jeff221
asked on
Explorer.EXE - Application Error : The application failed to initialize properly (0xc0000142).
Upon booting this Windows XP Professinal SP2 PC I get the following error:
Explorer.EXE - Application Error : The application failed to initialize properly (0xc0000142)
As windows does NOT continue to load Explorer.exe, it stops at the desktop with no icons or start menu. If I CTRL+ALT+DEL and start a new task of "Explorer.exe" the machine continues to boot, loading explorer nd the icons/start menu with no problems. I've run Symantec Antivirus 10.2 Corporate, SpyBot S&D and Lavasoft Ad-Aware with no success. Below is the log from HiJackThis in hopes someone can tell me where I need to look next!
Explorer.EXE - Application Error : The application failed to initialize properly (0xc0000142)
As windows does NOT continue to load Explorer.exe, it stops at the desktop with no icons or start menu. If I CTRL+ALT+DEL and start a new task of "Explorer.exe" the machine continues to boot, loading explorer nd the icons/start menu with no problems. I've run Symantec Antivirus 10.2 Corporate, SpyBot S&D and Lavasoft Ad-Aware with no success. Below is the log from HiJackThis in hopes someone can tell me where I need to look next!
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:12:39 PM, on 9/12/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\DigitalPersona\Bin\DPWinLct.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\DigitalPersona\Bin\DpHost.exe
C:\WINDOWS\System32\GEARSec.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Symantec\Norton Ghost\Agent\PQV2iSvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\DigitalPersona\Bin\DPFUSMgr.exe
C:\WINDOWS\system32\userinit.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\Program Files\Intel\NCS\PROSet\PRONoMgr.exe
C:\Program Files\DigitalPersona\Bin\DPAgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\oembios.exe,
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [PRONoMgr.exe] C:\Program Files\Intel\NCS\PROSet\PRONoMgr.exe
O4 - HKLM\..\Run: [DPAgnt] C:\Program Files\DigitalPersona\Bin\DPAgnt.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [SetDefaultMIDI] MIDIDef.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [SetDefaultMidi] MIDIDEF.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [SetDefaultMIDI] MIDIDef.exe (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [SetDefaultMidi] MIDIDEF.EXE (User 'Default user')
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {2357B3CF-7F8D-4451-8D81-FD6097610AEE} (CamfrogWEB Advanced Unicode Control) - http://activex.camfrogweb.com/advanced/2.0.2.3/cfweb_activex.camfrogweb.com-advanced-2.0.2.3_instmodule.exe
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1216759512187
O16 - DPF: {9A57B18E-2F5D-11D5-8997-00104BD12D94} (compid Class) - http://support.gateway.com/support/serialharvest/gwCID.CAB
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O20 - Winlogon Notify: DPWLN - C:\WINDOWS\system32\DPWLEvHd.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: Windows XP FUS Manager (DPFUSMgr) - DigitalPersona, Inc. - C:\Program Files\DigitalPersona\Bin\DPFUSMgr.exe
O23 - Service: Biometric Authentication Service (DpHost) - DigitalPersona, Inc. - C:\Program Files\DigitalPersona\Bin\DpHost.exe
O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSec.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\NCS\Sync\NetSvc.exe
O23 - Service: Norton Ghost - Symantec Corporation - C:\Program Files\Symantec\Norton Ghost\Agent\PQV2iSvc.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
--
End of file - 6296 bytes
As a side note, your log file looks clean.
You can always cut and paste any future HiJackThis log file for free analysis at:
http://www.hijackthis.de
David
You can always cut and paste any future HiJackThis log file for free analysis at:
http://www.hijackthis.de
David
Hello there,
I have taken a look at your hiajckthis log and it is completely clean. Have you tried to run system file checker? Click Start>Run>type sfc /scannow. If any of the windows files are corrupt this will attempt to fix them or replace them. Give that a shot. Have you tried a system restore or a "Last Known Good Configuration" from the Advance boot menu?
I have taken a look at your hiajckthis log and it is completely clean. Have you tried to run system file checker? Click Start>Run>type sfc /scannow. If any of the windows files are corrupt this will attempt to fix them or replace them. Give that a shot. Have you tried a system restore or a "Last Known Good Configuration" from the Advance boot menu?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
F2 - REG:system.ini: UserInit=C:\WINDOWS\system
the above entry in your hijackthis log is a bad one.
MalwareBytes also takes care of it apparently, so use either SDFix or MBAM.
Please download Malwarebytes' Anti-Malware to your desktop.
http://www.malwarebytes.org/mbam.php
Double-click "mbam-setup.exe" and follow the prompts to install the program.
Make sure to checkmark 'Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
If an update is found, it will download and install the latest version.
Once the program has loaded, select "Perform full scan", then click "Scan".
When the scan is complete, click OK, then "Show Results" to view the results.
Be sure that everything is checked, and click "Remove" Selected.
the above entry in your hijackthis log is a bad one.
MalwareBytes also takes care of it apparently, so use either SDFix or MBAM.
Please download Malwarebytes' Anti-Malware to your desktop.
http://www.malwarebytes.org/mbam.php
Double-click "mbam-setup.exe" and follow the prompts to install the program.
Make sure to checkmark 'Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
If an update is found, it will download and install the latest version.
Once the program has loaded, select "Perform full scan", then click "Scan".
When the scan is complete, click OK, then "Show Results" to view the results.
Be sure that everything is checked, and click "Remove" Selected.
jeff221,
Did you try and run either SDFix or MBAM?
Either of these tools would've fixed the problem as this is caused by the infection showing in your Hijackthis log.
Did you try and run either SDFix or MBAM?
Either of these tools would've fixed the problem as this is caused by the infection showing in your Hijackthis log.
Computer101,
Thank you.
Thank you.
I have this same issue.. it reads exactly the same
Explorer.EXE - Application Error : The application failed to initialize properly (0xc0000142)
My computer will freeze everytime within 10 minutes. It did this for a while before readying this error. Now it is unable to load desktop icons and i must start the new task of explorer.exe and it will still freeze up within 10 minutes. I have not done a hijackthis log but i did do this SDFix log... I have attached the report. I am hoping to get some help from this 30 day free trial and fix my computer before my dad hands it to some random friend to fix. Any help is much appreciated. Thank you.
report.txt
Explorer.EXE - Application Error : The application failed to initialize properly (0xc0000142)
My computer will freeze everytime within 10 minutes. It did this for a while before readying this error. Now it is unable to load desktop icons and i must start the new task of explorer.exe and it will still freeze up within 10 minutes. I have not done a hijackthis log but i did do this SDFix log... I have attached the report. I am hoping to get some help from this 30 day free trial and fix my computer before my dad hands it to some random friend to fix. Any help is much appreciated. Thank you.
report.txt
dwalk616,
Welcome to Experts-Exchange!
This question has been closed and most of the Experts are no longer subscribed to this thread.
You need to ask your own new question and by doing so, many Experts will be able to see your question and will be there to help you.
You can choose which zones you want it posted, you also can cross-post to 3 different zones.
https://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Windows/XP/newQuestionWizard.jsp
To start with, have you scanned the system with MalwareBytes or any scanners?
MalwareBytes:
http://www.malwarebytes.org/mbam-download.php
SDFix is now an outdated tool, it hasn't been updated for over a year.
Welcome to Experts-Exchange!
This question has been closed and most of the Experts are no longer subscribed to this thread.
You need to ask your own new question and by doing so, many Experts will be able to see your question and will be there to help you.
You can choose which zones you want it posted, you also can cross-post to 3 different zones.
https://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Windows/XP/newQuestionWizard.jsp
To start with, have you scanned the system with MalwareBytes or any scanners?
MalwareBytes:
http://www.malwarebytes.org/mbam-download.php
SDFix is now an outdated tool, it hasn't been updated for over a year.
http://www.michaelstevenstech.com/XPrepairinstall.htm
If you choose not to do a Repair you might be able to boot into Safe Mode and run SFC /SCANNOW.
http://www.updatexp.com/scannow-sfc.html
You'll need your OS CD for either of these operations.
I doubt that a virus is the cause of this (you stated that you ran your anti-virus suites.)
I have seen IE corruption cause this and I've been able to correct the issue with the methods listed above.
David