Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

XP - After login only see desktop wallpaper

Posted on 2006-11-07
7
Medium Priority
?
373 Views
Last Modified: 2008-03-03
XP Professional SP2 - when user logs in all they get is their desktop wallpaper, explorer start-bar pops up for a split second, but then disappears. Task manager work. I have tried the following:

1. Restarted in safe mode - the same
2. Logged in as alternative user including Administrator, also in safe mode - the same
3. Removed drive and scanned for viruses/spyware in another machine - none found
4. Tried SFC scan - all system files intact
5. Windows XP Repair Install - made no difference
6. Examined startup file using HiJack This - nothing unusual there. Stripped back to bare startup - no difference.

Anything I can try, before I do complete system re-install?

Thanks in advance

 
0
Comment
Question by:emagination2006
  • 3
  • 3
7 Comments
 

Author Comment

by:emagination2006
ID: 17888709
Also tried Restore point from 2 weeks ago and still the same.
0
 
LVL 38

Expert Comment

by:younghv
ID: 17888745
Hi emagination2006,

This advice from morris1186 is worth trying:

Can you press Control-Alt-Delete and get the task manager up?  If so, you can then goto file....NewTask...  and type in "explorer.exe".  If that can run, then you can try to figure out what is causing it not to open explorer on startup...  Try this:
Start ---> Run ---> "Regedit.exe"

Expand HKEY_LOCAL_MACHINE.
Expand SOFTWARE
Expand MICROSOFT
Expand Windows NT
Expand CurrentVersion
Expand WinLogon

there will be a Key called "Shell".  It should contain the value "Explorer.exe".  If not, Make it that.

(You can also do this is safemode if you cant control-alt-delete)


If that doesn't work, did you try this repair process?
"How to perform an in-place upgrade (reinstallation) of Windows XP"
http://support.microsoft.com/?kbid=315341
0
 

Author Comment

by:emagination2006
ID: 17888816
I can run task manager and run most applications without problem. Checked the Shell entry in the registry and looks ok.

If I try run 'explorer' manually from the task manager, the bar pops up for a second and then disappears again. I can't figure out what's crashing it.

I have also tried a repair re-install from the XP CD, but didn't make any difference.

I'm on site at the moment, so think it's gonna be a complete system reformat !!!
0
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 21

Assisted Solution

by:briancassin
briancassin earned 1000 total points
ID: 17888965
Are you using a local profile or server based profile when you are logging on

It sounds like something got in the machine...

Can you get to the processes tab in task mananger ?

If you can get to task manager, go to the Processes tab, and look for a process called 'SYSU.EXE'. If it's running, kill it.

Now, if your desktop suddenly returns to normal, then yes, you've got this virus. You're not out of the woods yet. There is probably a folder on your machine called 'C:\Program Files\ddm'. Delete that, of course. You'll probably also want to search your registry for the string 'ddm' and kill most of what you find. In particular the key HKEY_LOCAL_MACHINE/SOFTWARE/ddm, and anything under HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Run and/or RunOnce that refers to 'ddm' or 'sysu.exe'.


If you do not find that look for any other odd processes and or anything using CPU time.

Sounds like you got hit with a newer trojan.

You can either format the drive and reinstall or run some anti virus anti spyware tools..

I would try running Panda active scan from http://www.pandasoftware.com I would also run symantec's online scanner and http://www.bitdefender.com

Also you could run rootkit revealer.

0
 
LVL 38

Accepted Solution

by:
younghv earned 1000 total points
ID: 17889119
emagination2006,

Are you seeing anything in your Event Viewer for Errors or Warnings?

If you had this computer back on your bench and could spend the time tracking down all the potential problems (to include identifying and removing malware) I might suggest taking the time.

If you're on-site and have to get this box up and running, a data back up and 're-load' might be faster.


Vic
0
 

Author Comment

by:emagination2006
ID: 17889176
Thanks for the quick responses and suggestions lads!

I'm afraid money is going win out over time in this case and need to get the machine back up and running on the network.

Does look like a virus/malware of some sort, but I'm going to go ahead and reformat. I hate letting these things beat me, but need to move onto the next job.

Going to split the points between younghy and briancassin for such quick replies.

Cheers
0
 
LVL 38

Expert Comment

by:younghv
ID: 17889283
E-2006,
Sadly, I agree.
Much more fun to track down these little bugs and pound a stake through their hearts.

Thank you for the points.

Vic
0

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Hello I read in a discussion about a person who configured a very simple mirror RAID with two hard drives; the system and data were on the same partition. He asked how to repair the system as it was not booting up anymore. In his case running …
In a recent article here at Experts Exchange (http://www.experts-exchange.com/articles/18880/PaperPort-14-in-Windows-10-A-First-Look.html), I discussed my nine-month sandbox testing of the Windows 10 Technical Preview, specifically with respect to r…
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…
Hi friends,  in this video  I'll show you how new windows 10 user can learn the using of windows 10. Thank you.

824 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question