Explorer.exe fails to initalize

Discussion in 'Malware Help (A Specialist Will Reply)' started by BigDaddySteve, Mar 31, 2005.

  1. BigDaddySteve

    BigDaddySteve Private E-2

    when I log on to Win xp a prompt pops up sayng that explorer.exe failed to initalize and I get my desk top with no start menue or icons I can only open task manager but I can access every thing in safe mode which I am in now
     
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Constantly posting in new threads instead staying in one, will only delay your getting help and it wastes our time. Please stay in one thread. Your other posts will be deleted including the unrequested HijackThis log. Please read and follow the sticky threads.

    To help us to best help you, please follow the steps below closely and in the order given and do not skip anything. If you have any difficulty, please post back letting us know what steps you have completed, what you found while doing the scans if anything along with details about any problems you may have encountered in completing the steps. The more details you can provide the better. Don't be afraid to ask for additional help if you don't understand something!

    - Run ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal Make sure you check version numbers and get all updates.

    - Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.


    After doing ALL of the above you still have a problem:

    - Download HijackThis 1.99.1

    - Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

    - Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file.

    - Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

    - Run HijackThis and save your log file.

    - Post your log as an ATTACHMENT to your next message. (Do NOT copy/paste the log into your post).
     
  3. BigDaddySteve

    BigDaddySteve Private E-2

    OK I downloaded all the tools and scans with sucsess, ran all the tools and scans as stated and found no problems with my system and ten downloaded Hijack this saved it in C:/Spywere Tools and ran the program and this is what I got
     

    Attached Files:

  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Please follow directions! You still had your browser running:
    C:\Program Files\Internet Explorer\iexplore.exe

    You are running HijackThis from the ZIP file:
    C:\DOCUME~1\ADMINI~1.INC\LOCALS~1\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis.exe

    I specifically requested that you not do that. You must extract it from the ZIP file. All you did was put the ZIP file in the folder you mentioned. You must extract the executable file out of the ZIP into that folder.

    HijackThis must be run in normal boot mode (as indicated in the HijackThis stick thread) unless otherwise requested.
     
  5. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You may want to check the below registry key:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell

    and see if the values for Shell is explorer.exe

    To do that click Start, Run, and enter regedit and click OK!
    Then navigate your way to and select Winlogon
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

    then find the Shell in the right window pane and see what the Data entry is.
     
  6. BigDaddySteve

    BigDaddySteve Private E-2

    Yes the value for Shell is Explorer.exe.
    I don't know how to run hijack this in normal mode when I don't have a way to access my C:/ drive folders from the start menu.
     
  7. BigDaddySteve

    BigDaddySteve Private E-2

    I did unzip the file to the Spyweretools folder and run the program in normal mode and this is what I got.
     
  8. BigDaddySteve

    BigDaddySteve Private E-2

    I can't get the attacment to post so here it is coppied and pasted (I know it sayes not to do this but I don't know what else to do)

    Edit by chaslang: Inline log attached
     

    Attached Files:

    Last edited by a moderator: Apr 4, 2005
  9. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Next time you have a problem attaching the HJT log try using a different file name to see if that works.

    The only thing I see wrong in you HJT log is the fact that no explorer.exe process is running.
    Try booting up your PC in normal mode and after it comes up, bring up Task Manager by hitting CTRL-ALT-DEL. Then select File and New Task (Run...). In the window that comes up enter explorer and then click OK! Does that work? Does you Desktop come back (icons, etc)?
     
  10. BigDaddySteve

    BigDaddySteve Private E-2

    Nope I tryed that and this is what I get

    explorer.exe Application Error

    The application failed to initialize properly (0xc0000005). Click on OK to terminate the application.

    OK

    Then I click OK and nothing :-(
    right before this started to happen it did the same thing only it was iexplorer.exe so I restarted and then no icons or Start menu and the explorer.exe error
     
  11. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member


MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds