explorer.exe fails on system boot

[comp615]

here's the problem. I'm working on fixing a friend's computer running windows me.When I attempt to start the computer an error message pops up and says that explorer.exe has failed to load and that I should reinstall windows. I used FPROT antivirus from DOS to scan the hard drive. I found a few things called secondth.c as well as a few others. I also found a few things that were identified as backdoors. However I left those. Eventually it got to the restore folder which was taking a long time so I stopped it there. it had finished scanning the windows folder so I figured it was OK but when I tried to restart it it gave me the same error message again. I'll be going back tomorrow to try to finish, we decided that if we had to reinstall it would use Windows XP. So what I'm wondering is,is there a way to fix this or do we have to go ahead and reinstall windows? THX

Charlie

[GaryRouth]

If you have another computer with up-to-date anti-virus definitions, and good antispyware programs, you could also try slaving the WinMe system's hard drive & scanning it from the host computer. You'll probably have to delete the System Restore folder, it's likely full of the bad guys. You may need to change that folder's attributes before you can delete it. Make sure the host system is set to view all files (including hidden system files). Check the Restore folders Properties, and remove the hidden attribute.

If money isn't a barrier, there's no reason you can't just start over with a fresh copy of XP - but enable the Firewall and get the Security Updates as quickly as possible.

If XP isn't necessary, once the hard drive is cleaned up from the unwanted visitors, put the drive back in it's original box, and try an "over-the-top" reinstall to get WinMe back on its feet. http://forum.pcmech.com/showthread.p...threadid=70846

The reinstall should only take about 40 minutes with a virus-free drive.
. . . Gary

[comp615]

but do you think that the virus might have already made it irrecoverable, because it had finished scanning the windows folder. And thats usually where the viruses are and it removed them.

[GaryRouth]

Once an up-to-date antivirus/antispy scan has given the drive a clean bill of health, the over-the-top will provide new copies of any files damaged by the virus/spyware. You'll be booting either from a WinMe CD, or a bootable floppy disk from bootdisk.com.

Note: the over-the-top assumes you have a WinMe installation disk or installation files available. With a successful over-the-top, programs and personal data aren't lost.

***If you have a Recovery Disk Set, you don't need to do an over-the-top. Most Recovery Disk sets will reformat and reinstall to factory original [you need to make backups of personal data before the Recovery procedure, and restore such data after]
. . . Gary

[comp615]

Yeah see thats our problem, we cant find the win ME disk. So i guess that leaves just wiping it and getting XP.

[GaryRouth]

You might still have a chance to reinstall, if you have the .cab files on your hard drive, often in C:\Windows\Options\Cabs...
If they are virus-free, you can "over-the-top" reinstall with those. (it's in the notes in that thread from earlier).

Both are pretty good operating systems. XP is nicer for newer hardware, WinMe can run well on less & older hardware.

Hope it all works out OK
. . . Gary

[Chrisk]

I had a problem like that and it was a virus, Norton had a fix called fixsirc or fixsir

[comp615]

You remember what the name of it was? The virus I mean.

[Chrisk]

Sorry about the late reply but I don't remember the name. I may have the fix if you need it.

[comp615]

Yes one of my friends computers is doing this, I checked for viruses using f-prot and found none, but maybe ti dosent check all. I was about to order a new OS, so if you could help w/ that asap that would be awesome, THX.

[Chrisk]

check this out- http://www.symantec.com/avcenter/ven...oval.tool.html

[comp615]

I looked at that virus it fixes, and wouldnt it seem like, that wouldn't cause it? But i'll give it a try, thanks for the help.

[GaryRouth]

comp615 - did you look to see if the .cab (Windows Installation) files were in the C:\Windows\Options\Cabs directory? If so, once virus-free, you still have the option of reinstalling from that directory (follow the "over-the-top" link in the Tips & Tricks forum posted earlier)...

[comp615]

I didn't check, but I would assume they are, I hope to go over today to check

[Doobie]

Originally posted by comp615 here's the problem. I'm working on fixing a friend's computer running windows me.When I attempt to start the computer an error message pops up and says that explorer.exe has failed to load and that I should reinstall windows. I used FPROT antivirus from DOS to scan the hard drive. I found a few things called secondth.c as well as a few others. I also found a few things that were identified as backdoors. However I left those. Eventually it got to the restore folder which was taking a long time so I stopped it there. it had finished scanning the windows folder so I figured it was OK but when I tried to restart it it gave me the same error message again. I'll be going back tomorrow to try to finish, we decided that if we had to reinstall it would use Windows XP. So what I'm wondering is,is there a way to fix this or do we have to go ahead and reinstall windows? THX Charlie

Was your friend by any chance trying to change the shell on windows Me? If you still have not formated the computer try this.

Maybe someone can check to confirm (sorry i dont have any win9x systems at hand) but I believe the system.ini file that is located int he windows dir has something like shell=explorer

Try this
[list=1][*]Make boot disk and restart computer with bootdisk in dirve[*]change path to windows path (cd.. windows)[*]type edit system.ini and look for a line that has shell= it should be something like the 2nd or third line[*]when you find shell = make sure it has explorer (if it doesnt it should be shell = exploer)[*]save changes and restart computer[/list=1]

I hope that helps out. Let me know and if somone can, if they are on a win9x system confirm that it is the system.ini file that has shell.

[comp615]

actually just for refrence i looked it up, make sure its Explorer.exe noe just explorer, but thats probably assumed. And yes thats the right spot.

I'll try that but I doubt it'll help since it seems to know it needs explorer.exe, but it just cant load it.