Virus !!! (Solved) Explorer not starting, even on safe mode

[Mauri]

Hi,

 

Does any one know about a virus that kills explorer.exe constantly (trying to re run it from run does not work) and it even does it safe mode also it seems to spread as 3 computers at one of the primary's we support all have the same symptoms.

 

They have Ofsted coming in Monday so we are trying to get this matter solved today.

 

Any help would be greatly appreciated.

 

Thanks

Mauri

Edited November 7, 2008 by Mauri
Problem solved

[rush_tech]

Have you ran a virus scan? does it find anything?

[Sirbendy]

not killed under DEP prevention? I've had a few PCs where explorer is killed by Windows itself as "exhibiting virus like tendencies".

 

Makes me laugh every time - it's usually a case of reimaging the kit to shut it up.

[localzuk]

I've not heard of viruses that can work in safe mode, so my guess would be that explorer has been corrupted and is simply crashing when it is launched.

 

My first response would be to simply re-image the machine. Far less hassle than trying to solve the issue.

[Mauri]

The antivirus didn't find a thing, Symantec updated. But I have found the cure on the net.

 

This is the key that needs to be deleted...

 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\explorer.exe

 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\iexplorer.exe

 

Once these keys are deleted the desktop and internet explorer should come back to life.

 

 

explorer.exe wont load after reboot - Tech Support Guy Forums

 

&

 

Tutorials-Win.com >> XP Support >> No icons, No task bar, Nothing but a mouse pointer on a black desk - Microsoft Windows Forum

[Domino]

Explorer's pretty flaky anyway, it could be any number of things.

 

Have you installed any software recently that have shell extensions?

[Geoff]

Yes if explorer is crashing I'd suspect a shell extension is causing it. Either an image/video preview one (for the thumbnail view) or a right click menu extension.

[RabbieBurns]

I had this on a computer recently, was stumped as you say it was even borked in safe mode. Ended up just reformatting it, much quicker and easier than trying to find a cure. Thanks for posting the fix though

[AyatollahPies]

Malwarebytes Anti-Malware will resolve this issue. Had the same thing happen recently and I was tearing my hair out.

 

It's a pain installing it via task manager etc, but it should do the trick.

[Singist]

Is sparkle box toolbar installed those PC's? It has crashed several machines in my schools. You can't disable it in add ons either as it doesn't show. You can only remove through add/remove. Delete history and cookies once uninstalled.

 

Hope this works!!

[MisterTrimble]

Would strongly second MalwareBytes... had the exact same trojan and cleared the problem. A cracking piece of software.

 

Re Sparklebox toolbar... can anyone actually see what it does, bar blocking net access, etc? We've blocked it from being download via the filtering policy.