Solved

Explorer.exe fails to load at startup sbs 2003

Posted on 2010-08-30
11
688 Views
Last Modified: 2012-06-27
Server lost power for extended time over weekend. on restart it hung, on subsequent restart Explorer failed to load when loggin in as administrator. Only blue screen but can get Task Manager.

If I log off / Log on as another user it comes up fine...

Tried to log off and on as Administrator - no luck.  Any ideas???

0
Comment
Question by:Alisanne
11 Comments
 
LVL 4

Expert Comment

by:Zupreme
ID: 33560622
Make sure that this registry key:  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

has a string value called "Shell" with a value of "Explorer.exe" (without quotes).

Then reboot the machine.
0
 

Author Comment

by:Alisanne
ID: 33560904
...\Winlogon (and Shell string value) are not present.  Should I add?

If this is the issue,why does it load when I logon as different user?

Thank you for your advise!!!

0
 

Expert Comment

by:SYSKING
ID: 33561693
open up your registry editor
go in these folders:
HKEY_LOCAL_MACHINE/SOFTWARE/MICROSOFT/WINDOWS NT/CURRENT VERSION/ then click on WinLogon in the right window, look for Shell
double click it and in the value data box delete whats there and put this:
explorer.exe
restart your computer and there you go
0
 
LVL 4

Expert Comment

by:Malajlo
ID: 33565713
Start task manager, run explorer. This should work. If so, delete admin profile (you have to login as other administrator)
If only administrator has a problem, then hklm should not be the probelm. It's hkcu.
0
 

Author Comment

by:Alisanne
ID: 33569684
I created an additioanl admin profile and this worked. Then after 2nd restart that profile did the same.  I will check both preceding suggestions and go from there...
0
Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

 

Author Comment

by:Alisanne
ID: 33569769
@SYSKING - That value is present.
0
 

Author Comment

by:Alisanne
ID: 33569781
@Malajlo - If I delete Administrator Profile, it will impact many softwares that use Administrator to login/authenticate. is there another approach?
0
 
LVL 4

Expert Comment

by:Malajlo
ID: 33575294
No, it won't impact. All services and scheduled jobs will recreate profile.
0
 

Author Comment

by:Alisanne
ID: 33581134
@Mahajlo - This may sound like a stupid question, but how do I delete profile without deleting user?
0
 

Author Comment

by:Alisanne
ID: 33730533
Problem persists, for new and old users (Administrator and Admin) user logins...  Not sure where to go from here.

Any suggestions?
0
 
LVL 4

Accepted Solution

by:
Malajlo earned 500 total points
ID: 33733880
To delete local user profile:
Login as other admin. Right clik on My computer, Properties, Advanced, User profiles. Delete the profile of "corrupetd" administrator.

Did you scan server for malware? I think something else is instead of original explorer.exe. But can't tell what to look. Also could be additional value in registry added (where, it is a big question....)

But if new profiles get corupted, some malware should run and change startup/shell. When you connect second time, profile loaded is already corrupted.

Scan for malware (malware bytes is quite good for a start; it will find anomalies in registry).
Also check startup programs with msconfig. Search for weird execs.
0

Featured Post

What Security Threats Are You Missing?

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

Ever notice how you can't use a new drive in Windows without having Windows assigning a Disk Signature?  Ever have a signature collision problem (especially with Virtual Machines?)  This article is intended to help you understand what's going on and…
A quick step-by-step overview of installing and configuring Carbonite Server Backup.
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now