Solved

blank screen after XP Service Pack 3

Posted on 2008-09-29
13
773 Views
Last Modified: 2012-08-14
I recently added Service Pack 3 to a Windows XP Professional pc.  When the load was all done and I did a restart I came to an absolutely blank screen (not even a Taskbar)....after having entered my password.  I found out in another answer here in EE that I should open the Windows Task Manager and do a File/New Task/Run explorer.exe.  I tried that to no avail and, then noticed that there were two explorer.exe entries.  I got rid of them both and, then, did another File/New Task/Run explorer.exe.  This time everything came to the screen just fine.  I tried several applications, looked at windows explorer, etc. and everything was ok.  However, when I shut down and then started back up I came to the same blank screen.  When I repeated the earlier process everything appeared ok.  However, each time I reboot I have the same problem.
0
Comment
Question by:WFBweb
13 Comments
 
LVL 4

Expert Comment

by:smittyboom
ID: 22602441
Do you have a AMD Processor? If so go to this website and follow instructions.
http://msinfluentials.com/blogs/jesper/archive/2008/05/08/does-your-amd-based-computer-boot-after-installing-xp-sp3.aspx

Can you get into safe mode? If so then try to remove SP3 or do a system restore to a point before SP3 was loaded. Sp3 is still causing issues and i personally do not recommend it.
0
 

Expert Comment

by:Pirasanna
ID: 22602483
Try the system restore and restore to a point before the SP3 was installed and thn reinstall SP3 again.
I am working with SP3 and is fine... i have no problem till now...

Another solution would be to run the explorer.exe in the sheduled task.
Start> run> tasks
Add new sheduled task and select the explorer.exe program from c:/windows/explorer.exe
then shedule the task to run everytime the user logins... this is a temprorary solution though..
0
 
LVL 1

Expert Comment

by:Digitasupport
ID: 22603901
Not such a temp solution is as below:-
Navigate to the registry once logged on and delete the following keys:-
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\explorer.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\iexplorer.exe
Also check the following:-
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon.

In the right pane, make sure there is a REG_SZ named Shell and it has a
value of "explorer.exe" (no quotation marks). If its not there, create it by
clicking Edit > New > String Value then right-click it and key in
explorer.exe then restart the computer.

Once these keys are deleted/altered the desktop and internet explorer should come back to life.
After you log back on again , all should be restored as it should rebuild itself.
NB MAKE SURE YOU TAKE A BACKUP OF THE REGISTRY BEFORE COMMENCING THIS WORK!!
0
 
LVL 14

Expert Comment

by:igor-1965
ID: 22603995
Check out if these two values are present in your registry:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"AutoRestartShell"=dword:00000001
"Shell"="Explorer.exe"
0
 

Author Comment

by:WFBweb
ID: 22614509
FYI.  The problem pc is at a notforprofit where I do volunteer MS Access programming.  Last night I removed sevice pack 3 and on the reboot....same problem.

I had installed service pack 3 after recovering this pc from an attack of viruses....70+ removed by Windows Malicious Software Tool and another 50+ by my virus checker.  After doing that when I rebooted  the screen didn't come up blank but I had two messages saying that dll's could not be found. I couldn't find them on the net so decided that going to service pack 3 would fix that problem.  That's when the screen first came up blank.  Now it's still blank after returning to service pack 2.
0
 
LVL 1

Expert Comment

by:Digitasupport
ID: 22614573
Ok so to cut a long story short , whether or not you are on SP 2 or Sp3 explorer is not booting.
have you booted into save mode then and checked the above keys are present in the registry?
Sounds like the AV scan removed the system DLLs , probably related to Explorer.
Sounds like a format/rebuild to me , I would pop in the restore disc , and then format the drive (NOT reinstall windows) and then deleted all partitions .
Then install a fresh copy of XP and SP3 it up , that should dop the trcik , else if a rebuild is not availible , then check the settings above after booting into safe mode.
0
Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

 

Author Comment

by:WFBweb
ID: 22614750
I checked the startups early on via msconfig and both of the dll's were executed there:  jxmvejgw and pncajih.  I haven't a clue what they do.  I'm trying to avoid having to reinstall apps, user info, etc.
0
 
LVL 1

Accepted Solution

by:
Digitasupport earned 150 total points
ID: 22614842
MSconfig is showing 2 dlls at startup - jxmvejgw.dll and pncajih .dll
These are not Windows Dlls , and google holds nothing about them , i would be wary about them...
Are they being called from the system32 directory ?
I would bet that the viruses have done some lasting damage , and that the two files being executed at start up are rogue files.
What happens if you remove them from start up?


0
 

Author Comment

by:WFBweb
ID: 22615165
RE: What happens if you remove them from start up?
I'll give it a try this evening.
0
 

Author Comment

by:WFBweb
ID: 22621332
When I was at the pc tonight I couldn't believe my eyes.  When I booted the regular screen appeared right away with all the proper icons, etc.  However, the problem that caused me to go to Service Pack 3 in the first place had returned.  I got two error messages saying that dll's jxmvejgw and pncajih were missing.  I did a search in windows explorer just to be certain.  I then went back into msconfig and unchecked both of these dll's from the Startups.  The Startup screen said their location was HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run.  When I rebooted everything appeared to go just fine.  I gave it a good shakedown. I've returned the pc to the user who had it and will keep an eye on it.
0
 
LVL 1

Expert Comment

by:Digitasupport
ID: 22622117
Great !!! I am glad you had a result in the end , as the two DLLs you mentioned are not Windows Dlls.
This led me to belive there are left over from the virus/malware attack.
Glad you got it sorted though:0
Cheers
0
 

Author Comment

by:WFBweb
ID: 22623632
Thanks for your help. I'm going to keep this question open for a couple of days to see if the pc user has any more problems.  I doubt very much if the evil dll twins will return, but.....
0
 

Author Comment

by:WFBweb
ID: 22643036
The person who was using the pc refused to use it because I hadn't updated the desktop to match the one she had been working on.  Today I went over and tried to get the problem pc ready for a different user.  In the process I twice got a popup saying that the virus checker had discoverd viruses....it listed them and said I needed to reboot.  

After the last reboot I needed to get rid of a piece of software and clicked Add or Remove Programs.  When I did I got a message saying that rundll32.exe was not there.  When I searched the web I found it that the probable cause was a trojan virus.

So....enough.  I'm going to clean the hard drive and start all over.  
0

Featured Post

Complete VMware vSphere® ESX(i) & Hyper-V Backup

Capture your entire system, including the host, with patented disk imaging integrated with VMware VADP / Microsoft VSS and RCT. RTOs is as low as 15 seconds with Acronis Active Restore™. You can enjoy unlimited P2V/V2V migrations from any source (even from a different hypervisor)

Join & Write a Comment

Are you unable to synchronize your OST (Offline Storage Table) file with Microsoft Exchange Server? Is your OST file exceeding 2 GB size limit? In Microsoft Outlook 2002 and earlier versions, there is a 2 GB size limit for the OST file. If the file …
Sometimes people don't understand why download speed shows differently for Windows than Linux.Specially, this article covers and shows the solution for throughput difference for Windows than a Linux machine. For this, I arranged a test scenario.I…
It is a freely distributed piece of software for such tasks as photo retouching, image composition and image authoring. It works on many operating systems, in many languages.
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now