Ask your question Print Format Forum list Help them Statistics Search Charter Forum Windows

EXPLORER.EXE corrupted or infected

Last answer on Nov 4, 2009 2:46:18 am GMT DennisPS, on Jun 2, 2008 8:28:46 am BST

Report this message to moderators

Hello,
Desktop is dropping after boot. I cannot open task manager because I try but I get error message that says task manager was disabled by administrator. I have to click ok. Then I get the same problem. I cannot do a system restore because I cannot go back past the last time I tried to do it, which was two days ago. There are no more available days to restore to.
Symptoms: When I boot my pc, it comes up fine, with all the regular icons on the desktop and programs appear to be running, but then my desktop icons, and all files I might be trying to click on close down in a flash. Then they re-apear again, just to do it all over again. I managed to get to the run function to run regedit. That's as far as I want to go because I don't know where to go in regedit to find the culpret infected file to delete it. I try to run virus scan with Mcaffee, but nothing is found.
Question: Is there anywhere that I might look to find the culpret file in the regedit editor? From what I have managed to find on the Net, it involves the explorer.exe file and I don't know what to do to get to this infection, and I do not, under any circumstances, want to re-install my OS just to get rid of it. I have no back-up for all my files, I know I am a fool for not backing up my files daily, but what is done is done. Can I fix this? The pc is rendered useless without the fix or re-install. Can't I just find the infected file, delete it, and then re-establish my explorer.exe file at re-boot from the install disk or the Internet?
Question: Where is the explorer.exe file located in the registry? Can this issue be resolved without drastic measures? Please help me. All my files from over 14 classes are on that drive, and if I lose them, I have nothing to refer to for my capstone project for graduation BaSc Degree in four months. I don't know where else to turn except the Internet and you.
Thank you. DennisPS

Configuration: Windows XP
Internet Explorer 7.0

Best answers for « EXPLORER.EXE corrupted or infected » in :

Explorer - explorer.exe Show explorer - explorer.exe explorer.exe is a Windows NT/2000/XP generic process. It is a process which manages the user interface (shell) as well as the Windows graphical interface (the desktop). The process explorer is not in any way a virus, a worm,...

[Windows XP] Explorer.exe is using the CPU at 99% or100% Show [Windows XP] Explorer.exe is using the CPU at 99% or100% Then fact that Windows Explorer is using CPU resources at 99% or a 100% may be due to a bug :Windows usually calculate the duration of all videos on the disk, causing the...

Accidently deleted explorer.exe (Solved) Show

Sndvol32.exe missing or corrupted ShowSndvol32.exe missing or corrupted If Windows complains that the file is missing sndvol32.exe, simply: To bring the CD-ROM to install Windows XP, Follow the instructions at the following address:...

No folder options in Windows Explorer ShowNo folder options in Windows Explorer File corruption and virus infection may lead to absence of the folder option in Windows Explorer. To recover “Folder Options", go to Menu Start and select “Run” . Type...

Windows Processes ShowWindows Processes Csrss.exe Explorer.exe Lsass.exe Mstask.exe Smss.exe Spoolsv.exe Svchost.exe rtvscan.exe System System Idle Process Winlogon.exe Winmgmt.exe Windows processes Process Explorer

Taskbar disabled & explorer.exe won't boot. Show

Accidently deleted explorer.exe Show

Plzzz helppp, explorer.exe unable to locate Show

Download Process Explorer ShowProcess Explorer shows you information about which handles and DLLs processes have opened or loaded. Advantage It consists of two sub-windows that in the 1st one you can see the active process and the names of their owning accounts whereas in the...

Download Remote Process Explorer ShowIt is often necessary to use the task manager in order to finish a program which does not run correctly or to know computer state. What do you think if I offer you a more advanced task manager than the one which is integrated into Windows? Remote...

Download Kill Process Show

Msnmsgr - msnmsgr.exe Showmsnmsgr - msnmsgr.exe msnmsgr.exe (msnmsgr stands for Microsoft Network Messenger) is a process which corresponds to the instant messaging client MSN Messenger. It is an application which can safely be terminated.

Autorun - autorun.exe Showautorun - autorun.exe The process autorun.exe (autorun) is a generic Windows 98/NT/Me/2000/XP process which automatically runs a program from a CD-ROM when the CD is inserted in the disk drive. The process autorun is not in any way a virus, a...

Ask your question Reply

asmo, on Aug 20, 2008 1:59:26 pm BST

+12

Basically i have the same problem i think.. explorer.exe crashes an restarts itself an crashes again....i dunt know wat to do either...

Reply to asmo

106

Galx, on Aug 1, 2009 10:24:09 am BST

If it's a virus, follow the virus removal guide here:

http://www.geekpolice.net/...

Reply to Galx

3thK, on Sep 4, 2008 10:49:32 am BST

+31

Here's how to fix this issue:

1. CTRL-Alt-Del to bring up Task Manager.
2. Click File | New Task(run).
3. Type regedit in the Run box and click OK.
4. Browse to the following registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution.options

5. Under this key there will be subkeys named explorer.exe and iexplorer.exe. Delete the explorer and iexplorer keys entirely. They should not be listed under the Image File Execution.Options key.
6. Close the Registry Editor.
7. Restart the computer.

Assuming no other viruses / adware / spyware / malware are interfering, the Windows desktop should load fine now.

Thanks to Aur computer service.
Originally post by 2/9/06: SmitRem

Reply to 3thK

Sanjay Shrestha, on Sep 24, 2008 10:00:16 am BST

Hi ..
Its work perfectly..
Thanks........

Reply to Sanjay Shrestha

Elly, on Oct 4, 2008 4:16:39 am BST

+12

Hi..

I followed your instructions and I don't have them listed there - thus is there anything else you could suggest? Unfortunately my puter was preloaded, so I dont' even have a "restore, repair or reinstall" CD.

Any help would be greatly appreciated. I can work everything through Task Manager - although I have some programs that click out when the icons go.

Elly

Reply to Elly

hakakt, on Oct 8, 2008 8:51:52 am BST

Thanks Mate!! Worked Like a charm!

Reply to hakakt

jpinzon, on Oct 16, 2008 12:35:44 pm BST

Worked like a charm. Thanks.

Reply to jpinzon

cindy, on Oct 22, 2008 5:20:58 am BST

I followed some of the step listed, and deleted a couple of files. I seem to have no problems with my monitor at the moment...thanks.

Reply to cindy

amis41, on Oct 26, 2008 4:00:53 pm GMT

I have two icons on my Desktop that say they are explorer.exe and are Kernel32.d11. When it is right clicked,
it closes down the desktop and refreshes it. I am unable to delete it either in normal mode, or safe mode. I looked up your solution on my PC and could not find them in the location you gave. Do you have any other suggestion how to delete these from the desk top. Note: I did a search and found it in aol.exe in the registry. I have reloaded my PC recently and wonder in installing aol 9.0 may have cause this. I did not delete it from there yet. Please reply to my email address, or to the bog if you prefer. Thank you for any suggestions. You are appreciated by many, and I join in thanking you too.
Mike

Reply to amis41

ogag, on Dec 26, 2008 12:58:14 pm GMT

Try pressing shift and hold it then with the other hand press delete.that should do it

Reply to ogag

Muzz, on Oct 27, 2008 11:44:18 am GMT

Thanks Man, this saved me heaps of time.
Cheers

Reply to Muzz

Accellora, on Oct 27, 2008 9:50:40 pm GMT

+26

Worked like a charm.

Reply to Accellora

bucko, on Oct 28, 2008 9:57:02 am GMT

Thanks......that solved the problem immediately. Appreciate it.

Reply to bucko

gmdda, on Nov 10, 2008 7:23:42 am GMT

Hi I was wondering if you could help me unfortunately not only noen't my task manager work but cant run rededit either, and who knows wat else. The .exe files exist in the windows directory but just don't work, probably as a result of virus on the computer which I'm 99.9% sure I'm rid of now. Can you help me solve this problem? thanks
Joe

Reply to gmdda

Surfer, on Feb 27, 2009 10:47:36 pm GMT

Go to C:\windows\regedit and run the regedit.exe by double clicking it

Reply to Surfer

sdw, on Dec 3, 2008 4:49:24 pm GMT

I didn't have the iexplorer.exe, but I did have the explorer.exe exactly where you said it would be - I deleted it, restarted and it worked perfectly. My desktop came right up after I logged in. Now, I'm running a Kaspersky virsus check to make sure my system is clean. Thanks for the sound advice.

Reply to sdw

bjae007, on Dec 10, 2008 6:44:54 pm GMT

Hey thanks man. For years I search for way to work around this but now I know the real problem and, thanks to you, how to solve it. Cheers Bro

Reply to bjae007

19to11, on Dec 25, 2008 7:02:37 pm GMT

When I am running regedit, it is displaying the message that registry editing has been displayed by your administartor. Wat should I do. Plz help me.

Reply to 19to11

Anonymous Pseudonym, on Feb 2, 2009 4:15:35 pm GMT

Open up a command prompt. Type in:

REG ADD HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableRegistryTools /t REG_DWORD /d 0 /f

Reply to Anonymous Pseudonym

Sunil, on Jan 16, 2009 3:11:09 pm GMT

+12

I am having the same problem of 100% cpu usage. I followed the steps mentioned but I do not have those sub-keys mentioned (explorer.exe and iexplorer.exe) under imagefile executio option, any other suggestion? appreciate any help

Reply to Sunil

sandra, on Jan 16, 2009 3:12:21 pm GMT

I tried that and it only asks me to f1 to retry boot and f2 for set up utility

Reply to sandra

dimrin, on Jan 17, 2009 10:04:23 pm GMT

Thanks

Reply to dimrin

Kulz, on Jan 17, 2009 10:07:08 pm GMT

Thanks a Lot man!
That worked very well !
You saved me a lot of time

Reply to Kulz

mayor, on Jan 19, 2009 12:07:47 pm GMT

+17

Hello, i tried and followed the instructions but i could not find any folder called explorer.exe and iexplorer.exe.ns. this means i the problem is not solved. please help me

Reply to mayor

Omz, on Jan 31, 2009 6:04:54 pm GMT

3thk.....Dude..you rock...its the perfect solution........excellent..

Reply to Omz

jino, on Feb 20, 2009 9:00:28 pm GMT

Hello,

Your post was very helpful, however, when I look for the subkeys for explorer.exe and/or iexplorer.exe neither one is there. I did find Internet explorer under HKey_Curren_user, will this work as well?

Thank you.

Reply to jino

montoya, on Feb 26, 2009 8:10:58 am GMT

Brilliant!!!! Thanks a lot!!! :DDDD It's probably the best advice ever posted on the net...

Reply to montoya

Vijay, on Mar 20, 2009 8:29:28 am GMT

Good Point.

Woked like a Charm !!

Many Thanks ....

Reply to Vijay

Mireya, on Apr 14, 2009 3:51:34 am BST

OMG!!! Your a life saver. i've been at this problem for a week until now thank you so much it works great.

Reply to Mireya

gemsumi, on Apr 19, 2009 10:28:46 pm BST

Solution was of great help...Thanks a lot :)

Reply to gemsumi

pierluu, on Apr 23, 2009 3:27:44 pm BST

Please help me, I can't find the "Image File Execution.options" on my registry, maybe it's just me...

Reply to pierluu

105

o-train, on Jul 31, 2009 6:51:30 pm BST

The subkey folder image files excution options is just below the ICM FOLDER

Reply to o-train

seadoosnipe, on May 7, 2009 6:45:53 pm BST

Wow.....you da man!....

I've been working with this problem for several days. I stumbled across your solution and BAM!...it's done. Thank you so much for your support to the forum......

Reply to seadoosnipe

Tamil Selvan, on May 23, 2009 12:02:53 pm BST

Hey......thanks. It worked for me. After long R&D i got your post. With out format I have done it.

Thankuuuuuuuuuuuuuuuuuuuuuuuuuuuu So much

Reply to Tamil Selvan

101

zianpor, on Jun 1, 2009 7:17:27 am BST

Thanks a lot that's very good! My desktop works well now.

Reply to zianpor

102

NOVICE, on Jun 30, 2009 11:02:48 am BST

THANKS A LOT, you're a genious. I had the same problem, troubleshooted in different ways but yours worked like a charm. Could I count with you for an entirely different matter? (I'm locked out of my own PC and it seems it got seriously hacked)

Reply to NOVICE

103

auraeulogia, on Jul 11, 2009 7:54:59 pm BST

THXXXXXXXXXXXX!!! I solved the issue svhost, task bar whatever, very useful the regedit trick, I was a bit afraid it would do worst, but IT WORKED!!!!, the best of all nobody knew I screwed up. thanks!!

Reply to auraeulogia

104

JL, on Jul 16, 2009 5:32:47 am BST

Thanks for helping with this suggestion. Deleted the explorer.exe file and restarted. Upon restart everything was back to normal.

Reply to JL

111

anonymous, on Sep 20, 2009 12:02:55 pm BST

Thanks, it worked like a charm

Reply to anonymous

112

pauls88, on Sep 25, 2009 6:29:10 am BST

I ran regedit and followed the steps and it wasn't there what else could I do

Reply to pauls88

113

fatty, on Oct 7, 2009 12:51:56 pm BST

I have tried the option you explained, but on my computer, i cant find either of the two iexplorer.exe or explorer.exe on my Image File Execution.option.
But, if i open my computer, on drive C, then programs files and Internet explorer folder, i see iexplorer.exe,
is this file supposed to be on my computer?
or is the one causing my computer to have problems on displaying the desktop icons? and even the start button?

Thanks

Reply to fatty

mango, on Sep 11, 2008 11:14:52 pm BST

Thaks for that professional solution

Reply to mango

Sueduke, on Sep 12, 2008 11:34:12 pm BST

That was the best solution ever. my problem was that the icons would not load. Thank you thank thank you

Reply to Sueduke

maurice, on Sep 15, 2008 12:01:36 pm BST

Great fix, thank you. Took me a whole morning to come across it but it worked.

I lost the taskbar and icons after removing various spyware/viruses including winantivirus 2008.

no taskbar no icons

when will they catch the b******* that write viruses and string them up by their ......

Thanks again

Reply to maurice

Gonzo, on Sep 16, 2008 7:30:55 pm BST

+14

I have that same exact problem. When I enter the registry editor, explorer.exe and iexplore.exe are not in that registry location.

Is there another solution that might solve this problem?

Thanks in advance

Reply to Gonzo

Guy, on Sep 17, 2008 1:23:04 am BST

This guy above me, i have the same problem!!! And does maplestory have a virus cuz i used the windows button to
minimize it and it froze so i restarted and no explorer.exe and iexplorer.exe and iertutil.dll and WININET.dll are missing!?!?!?!?!?

Reply to Guy

Ster, on Sep 19, 2008 8:36:50 am BST

I have the same problem with Gonzo. There's no explorer.exe and iexplorer.exe under that registry location. This is all happen after installing IE7.

Reply to Ster

Ster, on Sep 19, 2008 5:52:24 pm BST

I solved my problem by unistalling IE7.

Reply to Ster

minus000, on Oct 22, 2008 2:08:35 am BST

I have the same problem! No explorer or iexplorer in my regedit.

This all happened after I used malware bytes to remove the "xp antispyware 2009"

Any help?

Reply to minus000

j-bone lubstylie, on Sep 19, 2008 5:47:44 pm BST

What i did was this and for the past couple of hours it has worked. i'll be more sure of it a little later on. pressed control, alt, delete. switched to the "processes" tab. when explorer kicked back on i shut off the explorer process. the computer will continue to run unecumbered. you just have to use the task manager to monitor your system and run any programs. you may still run into some road blocks though so be aware. i got myself Kaspersky Antivirus 7.X and picked up some fresh activation keys from the torrent network. installed the program. at the end of the installation it will propt for activation options. if you already have an operational key or set of keys you can just use one of those. if you feel better buying one then i hope you got some decent amount of cash on hand because they are expensive (at least for my taste). DO NOT USE MCAFIEE, NORTON, OR ANY OTHER KIND OF ANTIVIRAL PROGRAM. THEY WILL NOT WORK. their databases don't have the entries you need to find your problem. which are trojan horses. pieces of them are scattered thoughout your system so finding just one or a few different ones on your system does not get rid of them. after installation, reboot. imediatly shut off explorer again. if at all possible shut down the entire process tree for this operation. it helps in memory usage and allows for the operation to go smoother. use the task manager again and browse for kaspersky lab/kaspersky antivirus 7.X in your program files. double click on the avp.exe. there should be a "K" for the icon. click the "ok" or "run". then with explorer not running run the antiviral program. it should automaticaly run a startup scan. let it. it will probably take out your viruses. watch the program as it works and any prompts for deletion or disinfection, do it. if you have to then quarentine. but delete or disinfect as much as possible. if you have any problems it is probably the vurus or viruses trying to stop you. once that scan is done, reboot again. your not out of the woods yet though. shut down explorer again and run kaspersky again. this time do a full system scan till completion. you should be clean at this point but this is just to get any straglers. so far my explorer program is still running, no gliches. hope your results are as productive as mine have been.

Reply to j-bone lubstylie

Guy, on Sep 22, 2008 1:26:47 am BST

The dude above me, it didnt work for me now i just have 24 processes of avp.exe and it wont let me terminate them >:O plz help me

Reply to Guy

Justin, on Oct 1, 2008 10:13:03 pm BST

My problems are slightly similiar to these others, but heres whats going on. I suddenly have no Sound,and system restore and Search won't work at all. When they come up it will show a completely blank and white window. I looked to see if the files for system restore were in Regedit, but they aren't at all where they are supposed to be! What does this mean, and how can I fix it? Or is there just anyway I can restore my computer to an earlier time without actually using System Restore? I hope somebody can tell me something, Thanks.

Reply to Justin

Xerxes, on Oct 6, 2008 2:43:02 am BST

It is the Vundo trojan. Use VundoFix google it. Also you must turn off system restore before the re-boot or the virus will re-write itself. trojan turns explorer and imapi.exe on/off . hope it is not too late.

Reply to Xerxes

Mym8, on Oct 20, 2008 2:54:38 pm BST

Thankyou vey much worked fine for me THANKYOU

Reply to Mym8

Matthew, on Oct 28, 2008 1:44:26 am GMT

I am still having a similar problem but I do know how to fix ALL of your guys' problems!!!!!! My problem is a little bit harder and I am troubleshooting it as we speak, but with your problems, I have already done so :) Basically its very simple lol. Go to C:\WINDOWS and look for the explorer.exe file. The computer Icon, not the folder. The computer Icon brings up your desktop and the folder one brings up, yup you guessed it, the "My Computer" folder. Ok, so now copy the computer icon file (explorer.exe) and paste it in the same folder (C:\WINDOWS) It will be renamed "copy of explorer.exe" Now change the name of the file to your first name or whatever you want. (ie. Matt.exe) Now press Windows+R OR start>run and open regedit by typing in "regedit" or "regedt32". Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\Current Version\Winlogon. In that folder there is a sub called "shell". Double click it and rename "explorer.exe" to your file. In my case it is "Matt.exe" Now restart your computer!!! All done my friends. And now instead of your taskbar being called explorer.exe, its your first name!!!! Even cooler of a fix then just fixing it.

Now my problem is that something stupid happened... lol, now i need to fix it. good day

Reply to Matthew

Guy, on Oct 29, 2008 3:56:37 am GMT

OMG >:( nothing is working for me not:

I am still having a similar problem but I do know how to fix ALL of your guys' problems!!!!!! My problem is a little bit harder and I am troubleshooting it as we speak, but with your problems, I have already done so :) Basically its very simple lol. Go to C:\WINDOWS and look for the explorer.exe file. The computer Icon, not the folder. The computer Icon brings up your desktop and the folder one brings up, yup you guessed it, the "My Computer" folder. Ok, so now copy the computer icon file (explorer.exe) and paste it in the same folder (C:\WINDOWS) It will be renamed "copy of explorer.exe" Now change the name of the file to your first name or whatever you want. (ie. Matt.exe) Now press Windows+R OR start>run and open regedit by typing in "regedit" or "regedt32". Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\Current Version\Winlogon. In that folder there is a sub called "shell". Double click it and rename "explorer.exe" to your file. In my case it is "Matt.exe" Now restart your computer!!! All done my friends. And now instead of your taskbar being called explorer.exe, its your first name!!!! Even cooler of a fix then just fixing it.

and not doin any other of this booty on here :( i need to fix mah computer!

Reply to Guy

Mr Pro, on Nov 9, 2008 4:38:51 pm GMT

Thanks a lot buddy..... I've also got my problem solved.....

Reply to Mr Pro

Pineapple, on Oct 30, 2008 12:45:55 am GMT

Ok. I had the same problem as everyone, but I just fixed it about 2 minutes ago.

I had just deleted a bunch of malwares from my computer, and restarted it. But it still had a completely black screen with no start menu or anything.

So I opened the task manager, clicked on new task, and typed in C:\windows and clicked ok. then I just right clicked on the windows explorer icon and clicked run as administrator.

It was as simple as that, and after three seconds everything came back. ^^ hope this helps

Reply to Pineapple

jen, on Oct 31, 2008 12:47:00 am GMT

Try installing malwarebytes.org it will help =)

Reply to jen

Pete, on Nov 2, 2008 6:40:49 am GMT

Hi Mathew, I'm facing the same problem ... fighin since hours with the blue screen and not getting back to the windows explorer... (only task manager). When I check at REGEDIT HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\Current Version\Winlogon there is no sub called "shell" where I could rename explorer.exe into pete.exe . It was probably getting lost in action. Do you know how to reactivate that "shell" with the explorer.exe or some other means of "self-repair" of windows explorer? Hope you could solve your problem meanwhile.

Thanks & best reagards
Pete

Reply to Pete

John, on Nov 24, 2008 7:17:17 pm GMT

Look in the far right column

John

Reply to John

Balsak, on Dec 12, 2008 10:57:49 pm GMT

Reboot the computer, place your scan disc in drive A, and turn the computer on. Let the system boot until you hear 5 consecutive beeps. As soon as you hear the last beep, hit the f8 key and the f11 key at the same time. Then temove the scan disc and turn the computer off. Wait aprx 30 second and turn the computer back on.

Reply to Balsak

Eiers, on Jan 2, 2009 11:22:10 am GMT

Lol balsak

Reply to Eiers

Joey, on Dec 13, 2008 4:04:50 am GMT

Pete,
Try re-booting from A drive. As soon as the screen turns blue, hit control alt delete 3 times. Wait aprox. 30 seconds and you will see a black screen that says...//command. type in the following: KMAYDMF/run. The computer will ask you a series of questions. The answers are as follows: y,y,y,n,n,y,y,n,n. Then hit control alt delete again, but only once this time. When you get back to your desktop simply map a new network drive using EXPLORER as your default MAP source and shut down the computer from the start menu and restart the computer after 30 seconds.

Reply to Joey

Guy, on Dec 21, 2008 10:02:58 pm GMT

I really have no clue wat the f*** u just said

Reply to Guy

nunya, on Feb 21, 2009 7:25:21 am GMT

LMAO he said Kiss My @$$ You Dumb Mother Fu<ker

i wonder who followed this one lol

I'm having this issue too though, in the regedit i can't find this location everyone is talking about :HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\explorer.exe

it's just not there, so how else can i get explorer back???

Reply to nunya

UP Mario&Luigi, on Mar 30, 2009 6:27:08 pm BST

Yo hey men I did what you asked me but I have NO INTERNET .EXE or I.INTERNET .EXE files. So what in the hell happens when I have neither of those files to fix the problem? I want to install that game but however I can't cause I cannot fix the problem if I have neither of the files to delete them. Could it be some other type of hybrid coding genetic type of shit? Or what? I am all confused. Now what do I do? I want to get passed this barrier. HEY, by the way any of you guys know how I can BY-PASS an ADMINISTRATORS PASSWORD? Perhaps ya'll could teach me. xD lol. I want to install some crazy shit on this computer but it ain't mine it's my University's. However, it ain't anything bad just WoW and StarCraft II. Thanks guys.

Reply to UP Mario&Luigi

100

punchiry, on May 26, 2009 6:16:57 pm BST

Check
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

if there are any suspicious start up entries. If found just delete. Don't delete your anti virus program.

Then check
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

"Shell" = "Explorer.exe" , "UIHost"="logonui.exe" , "Userinit"="userinit.exe,"
If there are anything else, delete it.
then check
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
delete any suspecious programs.
Reboot and see...

Reply to punchiry

109

AndyJWang, on Sep 10, 2009 1:20:54 am BST

Thank you very much! I did have something in that key netry.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

"Shell" = "Explorer.exe" <=== I had an invalid string right after that. ("C:\windows\IMJPMIG8.exe")

Reply to AndyJWang

110

aleaf, on Sep 11, 2009 7:38:08 pm BST

I did what you said: located and deleted all three things that you noted. But now things got worse. The laptop doesn't boot-- it seems like it will boot when it asks for my password and I enter it. However, a couple sesonds later I hear a sound as if it is turning off by itself and then the password window appears again with a black screen in the background. I enter it again, and then the process tarts all over again. It won't go beyond the password window. Now I won't even be able to open Task Manager. :(( What do I do now? Cry****

I spent my whole day trying to fix this, nobody around could help me, and I have deadlines for which I should work for days; I need a personal computer so I have to fix this computer. I am not in a position to buy a new one at the moment. I am so sad.

I have a Dell 600M. This may have been caused by two suspicious things that took place yesterday. 1) I happened to accept the install Explorer 8 offer, that kept showing up on my internet explorere browser. 2) I was working on my father's website which happened to show up the message "this site may be harmful to your computer" message when people searched for his website online. I was web mastering the progma (to my basic limited knowledge of it) and a couple of times I juast said OK to threat to be able to go the website-- very bad move, apparently.

I don't know. Right now I hate Internet Explorer. I hate Dell 600Ms. I hate my hosting provider whose server was weak enough to be hacked... I am incredibly sad.

Reply to aleaf

114

skullbox15, on Nov 4, 2009 2:46:18 am GMT

Same thing happened to me with the website may harm your computer. That is definitely the cause of this mess!

Reply to skullbox15

114 answers 12 3 Next

Ask your question Reply