Explorer.exe problem

eng314 · #1 September 13th, 2004, 12:27 PM

When wondows 2000 loads it get all the way to the wallpaper on the desktop then freezes. If you hit Ctrl+Alt+Del and stop explorer.exe and then reload explorer.exe from "new task" in "task manager" the desktop and icon load correctly. Can anyone help with this issue. I have run several adware/spyware programs to remove programs but the problem still exsists.

**Murf** · #2 September 14th, 2004, 01:00 AM

Welcome to CTH

1. .jpg files with long names (such as are found in the various "Temporary Internet Files" folders) might be causing this problem. Try deleting all of them from all of the user accounts. Then reboot.

2. Could be a corrupted Profile (account).

Try logging in under another account.

If you don't have one then do the following:

a. Click the Start button (usually located at the bottom left-hand corner of your screen). This will bring up a menu.

b, Click on Settings. This will bring up a submenu.

c. Click on Control Panel. This will open the Control Panel window.

d. Click on Users and passwords.

Note: If you are not already logged in as an Administrator, you will be prompted to enter the user name and password of your Administrators account. Type your information and Click on OK.

e. The Users and Passwords window will open, showing a list of all user accounts on the computer.

f. Click on the Add... button. The Add New User window will open.

g. Next to User name, Type the user name to be used for the account.
Next to Full name, Type the full name of the account owner.

Optional: Next to Description, Type a short, unique description of the account. This will help you differentiate between accounts with similar names.

h. Click on the Next button.

i. Next to Password, Type a password for the account. This is the password the account owner will use to log on to the computer.

j. Next to Confirm Password, Type the same password again.

k. Click on the Next button.
Click on the little white circle next to the level of access you want to grant the account owner. (A black dot will appear in the circle.)
Click on the Finish button.

l. The new account will appear in the Users and Passwords window.

m. Click on the OK button.

Congratulations! You've finished creating the account.

If this works then your administrator's account was corrupted. Come back and let us know. Then we can get rid of this account and get you back to the adminstrator account, if that is all you have.

eng314 · #3 September 21st, 2004, 09:48 PM

Tried both of those ideas and niether one made any difference.

eng314 · #4 September 26th, 2004, 08:14 PM

i have been looking thru the programs that load at start up and found two i'm not familiar with and can find no info on in on the web. Can anyone give me some imput on them.

lsess.exe

sys32snd.exe

raxelrod · #5 September 27th, 2004, 12:53 AM

I have the exact same problem with Windows NT machine.. ran all the spyware made in the world.. nothing found.. no virus...?

**AnnMarie** · #6 September 27th, 2004, 04:14 AM

Hi eng314, is that lsess.exe or a typo? Could you make sure that you can view hidden files and folders and run a search for sys32snd.exe. When you find it, copy it to a new folder, zip it up (this is important) and email it to me (include a link to this thread). My address is annmarie@cybertechhelp.com. I will post back when I have checked it out.

BTW, if lsess.exe is not a typo, send me that file too. Also go here and download the latest version of Hijack This to a new folder on your drive, unzip it and click on scan. Most of the files listed will be harmless and/or required so do not make any changes, just click on Save Log, copy it and post it back in this thread.

Hi raxelrod, can you please start your own topic and post a Hijack This log too. It's too difficult working with two different logs in the one thread.

eng314 · #7 October 18th, 2004, 02:00 AM

thanks for all the help. after about 8 hrs. of trying everything i know and a few wild guesses at some stuff i have fixed the problem. apeared to have something to do with a bad install of ie6.

**AnnMarie** · #8 October 18th, 2004, 06:34 AM

Hi eng314, I think your problem was a bit more complicated than a bad install. There is now information available regarding sys32snd.exe. Its WORM_WOOTBOT.AA and it was only discovered just before you posted your problem. Lsess.exe is the latest version of the Spybot worm and was discovered on the 29th of last month.