Live Chat & Podcast at 1:00PM Eastern on Sunday!
There's no such thing as a stupid question, but they're the easiest to answer.
JoinTour
Login
Search
Virus & Other Malware Removal
Tag Cloud
access acer asus batch bios bsod computer crash desktop driver drivers error ethernet excel freeze gaming hard drive hardware hdmi internet laptop malware memory modem monitor motherboard mouse network printer problem ram registry router slow software sound trojan ubuntu 11.10 uninstall usb video virus vista wifi windows windows 7 windows 7 32 bit windows 7 64 bit windows xp wireless
Search
Search for:
Tech Support Guy Forums > Security & Malware Removal > Virus & Other Malware Removal >
Solved: Solved: explorer.exe Isn't Working Very Well

Reply  
Thread Tools
zaussome's Avatar
Junior Member with 7 posts.
 
Join Date: Jun 2008
09-Jun-2008, 09:29 PM #1
Solved: explorer.exe Isn't Working Very Well
A continuation of my other thread:

Quote:
Hello,

When I boot into my Vista Home Premium SP1 computer, instead of being greeted by my desktop, instead my Documents folder appears on a black screen and explorer.exe does not run. Does anybody know what could be causing this?

Just incase, here is a hijackthis log: http://stuff.nilved.net/hijackthis.txt

Thanks!
I ran Windows Defender and found that the problem was caused by a trojan. Defender removed it, yet the problem is still not fixed. What's more, by running Task Manager while in the standard-bootup I can see that explorer.exe is running, the same explorer.exe I run to start the main GUI.

Here is what I see when booting the computer: http://stuff.nilved.net/allisee.jpg

Could it be a problem with my explorer.exe or the configuration it is run under? (csrss.exe iirc?) Another interesting note is that if you run Windows Explorer from the start menu, it opens Documents, is it possible that explorer.exe is being run with the configuration of Windows Explorer or something? I'm thinking aloud and have no idea what I'm talking about.

Last edited by zaussome; 09-Jun-2008 at 09:59 PM.. Reason: fixed image url
zaussome's Avatar
Junior Member with 7 posts.
 
Join Date: Jun 2008
09-Jun-2008, 09:44 PM #2
Again, I hate to bump my own thread, but there are 704 people viewing this forum and not a single person has read this thread...
zaussome's Avatar
Junior Member with 7 posts.
 
Join Date: Jun 2008
09-Jun-2008, 11:22 PM #3
Update: Looking in my registry, the shell key is set to Explorer.exe C:/WINDOWS/Config/csrss.exe, but there is no Config folder and thus no csrss. Is it possible that:
  1. The malware deleted my config folder.
  2. The malware somehow messed with that value.

Again, speaking with no knowledge and completely blind, it seems like running Windows Explorer (from the start menu) runs Explorer.exe (with no parameters,) which creates the standard folder listing (what I see when I boot up,) and since that csrss.exe file doesn't exist, it's defaulting to that behaviour instead of the normal taskbar, desktop etc?
zaussome's Avatar
Junior Member with 7 posts.
 
Join Date: Jun 2008
09-Jun-2008, 11:38 PM #4
Problem solved. Changed shell to explorer.exe not Explorer.exe C:/WINDOWS/Config/csrss.exe.

Thanks for your very comprehensive help though.
Reply

Tags
explorer.exe, malware, trojan, windows, windows vista

THIS THREAD HAS EXPIRED.
Are you having the same problem? We have volunteers ready to answer your question, but first you'll have to join for free. Need help getting started? Check out our Welcome Guide.

Search Tech Support Guy

Find the solution to your
computer problem!




Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
WELCOME TO TECH SUPPORT GUY! Are you looking for the solution to your computer problem? Join our site today to ask your question -- for free! Our site is run completely by volunteers who want to help you solve your computer problems. See our Welcome Guide to get started.
Thread Tools



Facebook Facebook Twitter Twitter TechGuy.tv TechGuy.tv Mobile TSG Mobile
You Are Using:
Server ID
Advertisements do not imply our endorsement of that product or service.
All times are GMT -4. The time now is 02:21 AM.
Copyright © 1996 - 2011 TechGuy, Inc. All rights reserved.

Powered by Cermak Technologies, Inc.