1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Explorer / IExplore both exit with no error messages

Discussion in 'Malware and Virus Removal Archive' started by Morgon, 2006/07/09.

  1. 2006/07/09
    Morgon

    Morgon Inactive Thread Starter

    Joined:
    2006/07/09
    Messages:
    4
    Likes Received:
    0
    Is there a logging feature of explorer.exe that I can find out just why it's being killed?
    This just started today after I rebooted the machine - there was no indication of any problems, so I'm really confused as to why this just randomly started.

    It takes a bit for Windows to start, and once I get to the login screen and put my password in, it sits there for a little bit. After a minute or so, the background finally appears, but I have to CTRL-ALT-DEL to get the Task Manager going so I can start anything (such as Firefox, which is how I'm able to post now)

    Everything about the computer seems to work fine, aside from these two items.
    When I try to run explorer.exe from Task Manager, I see it pop up for a second, but then simply close again - no error, no dumps.
    IExplore is the same way - assuming it's because of its dependancy on Explorer.

    Can anyone give any insight at all?

    -Morgon
     
  2. 2006/07/09
    PeteC

    PeteC SuperGeek Staff

    Joined:
    2002/05/10
    Messages:
    28,896
    Likes Received:
    389
    Morgon - Welcome to the Board :)

    My guess is that your computer has picked up an infection or two which are causing this behaviour .....

    Please download HijackThis through Quicklinks in my signature and save it to a folder on your hard drive, say C:\HJT - not to the Desktop or a temporary location. When entries are fixed with HJT a backup is made to the folder from which HJT is run and this must be in a permanent location.

    Please download and install the 30 day trial version of Ewido Anti-Spyware

    Run the program either from the Desktop icon if you chose to install one or from Start > Programs. On the main screen select the Update icon followed by the "Update now" link and click on the Start Update button. The update will start and a progress bar will show the updates being installed.

    When the update has completed select the Scanner icon at the top of the window and click on the Settings tab.

    On the Settings screen click on Recommended actions and then on Quarantine.

    Under Reports select Automatically generate report after every scan and deselect Only if threats were found.

    Close Ewido Anti-spyware. Do not run a scan just yet.

    Boot into Safe Mode and log onto your usual account.
    Do not open any other windows or programs while Ewido is scanning as this may interfere with the scanning proccess.

    Start Ewido Anti-spyware by double-clicking the icon on your desktop or from Start > Programs and select the Scanner icon at the top of the window followed by the Scan tab and click on Complete System Scan. The scanning process will start and may take some time.

    When the scan is complete if any infections were detected you will prompted for an action - select Apply all actions.

    Then select the Reports icon at the top of the window and click on the Save report as button in the lower left hand corner of the screen and save it as a text file (be sure to remember where you saved that file, this is important).

    Stay in Safe mode and open the folder in which you placed HJT and double click on hijackthis.exe and select Scan and save a log file - this will be saved in the folder from which you ran HJT.

    Reboot into Normal mode and post the HJT log here and the Ewido scan report.

    I have moved your thread to the Removing Spyware & Viruses forum.
     

  3. to hide this advert.

  4. 2006/07/09
    Morgon

    Morgon Inactive Thread Starter

    Joined:
    2006/07/09
    Messages:
    4
    Likes Received:
    0
    Well, ran both of those (forgot all about HJT!)

    Unfortunately, it didn't reveal anything stellar, nor did either of them fix my issue thus far. These reports came back fairly clean, as far as Windows installations go.
    One thing to note that I forgot to explicitly mention is that explorer/iexplore both do not work in Safe Mode, either.

    I even ran sfc, and it didn't seem to have a problem with any files.

    But, as asked, here's the output of both.

     
  5. 2006/07/09
    Morgon

    Morgon Inactive Thread Starter

    Joined:
    2006/07/09
    Messages:
    4
    Likes Received:
    0
    Second post due to posting limit...

     
  6. 2006/07/10
    PeteC

    PeteC SuperGeek Staff

    Joined:
    2002/05/10
    Messages:
    28,896
    Likes Received:
    389
    As you say nothing stellar in either of the logs.

    I can see no obvious reference in your HJT log to av software - I suggest an online scan through Quicklinks in my signature.

    If that fails to come up with anything I would think in terms of System Restore to a point previous to your problems.
     
  7. 2006/07/10
    Morgon

    Morgon Inactive Thread Starter

    Joined:
    2006/07/09
    Messages:
    4
    Likes Received:
    0
    Yeah, I ended up doing a System Restore. Didn't even realize it was doing it automatically every day (I'm smarter than I thought ;) )

    I think it may have been related to DaemonTools, as there is a "SCSI Passthru Direct" DLL that has been reported to cause similar issues. However, a system restore with it fully intact works fine, soooo. I dunno.

    In any event, I appreciate your help. I ended up doing the SysRestore last night and all seems fine so far.
     
  8. 2006/07/10
    PeteC

    PeteC SuperGeek Staff

    Joined:
    2002/05/10
    Messages:
    28,896
    Likes Received:
    389
    Now you mention it - DaemonTools rings a bell from a thread away back. Anyway glad that System Restore worked as it should. :)
     

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.