Explorer.exe not running on system startup

I'm running:
Vista Home Premium
Duo Core 6300
Nvidia 7600
and a GB of ram


I'm not sure if I am going to have to re install vista to solve this problem:

When starting up, the computer goes thru all the normal stages, then asks
for my password.
After I type this in, the computer takes a while to load, and then instead
of getting my desktop up on the screen, it loads straight into windows
explorer???

To start explorer.exe, I need to ctrl-alt-del and then go 'file' 'run'...
this is getting to be a real P.I.T.A.

I have tried running restore point and it wont run... (for whatever reason)


Any Ideas???

I'm about to save you a world of headach and not have to reinstall
:smile:

Follow these steps and your back in business...

Open regedit then go to

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Winlogon

Look for the NAME: Shell

My guess is the reg DATA might say something like this.

Explorer.exe C:\WINDOWS\Config\csrss.exe

If it is different I would like to know please post it.

All you need to do is rename the Data to this
Explorer.exe

Now all I need to figure out is what caused this in the first
place.................:biggrin:


--
DatsEvolution

Thanx for the tip...

before I reboot and try it out I'll let you know what was in the 'value
data' space:

"Explorer.exe scvhost.exe"

I have renamed it to just "Explorer.exe"

Not too sure how it happened, but if it's fixed -thankyou very much


Tim



"DatsEvolution" wrote:

>
> I'm about to save you a world of headach and not have to reinstall
> :smile:
>
> Follow these steps and your back in business...
>
> Open regedit then go to
>
> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
> NT\CurrentVersion\Winlogon
>
> Look for the NAME: Shell
>
> My guess is the reg DATA might say something like this.
>
> Explorer.exe C:\WINDOWS\Config\csrss.exe
>
> If it is different I would like to know please post it.
>
> All you need to do is rename the Data to this
> Explorer.exe
>
> Now all I need to figure out is what caused this in the first
> place.................:biggrin:
>
>
> --
> DatsEvolution
>

Actually, apon reboot I have experienced the same problem!

I went back into regedit to find that it said "Explorer.exe scvhost.exe"
again.

I changed it back (again) and pressed F5; it changed from "Explorer.exe" to
"Explorer.exe scvhost.exe" straight away.


Any ideas to make it stick??



"spïrö" wrote:

> Thanx for the tip...
>
> before I reboot and try it out I'll let you know what was in the 'value
> data' space:
>
> "Explorer.exe scvhost.exe"
>
> I have renamed it to just "Explorer.exe"
>
> Not too sure how it happened, but if it's fixed -thankyou very much
>
>
> Tim
>
>
>
> "DatsEvolution" wrote:
>
> >
> > I'm about to save you a world of headach and not have to reinstall
> > :smile:
> >
> > Follow these steps and your back in business...
> >
> > Open regedit then go to
> >
> > HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
> > NT\CurrentVersion\Winlogon
> >
> > Look for the NAME: Shell
> >
> > My guess is the reg DATA might say something like this.
> >
> > Explorer.exe C:\WINDOWS\Config\csrss.exe
> >
> > If it is different I would like to know please post it.
> >
> > All you need to do is rename the Data to this
> > Explorer.exe
> >
> > Now all I need to figure out is what caused this in the first
> > place.................:biggrin:
> >
> >
> > --
> > DatsEvolution
> >

spïrö wrote:
> Actually, apon reboot I have experienced the same problem!
>
> I went back into regedit to find that it said "Explorer.exe scvhost.exe"
> again.
>
> I changed it back (again) and pressed F5; it changed from "Explorer.exe" to
> "Explorer.exe scvhost.exe" straight away.

Are you absolutely sure of the spelling of "scvhost.exe"? Because if you
typed this correctly your computer is infected with some variant of the
Agobot virus. "Svchost.exe" is the process belonging to Windows.

The fact that you have "explorer.exe scvhost.exe" shows that you are
indeed infected because the virus runs with explorer.exe every time.

Go through these general malware removal steps systematically -
http://www.elephantboycomputers.com/...moving_Malware

You will see instructions to scan with either Sysclean or Multi_AV,
following that with updating your full-featured antivirus and doing
another scan. All scans should be done in Safe Mode.

Standard caveat: If the procedures look too complex - and there is no
shame in admitting this isn't your cup of tea - take the machine to a
professional computer repair shop (not your local version of
BigStoreUSA). Please be aware that not all local shops are skilled at
removing malware and even if they are, your computer may be so infested
that Windows will need to be clean-installed. Have all your data backed
up before you take the machine into a shop.


Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User

Thanx

Yes, i'm sure on the spelling; and I managed to fix the problem by changing
the registry line in safe mode.
I have scanned for viruses and malware 3 times with 3 different programs.
(Spybot, Symantec and vista one-care) none of which have found anything.

There was some spyware simply called 'x' which I got rid of. I'm not sure
if thats what caused the problem though.


Thanx for your help


Tim

"Malke" wrote:

> spïrö wrote:
> > Actually, apon reboot I have experienced the same problem!
> >
> > I went back into regedit to find that it said "Explorer.exe scvhost.exe"
> > again.
> >
> > I changed it back (again) and pressed F5; it changed from "Explorer.exe" to
> > "Explorer.exe scvhost.exe" straight away.
>
> Are you absolutely sure of the spelling of "scvhost.exe"? Because if you
> typed this correctly your computer is infected with some variant of the
> Agobot virus. "Svchost.exe" is the process belonging to Windows.
>
> The fact that you have "explorer.exe scvhost.exe" shows that you are
> indeed infected because the virus runs with explorer.exe every time.
>
> Go through these general malware removal steps systematically -
> http://www.elephantboycomputers.com/...moving_Malware
>
> You will see instructions to scan with either Sysclean or Multi_AV,
> following that with updating your full-featured antivirus and doing
> another scan. All scans should be done in Safe Mode.
>
> Standard caveat: If the procedures look too complex - and there is no
> shame in admitting this isn't your cup of tea - take the machine to a
> professional computer repair shop (not your local version of
> BigStoreUSA). Please be aware that not all local shops are skilled at
> removing malware and even if they are, your computer may be so infested
> that Windows will need to be clean-installed. Have all your data backed
> up before you take the machine into a shop.
>
>
> Malke
> --
> Elephant Boy Computers
> www.elephantboycomputers.com
> "Don't Panic!"
> MS-MVP Windows - Shell/User
>

spïrö wrote:
> Thanx
>
> Yes, i'm sure on the spelling; and I managed to fix the problem by changing
> the registry line in safe mode.
> I have scanned for viruses and malware 3 times with 3 different programs.
> (Spybot, Symantec and vista one-care) none of which have found anything.
>
> There was some spyware simply called 'x' which I got rid of. I'm not sure
> if thats what caused the problem though.

Well, if things stay good then you know you got it. As an aside, I don't
recommend either Symantec or OneCare for antivirus protection. A much
better solution is NOD32, Kaspersky, or even Avast if you need a free one.


Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User

I was suspecting it to be a exploit Im also asuming its one that there
is no def for yet or a patch by microsoft I also have tried many
different scanners

I'm also asuming that it might have something to do with this
csrss.exe double-free vulnerability
'Two Vista bugs on security blogg | The News is NowPublic.com'
(http://www.nowpublic.com/two_vista_b...security_blogg)


--
DatsEvolution

Hi.. I have the same problem (with vista 32bit). After the login screen,
the screen remains completely black and explorer.exe does not load until
I enter the task manager and run it manually.

I have gone into regedit like you suggested .. but "winlogin" doesn't
exist in my registry! What's going on?

Thanks.


--
dan428

Anyone know what could be causing this? ..should I just reinstall Vista?


--
dan428