Explorer.exe not running on system startup

[Guest]

I'm running:
Vista Home Premium
Duo Core 6300
Nvidia 7600
and a GB of ram


I'm not sure if I am going to have to re install vista to solve this problem:

When starting up, the computer goes thru all the normal stages, then asks
for my password.
After I type this in, the computer takes a while to load, and then instead
of getting my desktop up on the screen, it loads straight into windows
explorer???

To start explorer.exe, I need to ctrl-alt-del and then go 'file' 'run'...
this is getting to be a real P.I.T.A.

I have tried running restore point and it wont run... (for whatever reason)


Any Ideas???

 

[Guest]

Thanx for the tip...

before I reboot and try it out I'll let you know what was in the 'value
data' space:

"Explorer.exe scvhost.exe"

I have renamed it to just "Explorer.exe"

Not too sure how it happened, but if it's fixed -thankyou very much


Tim

 

[Guest]

Actually, apon reboot I have experienced the same problem!

I went back into regedit to find that it said "Explorer.exe scvhost.exe"
again.

I changed it back (again) and pressed F5; it changed from "Explorer.exe" to
"Explorer.exe scvhost.exe" straight away.


Any ideas to make it stick??

 

[Malke]

Actually, apon reboot I have experienced the same problem!

I went back into regedit to find that it said "Explorer.exe scvhost.exe"
again.

I changed it back (again) and pressed F5; it changed from "Explorer.exe" to
"Explorer.exe scvhost.exe" straight away.

Are you absolutely sure of the spelling of "scvhost.exe"? Because if you
typed this correctly your computer is infected with some variant of the
Agobot virus. "Svchost.exe" is the process belonging to Windows.

The fact that you have "explorer.exe scvhost.exe" shows that you are
indeed infected because the virus runs with explorer.exe every time.

Go through these general malware removal steps systematically -
http://www.elephantboycomputers.com/page2.html#Removing_Malware

You will see instructions to scan with either Sysclean or Multi_AV,
following that with updating your full-featured antivirus and doing
another scan. All scans should be done in Safe Mode.

Standard caveat: If the procedures look too complex - and there is no
shame in admitting this isn't your cup of tea - take the machine to a
professional computer repair shop (not your local version of
BigStoreUSA). Please be aware that not all local shops are skilled at
removing malware and even if they are, your computer may be so infested
that Windows will need to be clean-installed. Have all your data backed
up before you take the machine into a shop.


Malke

 

[Guest]

Thanx

Yes, i'm sure on the spelling; and I managed to fix the problem by changing
the registry line in safe mode.
I have scanned for viruses and malware 3 times with 3 different programs.
(Spybot, Symantec and vista one-care) none of which have found anything.

There was some spyware simply called 'x' which I got rid of. I'm not sure
if thats what caused the problem though.


Thanx for your help


Tim

 

[Malke]

Thanx

Yes, i'm sure on the spelling; and I managed to fix the problem by changing
the registry line in safe mode.
I have scanned for viruses and malware 3 times with 3 different programs.
(Spybot, Symantec and vista one-care) none of which have found anything.

There was some spyware simply called 'x' which I got rid of. I'm not sure
if thats what caused the problem though.

Well, if things stay good then you know you got it. As an aside, I don't
recommend either Symantec or OneCare for antivirus protection. A much
better solution is NOD32, Kaspersky, or even Avast if you need a free one.


Malke

 

[Guest]

i hav the same problem with explorer and hav changed the registry in safe
mode, but after a restart the shell in registry changes bac to explorer.exe
svchost.exe. i used a system restore eariler and this fixed the problem
somehow it has COME BACK AGAIN and i dont hav a recent enough restore point
now. i can only run explorer.exe manually. any ideas?

 

[Rick Rogers]

Hi,

When you're in the registry editor, make sure you're in this branch:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

and not this one:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion

Note that the first one has NT after Windows and is located a few keys below
the second one when viewed in the registry editor. It has to exist, if it
didn't you wouldn't even get a logon prompt.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP

Windows help - www.rickrogers.org
My thoughts http://rick-mvp.blogspot.com