Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

XP - After login only see desktop wallpaper

Posted on 2006-11-07
7
Medium Priority
?
372 Views
Last Modified: 2008-03-03
XP Professional SP2 - when user logs in all they get is their desktop wallpaper, explorer start-bar pops up for a split second, but then disappears. Task manager work. I have tried the following:

1. Restarted in safe mode - the same
2. Logged in as alternative user including Administrator, also in safe mode - the same
3. Removed drive and scanned for viruses/spyware in another machine - none found
4. Tried SFC scan - all system files intact
5. Windows XP Repair Install - made no difference
6. Examined startup file using HiJack This - nothing unusual there. Stripped back to bare startup - no difference.

Anything I can try, before I do complete system re-install?

Thanks in advance

 
0
Comment
Question by:emagination2006
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
7 Comments
 

Author Comment

by:emagination2006
ID: 17888709
Also tried Restore point from 2 weeks ago and still the same.
0
 
LVL 38

Expert Comment

by:younghv
ID: 17888745
Hi emagination2006,

This advice from morris1186 is worth trying:

Can you press Control-Alt-Delete and get the task manager up?  If so, you can then goto file....NewTask...  and type in "explorer.exe".  If that can run, then you can try to figure out what is causing it not to open explorer on startup...  Try this:
Start ---> Run ---> "Regedit.exe"

Expand HKEY_LOCAL_MACHINE.
Expand SOFTWARE
Expand MICROSOFT
Expand Windows NT
Expand CurrentVersion
Expand WinLogon

there will be a Key called "Shell".  It should contain the value "Explorer.exe".  If not, Make it that.

(You can also do this is safemode if you cant control-alt-delete)


If that doesn't work, did you try this repair process?
"How to perform an in-place upgrade (reinstallation) of Windows XP"
http://support.microsoft.com/?kbid=315341
0
 

Author Comment

by:emagination2006
ID: 17888816
I can run task manager and run most applications without problem. Checked the Shell entry in the registry and looks ok.

If I try run 'explorer' manually from the task manager, the bar pops up for a second and then disappears again. I can't figure out what's crashing it.

I have also tried a repair re-install from the XP CD, but didn't make any difference.

I'm on site at the moment, so think it's gonna be a complete system reformat !!!
0
VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

 
LVL 21

Assisted Solution

by:briancassin
briancassin earned 1000 total points
ID: 17888965
Are you using a local profile or server based profile when you are logging on

It sounds like something got in the machine...

Can you get to the processes tab in task mananger ?

If you can get to task manager, go to the Processes tab, and look for a process called 'SYSU.EXE'. If it's running, kill it.

Now, if your desktop suddenly returns to normal, then yes, you've got this virus. You're not out of the woods yet. There is probably a folder on your machine called 'C:\Program Files\ddm'. Delete that, of course. You'll probably also want to search your registry for the string 'ddm' and kill most of what you find. In particular the key HKEY_LOCAL_MACHINE/SOFTWARE/ddm, and anything under HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Run and/or RunOnce that refers to 'ddm' or 'sysu.exe'.


If you do not find that look for any other odd processes and or anything using CPU time.

Sounds like you got hit with a newer trojan.

You can either format the drive and reinstall or run some anti virus anti spyware tools..

I would try running Panda active scan from http://www.pandasoftware.com I would also run symantec's online scanner and http://www.bitdefender.com

Also you could run rootkit revealer.

0
 
LVL 38

Accepted Solution

by:
younghv earned 1000 total points
ID: 17889119
emagination2006,

Are you seeing anything in your Event Viewer for Errors or Warnings?

If you had this computer back on your bench and could spend the time tracking down all the potential problems (to include identifying and removing malware) I might suggest taking the time.

If you're on-site and have to get this box up and running, a data back up and 're-load' might be faster.


Vic
0
 

Author Comment

by:emagination2006
ID: 17889176
Thanks for the quick responses and suggestions lads!

I'm afraid money is going win out over time in this case and need to get the machine back up and running on the network.

Does look like a virus/malware of some sort, but I'm going to go ahead and reformat. I hate letting these things beat me, but need to move onto the next job.

Going to split the points between younghy and briancassin for such quick replies.

Cheers
0
 
LVL 38

Expert Comment

by:younghv
ID: 17889283
E-2006,
Sadly, I agree.
Much more fun to track down these little bugs and pound a stake through their hearts.

Thank you for the points.

Vic
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Occasionally Windows/Microsoft Updates will fail to update. We have found a code that will delete all temporary files and re-register all dll's related to Windows/Microsoft Updates! This works 99% of the time to get the updates working again! The…
I use more than 1 computer in my office for various reasons. Multiple keyboards and mice take up more than just extra space, they make working a little more complicated. Using one mouse and keyboard for all of my computers makes life easier. This co…
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…
Hi friends,  in this video  I'll show you how new windows 10 user can learn the using of windows 10. Thank you.

715 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question