Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

XP Shell Not Loading Correctly


  • Please log in to reply

#1
zaccrain

zaccrain

    New Member

  • Member
  • Pip
  • 7 posts
Windows loads up correctly, I can access all programs, run anything, get on the internet, whatever, BUT... I have no desktop icons, no taskbar, no startmenu, just my wallpaper. I can run anything through the Task Manager, but that's a pain in the....

I currently have GeoShell running so that I can have some sort of shell functionality, and when I press WinKey+E or open the run dialog and type "explorer", it opens My Documents, which is obviously not what it usually does.

I have checked the system thoroughly for virus/spyware. Looks good there.

Basically, the only problem is that I cannot get Explorer.exe to run my Desktop. It has no GUI functionality if I don't have another shell running.

Any suggestions are greatly appreciated.

- zaccrain
  • 0

Advertisements


#2
gerryf

gerryf

    Retired Staff

  • Retired Staff
  • 11,365 posts
create a second user account...does the problem recur?
  • 0

#3
zaccrain

zaccrain

    New Member

  • Topic Starter
  • Member
  • Pip
  • 7 posts
New user account has the same issue. When I loaded it, instead of the Desktop showing up, My Documents just pops up... it's like windows thinks that the My Documents folder is my shell.
  • 0

#4
gerryf

gerryf

    Retired Staff

  • Retired Staff
  • 11,365 posts
Can you tell us anything about what preceded this problem occuring?

Also, I am not looking for malware, but could you post a hijackthis log in this thread.
  • 0

#5
zaccrain

zaccrain

    New Member

  • Topic Starter
  • Member
  • Pip
  • 7 posts
Sorry, I don't really have any info leading up to this... It's a work computer... It was fine when I left on Friday... Monday morning... no shell when I boot it. No prior symptoms. Only recent install before this was Adobe Reader 7. I already ran "SFC" and it didn't come back with anything. I'm sure doing a repair off the XP cd could help, unfortunately I don't have my copy here at work. And yes... I realize that i786 is set as the shell currently. That's definitely NOT the issue.. I just changed to that... so I could actually get some functionality.

---------------------------------------------------------------------------

Logfile of HijackThis v1.99.1
Scan saved at 12:35:57 PM, on 4/25/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Apache Group\Apache\Apache.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
C:\Program Files\Apache Group\Apache\Apache.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe
C:\Shell\GeoShell\geoShell.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\Mobydock DX\Mobydock.exe
c:\program files\mozilla firefox\firefox.exe
C:\WINDOWS\Explorer.exe
C:\Documents and Settings\Brandon McKinney\Desktop\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/mywaybiz
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/mywaybiz
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell4me.com/mywaybiz
F2 - REG:system.ini: Shell=i786.exe
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [IntelMeM] C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_06\bin\npjpi142_06.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_06\bin\npjpi142_06.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmat...enWebRadio.html (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Flash Decompiler SWF Capture tool - {86B4FC19-8FA4-4FD3-B243-9AEDB42FA2D5} - C:\PROGRA~1\ELTIMA~1\FLASHD~1\iebt.dll (file missing) (HKCU)
O9 - Extra 'Tools' menuitem: Flash Decompiler SWF Capture tool menu - {86B4FC19-8FA4-4FD3-B243-9AEDB42FA2D5} - C:\PROGRA~1\ELTIMA~1\FLASHD~1\iebt.dll (file missing) (HKCU)
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai...all/xscan53.cab
O16 - DPF: {A8683C98-5341-421B-B23C-8514C05354F1} (FujifilmUploader Class) - http://photo.walmart...ploadClient.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{0D738B5F-75AF-4314-B0DF-9F2C44D7D26B}: NameServer = 66.210.206.35,66.210.206.34
O17 - HKLM\System\CS1\Services\Tcpip\..\{0D738B5F-75AF-4314-B0DF-9F2C44D7D26B}: NameServer = 66.210.206.35,66.210.206.34
O17 - HKLM\System\CS2\Services\Tcpip\..\{0D738B5F-75AF-4314-B0DF-9F2C44D7D26B}: NameServer = 66.210.206.35,66.210.206.34
O17 - HKLM\System\CS3\Services\Tcpip\..\{0D738B5F-75AF-4314-B0DF-9F2C44D7D26B}: NameServer = 66.210.206.35,66.210.206.34
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O23 - Service: Apache - Unknown owner - C:\Program Files\Apache Group\Apache\Apache.exe" --ntservice (file missing)
O23 - Service: DefWatch - Symantec Corporation - C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Macromedia Licensing Service - Macromedia - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe
O23 - Service: Desktop (Service_Desktop) - Unknown owner - C:\Program Files\Virtual Desktop\Desktop.exe

Edited by zaccrain, 25 April 2005 - 11:44 AM.

  • 0

#6
gerryf

gerryf

    Retired Staff

  • Retired Staff
  • 11,365 posts
what had been there (where you've inserted i786)?
  • 0

#7
zaccrain

zaccrain

    New Member

  • Topic Starter
  • Member
  • Pip
  • 7 posts
'explorer.exe' was there initially... (without quotes obviously)
  • 0

#8
gerryf

gerryf

    Retired Staff

  • Retired Staff
  • 11,365 posts
did you have some sort of malware infection previously?
  • 0

#9
zaccrain

zaccrain

    New Member

  • Topic Starter
  • Member
  • Pip
  • 7 posts
Nope... this machine has been clean.
  • 0

#10
gerryf

gerryf

    Retired Staff

  • Retired Staff
  • 11,365 posts
and you added Shell=i786.exe how? To
system.ini
or the registry?
  • 0

#11
zaccrain

zaccrain

    New Member

  • Topic Starter
  • Member
  • Pip
  • 7 posts
To the registry... because XP doesn't use system.ini for it's shell definition.

For the currently user only...
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon

For all users...
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon


I'm only using the Current User setting. I've tried changing both, neither, one or the other... no combination works. The issue is deeper than a simple misloaded shell.
  • 0

#12
zaccrain

zaccrain

    New Member

  • Topic Starter
  • Member
  • Pip
  • 7 posts
Still don't know what the problem was, but did a System Restore to last week and problem is fixed!!

Thanks for all your help anyway... this is a though issue... I read alot about it online and nobody seems to know exactly why this happens.

Thanks!

- zaccrain
  • 0

#13
gerryf

gerryf

    Retired Staff

  • Retired Staff
  • 11,365 posts

To the registry... because XP doesn't use system.ini for it's shell definition.

View Post


yes, i know....that's what I was trying to get at....

well, glad it worked out. sorry I lost track of the thread.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP