desktop has no icons or start menu

Discussion in 'Malware Help (A Specialist Will Reply)' started by mquinlan, May 28, 2005.

  1. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    I do not remember seeing that tried either. That would also be a good thing to try (along with also trying to run explorer.exe from Task Manager).
     
  2. mquinlan

    mquinlan Private E-2

    Here is the information I got from C:\WINDOWS\i386\explorer...
    Type of file: shortcut
    description: Windows Explorer
    location: C:\i386
    size: 1.42 KB (1,463 bytes)
    size on disk: 4.00 KB (4096 bytes)
    created: Friday August 30, 2002
    modified:June 09, 2005
    Accessed: June 20, 2005

    I tried opening task manager and running explorer.exe. No desktop. A window popped up advising me the file can not be found. Whether I type it in or navigate to it, "File can not be found"
    Then I tried it in safe mode. No desktop in safe mode, just a black screen with safe mode written in the four corners and Microsoft in the upper left hand corner. Again, I could not open explorer in safe mode either. I got the same message, "file could not be found".

    Thanks again so much for your help and patience!
     
  3. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    That file you gave info on was only a shortcut. It was not explorer.exe Apparently you have some how deleted your explorer.exe file for SP2. The one in your i386 folder is more than likely for you previous revision level. Do you still have you SP2 download or do you have it on a CD, or did you do the upgrade on line without downloading the whole SP2 patch?

    Here is something else that could be tried first. The SP2 installation normally creates a C:\windows\ServicePackFiles\i386 folder. Look in this folder (if you have one) for explorer.exe and copy it to c:\windows
     
    Last edited: Jun 20, 2005
  4. mquinlan

    mquinlan Private E-2

    I found explorer.exe in service pack files\i386. I copied to C:\Windows and tried to open it that way and got the same window. "Can not find file."
     
  5. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    In the Run box in Task Manage enter exactly the below:

    c:\windows\explorer.exe

    Now what happens.

    How did you find the file in the ServicePackFiles\i386 folder? (i.e. what program did you use?)
    And how did you copy it?
     
  6. mquinlan

    mquinlan Private E-2

    A window pops up that reads "Windows cannot find c:\windows\explorer.exe. Make sure you typed the name correctly, and then try again. To search for a file, click the start button, and then click Search."
    To get to explorer.exe, I opened the task manager, run, chose c:\, then windows, Service Pack Files, i386, then explorer.exe.
    I tried to left click on explorer.exe and get the window telling me it can't be found. Then I right clicked and tried to open, same thing. Then I right clicked and tried "run as", it asks me what user, I select my own name and "OK", and I get the same window " Windows cannot..."
    To copy it, I right clicked and chose "copy" then I went back to C:\ and right clicked on an empty space in C:\windows, and chose "paste". Then I tried to open it. Got the same message, "Windows cannot find..."
    Hope this is clear.
     
  7. Adrynalyne

    Adrynalyne Guest

    Time to check your registry.

    HKEY_CLASSES_ROOT\exefile\shell\open\command

    What does it say on the right?


    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\exefile\shell\open\command

    What does it say on the right?
     
  8. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Thinking about file associations problems huh? I thought about that but was not sure.
     
  9. mquinlan

    mquinlan Private E-2

    Went into regedit and looked where you told me to... Here it is
    Name- Default
    Type- reg_sz
    Data: "%1"%*
    That's what it said. What I typed next to data, is percent symbols, although, it looks like 96 to me. (I could have been staring at the computer screen too long.)
    Is the code cracked?
     
  10. Adrynalyne

    Adrynalyne Guest

    No, its correct, if, and only if, it looks like this:


    "%1" %*

    Note the space? it must be there. Check both of your keys.
     
  11. mquinlan

    mquinlan Private E-2

    Oops. I didn't add in there that they both listed the same information to the right. In other words, the name, type and data information was exactly the same.
     
  12. mquinlan

    mquinlan Private E-2

    The space is there.
     
  13. mquinlan

    mquinlan Private E-2

    Someone suggested that I download the Service Pack 2 again. What do you think?
     
  14. Adrynalyne

    Adrynalyne Guest

    I don't agree.

    Did you ever end up trying safe mode?
     
  15. mquinlan

    mquinlan Private E-2

    Yes, I did and no desktop or task bar. Is there anything esle I can do?
     
  16. Adrynalyne

    Adrynalyne Guest

    What is the size of your explorer.exe in C:\windows
     
  17. mquinlan

    mquinlan Private E-2

    .98 MB
    size on disk is the same= .98 MB
     
  18. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Give the size in bytes. It would be more accurate.
     
  19. mquinlan

    mquinlan Private E-2

    1,032,192 bytes
     
  20. theefool

    theefool Geekified

    That file size is the same as mine.....

    Okay, if you can get into task manager try going into the command shell.

    I.E. File, Run, cmd (press enter)
    type in the following:

    cd\windows (press enter)
    explorer.exe (press enter)

    anything happen?

    What about....
    copy explorer.exe explorer.com (press enter)

    now:

    explorer.com (press enter)

    anything?

    What about:

    copy explorer.exe test.exe (press enter)
    copy explorer.exe test.com (press enter)
    enter:

    test.exe (press enter)

    anything?

    Whatabout:

    test.com (press enter)

    I've seen some viruses in the past that mess with this stuff...usually change the extension to .com fixes these issues or renaming the file....

    well, not fixes, but gets you in the right direction....
     
  21. Adrynalyne

    Adrynalyne Guest

    Matacumbie dropped this off in a PM to me. I know its an outside forum, but its always good to give credit to those who have better ideas than we can come up with ;)

    Please back up any registry keys you delete or modify!

    http://forums.techguy.org/history/t-370715.html
     
  22. mquinlan

    mquinlan Private E-2

    OK, theefool, I did what you suggested, and here is what happened...
    when I typed in CD|Windows.exe
    the computer reply was " The system cannot find the file C:\windows\explorer.exe

    I typed in copy explorer.exe explorer.com
    the reply was "1 file(s) copied"

    I typed in copy explorer.exe test.exe
    the reply was " 1 file(s) copied"

    I typed in copy explorer.exe test.com
    the reply was "1 file(s) copied"

    I typed in test.exe
    and it opened My Documents

    I typed in test.com
    and it opened My Documents in another window.

    Did it do what it was supposed to do? I'm thinking it probably didn't, because I used a link from Adrynelyne and read through a forum that listed what I'm dealing with and this step was done there and the person who did it had the same result I did. And still no desk top.
     
  23. mquinlan

    mquinlan Private E-2

    Adrynelyne, I took the link you gave me and read all of the posts. It sounds like what I've been experiencing (what an experience!). Before I deleted the registry keys, however, I wanted to make sure I created the back up like I should. I went to the string and clicked it, then went to file, export, named the file and saved that "selected extension". It saved it to My Documents. Then I looked in help topics to see if I could find how to restore it if I needed to. Couldn't find it. So, did I backup the correct way?
     
  24. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Yes! That's correct.
    If you needed to restore it, you just select File, Import from within regedit. Then locate the file and import it.
     
  25. mquinlan

    mquinlan Private E-2

    IT WORKED!!!!! Hugs and kisess to you all! Thank you so much for ALL OF YOUR HELP! I have a desktop and it's BEAUTIFUL!!! And, I have a taskbar, that works!!!! Thank you, thank you, thank you.

    I just had to delete those 2 registry keys. Only took about, what, 6 weeks? Thanks for your perserverence!

    I'm going to do all the scans over and one more question, Service Pack 3 is available....should I download it?
     
  26. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Well we were on the right track. When I came in, I immediately knew there was a problem getting your explorer.exe to run at startup. Finding the actual root cause was the problem. There are many problems that can cause this to happen. Some of them are virus/trojan related.

    I'm glad that Adyrn got that link from Matacumbie. Even happier that it worked.
     
    Last edited: Jul 27, 2005
  27. Adrynalyne

    Adrynalyne Guest

    No kidding. I tip my hat to Matacumbie on this one BIG TIME. He always seems to bail me out of the sticky ones!


    A definite asset to MG :)
     
  28. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    For WinXP there's only Service Pack 2 and per your last HJT it appears your already up-to-date.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds