamed the associated key in the registry. I now have my desktop and taskbar back. It's a workaround so I'm going to format and rebuild when I'm back in work on Tuesday.

 

Thanks for all your suggestions, though.

[Jamman960]

Autoit script is NOT a virus, its a Windows automation language. But you can [ just like you can with any other similar type language knockup some nasties. ]

 

I'm fully aware of this, I only mentioned it because the latest "virus" I've dealt with was an Autoit script that wasnt picked up by the AV software that was installed.

[Michael]

Seeing as explorer.exe runs ok in Safe Mode, I presume you've tried running anti-virus and anti-spyware scans within Safe Mode?

 

If all else fails then I would recommend a format and re-install. Make sure you include the latest service pack! It sounds like you've spent a lot of time on this already

[WithoutMotive]

Yup. Done the anti-virus scan, etc. All ok.

I'll be formatting and re-installing tomorrow. The old laptop could do with a fresh start.

[ZeroHour]

Alternate account works okay?

[Heebeejeebee]

Are you by chance running Vista and Spybot?

 

I ask because I had this same problem after an update to Spybot (Usng SD Helper and Teatimer). I had use system restore to fix it. I had no such problems with XP.

 

HBJB

[RabbieBurns]

I had this problem on a clients machine yesterday, except it wouldnt even load explorer.exe in safe mode either.

 

i could launch taskmanager from ctrl-alt-del and trying to force explorer.exe to run just resulted in a file not found error

 

expanding and replacing explorer.exe from the CD didnt work either

 

A system restore to a few days previous resolved the problem.

[WithoutMotive]

Are you by chance running Vista and Spybot?

 

I ask because I had this same problem after an update to Spybot (Usng SD Helper and Teatimer). I had use system restore to fix it. I had no such problems with XP.

 

HBJB

 

Nope, neither

[davidfs]

i was going to start a new thread but this is similar so hope I am in order to post here.

I have a Windows server 2003 network, 80 XP pro clients SP3. I am getting random lock up of explorer.exe on log on and log off. Symptoms on log on are that most of the icons are grey and default and machine goes no further. On log off PC just stops responding.

There are 2 work arounds: ctrl+alt+del and Log off. "Explorer.exe not responding window end now?" pops up. If i end now and re-log on with the same user it will invariably log on properly. I can also stop and restart explorer.exe using ctrl+alt+del and again it will work properly.

It never happens on an admin account - only on power users. So I suspect that some application is trying to write to somewhere for which it doesn't have permissions. As it is random the usual solution of msconfig to disable everything at start up will be somewhat time consuming and disruptive. I think it is only happening on my new Dell machines so is there some Dell application that runs that may be causing the problem? I couldn't spot anything in services ar task manager.

Is there a technical way I can find out what is actually stopping explorer.exe in its tracks.

I run sophos, office and a normal range of educational software.

I have trawled the net but can't find anything that actually pinpoints my problem and provides a solution.

All suggestions gratefully received. Thanks very much.

David S.

[steve]

Download Process Explorer - free MS utility.

 

It will give you a better idea of what's running on your machine.