can't open explorer or control panel

Got in a customer's pc that he admits he tried to remove something in windows setup(trying to make it faster :rolleyes: ) and now it is acting very weird. It starts up ok, but neither windows explorer or internet explorer will open; it loses the desktop for a second and then comes back. Same thing with control panel. If I restart in safe mode, they function fine.
I tried sfc/scannow, repair re-install of xp, disabling all startup's, etc...
I scanned for virus; it's clean. I ran spybot and found some spyware but nothing critical. I removed it ok. Still the same.
Ideas??? :eek2:

You dont say what the Operating system is but the odds are it is something loading at startup.

Run Msconfig from the run options and disable anything that looks suspicious.

What exactly did he try to remove and what windows?

and now it is acting very weird. It starts up ok, but neither windows explorer or internet explorer will open; it loses the desktop for a second and then comes back. Same thing with control panel. If I restart in safe mode, they function fine.
I tried sfc/scannow, repair re-install of xp, disabling all startup's, etc...

I scanned for virus;

Using what antiivirus?
His onboard or did you do a online scan ?
www.trendmicro.com
www.pandasoftware.com/activescan
This definetly sounds like a possible viral problem I have had before
You might also try just going to
www.microsoft.com/IE
and downloading the IE installer and have it do a repair

I can't get this pc online so I used stinger. This pc is running xp pro. I will look at the startup again.

Frankly without knowing what he did, you could be throwing fixes at it forever. Is system restore on?

Oh and I know its XP cos you said so cabal :devil:

control panel keys
HKEY_CLASSES_ROOT\cplfile]
@="Control Panel extension"

[HKEY_CLASSES_ROOT\cplfile\shell]

[HKEY_CLASSES_ROOT\cplfile\shell\cplopen]
@="Open with Control Panel"

[HKEY_CLASSES_ROOT\cplfile\shell\cplopen\command]
@="rundll32.exe shell32.dll,Control_RunDLL %1,%*"

[HKEY_CLASSES_ROOT\cplfile\shell\runas]

[HKEY_CLASSES_ROOT\cplfile\shell\runas\command]
@="rundll32.exe shell32.dll,Control_RunDLLAsUser %1,%*"

Also same stuff but under HKEY_LOCAL_MACHINE\SOFTWARE\Classes\cplfile

There are a few other keys, but these are to do with launching it.

hmmm he didn't delete win.ini did he?

NooNoo-

This is close to the issue I posted earlier about the Control Panel and My Computer issue. Alot of times customers say they deleted "something" and think that is what caused the issue, (which is true in some cases) but alot of times that isn't the cause. The issue I have with the CP is the same(screen goes away for a second and then comes back) Works fine in safemode? I took all of the same steps as Cabal and got the same results. Thanks~ babymomma

did you check those registry keys are there in normal mode?

Thanks for reply, NooNoo. I checked those registry keys and they appear normal.
This one really has me cheesed. Why does it work in safe mode, but if I turn off all startup items it still won't work/ Does this mean there is a service that is not working right?

is it possible they removed a system/mb driver that is loaded as different in safe mode???

Try some of these from the run line: http://www.chami.com/tips/delphi/052698D.html

OK, it works in safe mode, that points to profiles. Try logging in as Administrator in normal mode see if it works, if it does, create a new user and then reboot and login to it. Does that work?

Hello,
I see your post on not being able to open explorer or the control panel. I have the same thing, I click on Internet Explorer and it goes blank and does nothing, I click on my computer and nothing and the control panel won't open. I haven't tried safe mode yet, but I scanned for a virus and found nothing. I reinstalled Windows XP and got the same results.
Were you able to solve your problem, if so can you please share? I don't know what to try next?
Thanks!

No, I didn't. Customer was getting impatient so I did a fresh install of xp and re-installed his software. Now it is working fine. My guess is something customer deleted or downloaded screwed his xp beyond repair.
Thanks for your help, NooNoo and DocPC.

Quote:

---

Originally Posted by cabal

No, I didn't. Customer was getting impatient so I did a fresh install of xp and re-installed his software. Now it is working fine. My guess is something customer deleted or downloaded screwed his xp beyond repair.
Thanks for your help, NooNoo and DocPC.

---

Format - Great utility...
I usually make an Image of the OS for the next time the customer $crew everything up...

Cheers,
Gabriel

This is strange. I am having this exact problem. Anyone else using Dell? I've got to figure virus or spyware, but both show clean online or off. I was able to open Realmedia browser, so it seems to me that basically Explorer is damaged. However, I reinstalled XP (did not reformat, that's the next step) and it didn't change anything. The reformat will work, of course, but what a bitch of a thing to happen to several people in such a short span. There's got to be more out there on this somewhere. What sense does it make that safe mode works, but no troubleshooting through services, boot, etc.,. helps? Also, as I load preferences after boot, I get a quick message, so short it's unreadable, but it's there. Any way to see what that might have said?

Welcome to Windrivers gmw

Yes use the pause/break key.

Have you tried a repair install of ie6 sp1?

Yes, I tried reinstalling explorer, repairing Windows, everything that would normally fall in my troubleshooting flow chart. Nothing. I finally gave up too. Reformat the thing and start over. But I bet we'll see this topic again.

I have the similar problem...but it only happens when I open
Control panel\Regional and Language options\Advance\
and change English(U.S) to Chinese(PRC)

i cant get my display to let me do anything it keeps shuting down i fond out that i have the worm klez what do i do

So welcome to windrivers Rex Romero :)

Try this link at symantec for removal instructions/tool W32.Klez Removal Tool

There are however variaties of this, if that doesn't get it you are gonna have to come back & give us some symptoms ;)

I've had this same problem. All I did to fix it was to open IE, go to Tools/Internet Options...Advanced Tab, then UNclick "Enable Third Party Browser Extensions", click apply, then OK.

Weird thing is, mine won't STAY that way. Once I reboot, I have to do that all over again!

Hope this helps...
Annie

Quote:

---

Originally Posted by Anniebird78

I've had this same problem. All I did to fix it was to open IE, go to Tools/Internet Options...Advanced Tab, then UNclick "Enable Third Party Browser Extensions", click apply, then OK.

Weird thing is, mine won't STAY that way. Once I reboot, I have to do that all over again!

Hope this helps...
Annie

---

Welcome to WD Annie.
What you talk about is a fix for certain types of malware/worms. But, if you continue to have the problem, it is not solved. Perhaps view the "sticky" at the top of the AV/Spyware forum here: http://forums.windrivers.com/showthread.php?t=57348
And, if you still have the problem, post with a new thread. in that forumhttps://forums.windrivers.com/images.../2006/04/1.gif

I posted this reply in "Cannot open Control Panel or My Computer" thread:

I have this problem also.
I cannot open "Control Panel, My Computer, short cuts to several folders I have on my Desk Top (but I can open "My Documents" folder short cut on the Desk Top, All Desk Top short cuts to programs work).
The problem happened in Safe Mode one time. When I tried to open control panel it locked up and I had to hold the power button to quit.
The problem will disappear sometimes (rarely) after a restart but will come back.
When shutting down or restarting when the problem is happening always I get the message: End Program Poxy Desktop and I have to click the "End Now" button in the message other wise it will hang.
I have run all the AV suggested with nothing showing up.

In "HKEY_CURRENT_USER\Control Panel\don't load" Ihave only one subkey ab(Default) REG_SZ (value not set)

When opening "sysedit" I get these two messages: "Cannot Find WFWNET.DRV", and "C:\AUTOEXEC.BAT Cannot open this File"
C:\AUTOEXEC.BAT is blank and C:\CONFIG.SYS is also blank.
Here are copies of:

C:\WINDOWS\WIN.INI
[programs]
mstsplit.exe=C:\Program Files\WinRAR\WinRAR.exe
[Settings]
fOnOff=
fCloseBrowser=
fIEWhiteList=
fBlockByTitle=
bMinimized=False
bAutoDownload=False
bJavaPops=False
bRunIE=False
bStartup=False
bIEToolBar=False
bBannerSound=False
bBlockAdServers=False
bBlockIEPopups=False
bBlockFlash=False
bPopSound=False
bHostsFullySet=False
[MCI Extensions.BAK]
wpl=MPEGVideo
[drawdib]
vga.drv 1280x1024x32(BGR 0)=1,5,5,5
[WinFax]
ExePath=C:\PROGRA~1\WinFax\
Fax Path=C:\PROGRA~1\WinFax\Data\
Cover Path=C:\PROGRA~1\WinFax\Cover\

C:\WINDOWS\SYSTEM.INI
; for 16-bit app support
[drivers]
wave=mmdrv.dll
timer=timer.drv
[mci]
[driver32]
[386enh]
woafont=dosapp.FON
EGA80WOA.FON=EGA80WOA.FON
EGA40WOA.FON=EGA40WOA.FON
CGA80WOA.FON=CGA80WOA.FON
CGA40WOA.FON=CGA40WOA.FON

A copy of Hijackthis:

Logfile of HijackThis v1.97.7
Scan saved at 2:33:28 PM, on 5/17/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG6\avgserv.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\WINDOWS\system32\pctspk.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\SYSTEM32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
C:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
C:\Program Files\Creative\SBAudigy2\Surround Mixer\CTSysVol.exe
C:\Program Files\Creative\SBAudigy2\DVDAudio\CTDVDDet.EXE
C:\Program Files\Grisoft\AVG6\avgcc32.exe
C:\Program Files\Microsoft IntelliPoint 4.12\Mouse\SETUP\MSH\Mouse\point32.exe
C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe
C:\Program Files\Dell Computer\Dell Image Expert\QuickTime\qttask.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\Explorer.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\ntvdm.exe
C:\WINDOWS\Explorer.EXE
C:\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.fatwallet.com/forums/categories.php?catid=18
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = c:\WINDOWS\PCHealth\HelpCtr\System\PANELS\BLANK.HT M
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\WINDOWS\PCHealth\HelpCtr\System\PANELS\BLANK.HT M
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O4 - HKLM\..\Run: [TrojanScanner] C:\Program Files\Trojan Remover\Trjscan.exe
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\System32\PSDrvCheck.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [MMTray] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [mmtask] c:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy2\Surround Mixer\CTSysVol.exe
O4 - HKLM\..\Run: [CTDVDDet] C:\Program Files\Creative\SBAudigy2\DVDAudio\CTDVDDet.EXE
O4 - HKLM\..\Run: [AVG_CC] C:\Program Files\Grisoft\AVG6\avgcc32.exe /startup
O4 - HKLM\..\Run: [POINTER] c:\Program Files\Microsoft IntelliPoint 4.12\Mouse\SETUP\MSH\Mouse\point32.exe
O4 - HKLM\..\Run: [Zone Labs Client] C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\Dell Computer\Dell Image Expert\QuickTime\qttask.exe" -atboottime
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/...ash/swflash.cab

It looks like all my C:\WINDOWS\WIN.INI's have been editted some how. I can not be sure as I do not have a copy of what it should look like. Seems like the false should be true and the shell=explorer.exe is missing. If I rename the extensions to .old would they be rewrittened in the correct layout? I will try a search for proper copies of these ini's. This has been a persistent problem that started happening out of no where. Any help would be appreciated. Thanks

One more thing. After clicking "End Now" before shut down/restart the folders on the desktop that I had tried to open will open. So the "Proxy Desktop" is tied in. I also tried reinstalling IE.

Welcome to Windrivers Snookered!

this should help with the WFWNET.DRV problem


Are you running CVS or TortoiseCVS? Proxy Desktop is not one I have heard of.

I am not running CVS or TortoiseCVS. I wouldn't know what they are. How about the C:\WINDOWS\WIN.INI, & C:\WINDOWS\SYSTEM.INI? Are they correct? Can you post a correct copy? I think the Proxy Desktop is some kind of spyware that the spy remover apps do not know of yet? Thanks

Quote:

---

Originally Posted by TripleRLtd

Welcome to WD Annie.
What you talk about is a fix for certain types of malware/worms. But, if you continue to have the problem, it is not solved. Perhaps view the "sticky" at the top of the AV/Spyware forum here: http://forums.windrivers.com/showthread.php?t=57348
And, if you still have the problem, post with a new thread. in that forumhttps://forums.windrivers.com/images.../2006/04/1.gif

---

Thank you guys. I browsed this thread yesterday (with FireFox) because I had the same problem. I had installed several different things yesterday, but most suspicious was some program that Norton Anti-Virus caught trying to install itself on my computer. A few hours later, the problem happened: I couldn't open IE, explorer, cntrl panel, etc.

I did what annie said, which did work, but I didn't restart to see if the problem would reoccur. I went to the "sticky" on AV/Spyware, did an online scan (it found nothing), downloaded and updated Spybot, and removed a few spy/ad programs from my computer.

My computer seems fine now. I had to sign up and tell you that. Thanks.

glad you found windrivers useful compsciasaur!