winxp - boot never completes possibly altnet

norton is gone (per instructions)
i'm going to ask their son later today if he knows about pc-magic (i'll see him at the local supermarket where he works), etc
i'm also getting the win disks - sfc is asking for them and i don't know if anything other than their copy will cause more probs
just to make sure i don't miss anything, i'm going to run sfc in normal mode,
winpfind in safe mode and probably another hjt - and uninstall the magic stuff.
just read your last post - i think they are set up to receive and install win patches. do we know which one caused the others' probs?
 
You're doing a great job. It wouldn't matter which patch. The latest is the one we would look at.

These patches often replace major system files. The patch itself as Written by MS might be ok. But if they had a bad download and install, then a major system file might be corrupt. That can happen.


sfc /scannow is good. But I am not sure it would be able to fix that situation.


If would be good to have that uninstall list from hijackthis. It should include the patch information.


Either way if a majoir system file is corrupt or missing, that would do it.


You're right. You need the correct CD. All files are not the same.
 
here's the hjt uninstall list:

Ad-Aware SE Personal
Adobe Acrobat 5.0
Adobe Download Manager 1.2 (Remove Only)
Adobe Reader 6.0.1
AOL Coach Version 1.0(Build:20040229.1 en)
AOL Coach Version 2.0(Build:20041026.5 en)
AOL Connectivity Services
AOL Deskbar
AOL Instant Messenger
AOL Toolbar 2.0
AOL Uninstaller
AOL You've Got Pictures Screensaver
AVG Free Edition
BCM V.92 56K Modem
CCHelp
CCScore
Dell Digital Jukebox Driver
Dell ResourceCD
Dell Solution Center
Dell Support
Driver Detective
DS21Patch
DVD X Copy GOLD v2.5.0 (remove only)
DVDSentry
ESSAdpt
ESSANUP
ESSBrwr
ESSCAM
ESSCDBK
ESSgui
ESSPCD
ESSstore
ESSTUTOR
ESSvpot
Event Planner
Google Desktop Search
Google Toolbar for Internet Explorer
Greetings Workshop
Hallmark Card Studio 3 Deluxe
HighMAT Extension to Microsoft Windows XP CD Writing Wizard
HijackThis 1.99.1
HP Photo & Imaging 3.1
HP PSC & OfficeJet 3.0
hp psc 2400 series
HP Software Update
Imaginext(TM) Pirate Raider
Intel(R) PRO Network Adapters and Drivers
Intel(R) PROSet
Jasc Paint Shop Photo Album
Jasc Paint Shop Pro 8 Dell Edition
Java 2 Runtime Environment, SE v1.4.2
Kodak EasyShare software
KSU
Macromedia Shockwave Player
Memories Disc Creator 2.0
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB886903)
Microsoft AntiSpyware
Microsoft Data Access Components KB870669
Microsoft Encarta Encyclopedia Standard 2003
Microsoft Money 2003
Microsoft Money 2003 System Pack
Microsoft Office 2000 Standard
Microsoft Picture It! Photo 7.0
Microsoft Streets and Trips 2002
Microsoft Word 2002
Microsoft Works 2003 Setup Launcher
Microsoft Works 7.0
Microsoft Works Suite Add-in for Microsoft Word
Microsoft Zoo Tycoon
Mike's Monstrous Adventure
Modem Helper
MUSICMATCH® Jukebox
My Way Speedbar (Outlook and Outlook Express)
Notifier
NVIDIA Display Driver
NVIDIA Windows 2000/XP Display Drivers
OLYMPUS CAMEDIA Master 4.1
OTtBP
Panicware Pop-Up Stopper Companion
PC Treasures-Disney/Pixar Active Play A Bug's Life
PCDLNCH
PowerDVD
QuickTime
RealOne Player
Retrospect 6.5
RuneScape Toolbar
Samsung Multimedia Studio 1.0
Samsung Music Studio
Scholastic's I SPY School Days
Security Update for Step By Step Interactive Training (KB898458)
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player 9 (KB911565)
Security Update for Windows XP (KB883939)
Security Update for Windows XP (KB890046)
Security Update for Windows XP (KB893756)
Security Update for Windows XP (KB896358)
Security Update for Windows XP (KB896422)
Security Update for Windows XP (KB896423)
Security Update for Windows XP (KB896424)
Security Update for Windows XP (KB896428)
Security Update for Windows XP (KB896688)
Security Update for Windows XP (KB899587)
Security Update for Windows XP (KB899588)
Security Update for Windows XP (KB899591)
Security Update for Windows XP (KB900725)
Security Update for Windows XP (KB901017)
Security Update for Windows XP (KB901214)
Security Update for Windows XP (KB902400)
Security Update for Windows XP (KB903235)
Security Update for Windows XP (KB904706)
Security Update for Windows XP (KB905414)
Security Update for Windows XP (KB905749)
Security Update for Windows XP (KB905915)
Security Update for Windows XP (KB908519)
Security Update for Windows XP (KB911927)
Security Update for Windows XP (KB912919)
Security Update for Windows XP (KB913446)
Shockwave
Sonic DLA
Sonic MyDVD
Sonic RecordNow!
Sonic Update Manager
Sound Blaster Live!
Spybot - Search & Destroy 1.3
Toy Story 2
Update for Windows XP (KB894391)
Update for Windows XP (KB896727)
Update for Windows XP (KB898461)
Update for Windows XP (KB910437)
Viewpoint Manager (Remove Only)
Viewpoint Media Player
Viewpoint Toolbar (Remove Only)
Windows Installer 3.1 (KB893803)
Windows Installer 3.1 (KB893803)
Windows XP Hotfix - KB834707
Windows XP Hotfix - KB867282
Windows XP Hotfix - KB873333
Windows XP Hotfix - KB873339
Windows XP Hotfix - KB885250
Windows XP Hotfix - KB885835
Windows XP Hotfix - KB885836
Windows XP Hotfix - KB885884
Windows XP Hotfix - KB886185
Windows XP Hotfix - KB887472
Windows XP Hotfix - KB887742
Windows XP Hotfix - KB888113
Windows XP Hotfix - KB888302
Windows XP Hotfix - KB890047
Windows XP Hotfix - KB890175
Windows XP Hotfix - KB890859
Windows XP Hotfix - KB890923
Windows XP Hotfix - KB891781
Windows XP Hotfix - KB893066
Windows XP Hotfix - KB893086
Windows XP Service Pack 2
Yahoo! Toolbar
Zoo Vet
 
Let's get the dates those fixes were installed on their system.


Copy the contents of the code box to notepad.

Name the file fixes.bat

Save as Type: All files

Double click on fixes.bat to run it. It will open a text file named u.txt

Please post the contents of u.txt

Code: 
cd %windir%
dir /A:D /O:D  "$NtUninstall*" >p.txt 
Start Notepad p.txt
 
Last edited:
i wish i could somehow connect the "broken pc" to this one and run it as some kind of virtual machine; i'm getting tired of running my flash drive back an d forth

is this what you are looking for?

Volume in drive C has no label.
Volume Serial Number is 5012-4708

Directory of C:\WINDOWS

12/17/2003 06:30 PM <DIR> $NtUninstallKB810217$
01/13/2004 01:45 PM <DIR> $NtUninstallKB817778$
01/13/2004 01:44 PM <DIR> $NtUninstallKB820291$
01/13/2004 01:43 PM <DIR> $NtUninstallKB821253$
12/17/2003 06:29 PM <DIR> $NtUninstallKB821557$
01/13/2004 01:42 PM <DIR> $NtUninstallKB822603$
12/17/2003 06:29 PM <DIR> $NtUninstallKB823182$
12/17/2003 06:30 PM <DIR> $NtUninstallKB823559$
12/17/2003 06:29 PM <DIR> $NtUninstallKB824105$
12/17/2003 06:29 PM <DIR> $NtUninstallKB824141$
12/17/2003 06:29 PM <DIR> $NtUninstallKB824146$
12/17/2003 06:29 PM <DIR> $NtUninstallKB825119$
02/15/2004 02:55 PM <DIR> $NtUninstallKB828028$
12/17/2003 06:29 PM <DIR> $NtUninstallKB828035$
08/17/2004 07:44 PM <DIR> $NtUninstallKB828741$
10/20/2004 02:47 PM <DIR> $NtUninstallKB834707$
08/17/2004 07:59 PM <DIR> $NtUninstallKB835732$
08/17/2004 07:25 PM <DIR> $NtUninstallKB837001$
08/17/2004 06:20 PM <DIR> $NtUninstallKB839643-DirectX9$
08/17/2004 06:24 PM <DIR> $NtUninstallKB839645$
08/17/2004 06:16 PM <DIR> $NtUninstallKB840315$
08/17/2004 06:21 PM <DIR> $NtUninstallKB840374$
08/17/2004 06:20 PM <DIR> $NtUninstallKB841873$
08/17/2004 06:17 PM <DIR> $NtUninstallKB842773$
02/15/2005 03:01 AM <DIR> $NtUninstallKB867282$
02/15/2005 03:01 AM <DIR> $NtUninstallKB873333$
12/16/2004 03:00 AM <DIR> $NtUninstallKB873339$
06/16/2005 02:01 AM <DIR> $NtUninstallKB883939$
02/15/2005 03:02 AM <DIR> $NtUninstallKB885250$
12/16/2004 03:00 AM <DIR> $NtUninstallKB885835$
12/16/2004 03:00 AM <DIR> $NtUninstallKB885836$
10/20/2004 02:46 PM <DIR> $NtUninstallKB885884$
12/16/2004 03:00 AM <DIR> $NtUninstallKB886185$
02/15/2005 03:02 AM <DIR> $NtUninstallKB887472$
02/24/2005 03:00 AM <DIR> $NtUninstallKB887742$
02/15/2005 03:02 AM <DIR> $NtUninstallKB888113$
02/15/2005 03:01 AM <DIR> $NtUninstallKB888302$
06/16/2005 02:00 AM <DIR> $NtUninstallKB890046$
02/15/2005 03:01 AM <DIR> $NtUninstallKB890047$
01/12/2005 08:19 AM <DIR> $NtUninstallKB890175$
04/16/2005 02:01 AM <DIR> $NtUninstallKB890859$
04/16/2005 02:01 AM <DIR> $NtUninstallKB890923$
02/15/2005 03:02 AM <DIR> $NtUninstallKB891781$
04/16/2005 02:02 AM <DIR> $NtUninstallKB893066$
04/16/2005 02:01 AM <DIR> $NtUninstallKB893086$
08/10/2005 02:02 AM <DIR> $NtUninstallKB893756$
08/10/2005 02:00 AM <DIR> $NtUninstallKB894391$
06/16/2005 02:01 AM <DIR> $NtUninstallKB896358$
06/16/2005 02:01 AM <DIR> $NtUninstallKB896422$
08/10/2005 02:01 AM <DIR> $NtUninstallKB896423$
11/09/2005 09:31 AM <DIR> $NtUninstallKB896424$
06/16/2005 02:00 AM <DIR> $NtUninstallKB896428$
10/13/2005 02:01 AM <DIR> $NtUninstallKB896688$
08/10/2005 02:01 AM <DIR> $NtUninstallKB896727$
06/16/2005 02:01 AM <DIR> $NtUninstallKB898458$
07/01/2005 02:00 AM <DIR> $NtUninstallKB898461$
08/10/2005 02:02 AM <DIR> $NtUninstallKB899587$
08/10/2005 02:01 AM <DIR> $NtUninstallKB899588$
08/10/2005 02:02 AM <DIR> $NtUninstallKB899591$
10/13/2005 02:01 AM <DIR> $NtUninstallKB900725$
10/13/2005 02:01 AM <DIR> $NtUninstallKB901017$
07/14/2005 02:01 AM <DIR> $NtUninstallKB901214$
10/13/2005 02:01 AM <DIR> $NtUninstallKB902400$
07/14/2005 02:00 AM <DIR> $NtUninstallKB903235$
10/13/2005 02:00 AM <DIR> $NtUninstallKB904706$
10/13/2005 02:01 AM <DIR> $NtUninstallKB905414$
10/13/2005 02:00 AM <DIR> $NtUninstallKB905749$
12/18/2005 03:01 AM <DIR> $NtUninstallKB905915$
01/12/2006 03:01 AM <DIR> $NtUninstallKB908519$
12/18/2005 03:01 AM <DIR> $NtUninstallKB910437$
02/18/2006 03:03 AM <DIR> $NtUninstallKB911564$
02/18/2006 03:02 AM <DIR> $NtUninstallKB911565$
02/18/2006 03:03 AM <DIR> $NtUninstallKB911927$
01/07/2006 03:01 AM <DIR> $NtUninstallKB912919$
02/18/2006 03:02 AM <DIR> $NtUninstallKB913446$
01/13/2004 01:48 PM <DIR> $NtUninstallQ322011$
01/13/2004 01:50 PM <DIR> $NtUninstallQ327979$
12/17/2003 06:30 PM <DIR> $NtUninstallQ328310$
12/17/2003 06:30 PM <DIR> $NtUninstallQ329048$
12/17/2003 06:30 PM <DIR> $NtUninstallQ329115$
12/17/2003 06:30 PM <DIR> $NtUninstallQ329170$
12/17/2003 06:30 PM <DIR> $NtUninstallQ329390$
12/17/2003 06:30 PM <DIR> $NtUninstallQ329441$
12/17/2003 06:30 PM <DIR> $NtUninstallQ329834$
12/17/2003 06:30 PM <DIR> $NtUninstallQ810565$
12/17/2003 06:30 PM <DIR> $NtUninstallQ810577$
12/17/2003 06:30 PM <DIR> $NtUninstallQ810833$
12/17/2003 06:30 PM <DIR> $NtUninstallQ811493$
12/17/2003 06:30 PM <DIR> $NtUninstallQ814033$
01/13/2004 01:46 PM <DIR> $NtUninstallQ814995$
12/17/2003 06:30 PM <DIR> $NtUninstallQ815021$
12/17/2003 06:30 PM <DIR> $NtUninstallQ817287$
12/17/2003 06:30 PM <DIR> $NtUninstallQ817606$
12/17/2003 06:30 PM <DIR> $NtUninstallQ828026$
0 File(s) 0 bytes
94 Dir(s) 57,398,046,720 bytes free
 
That sure is. How long has this been going on? They installed several updates on Feb 18th. LKet;s see what the files were.

Copy the contents of the code box to notepad.
Name the file look.bat
Save as Type: All files
Double click on look.bat to run it.

This will open a file named F.txt

Please post the contents of F.txt

Code: 
Dir /a /s %windir%\$NtUninstallKB911564$ >F.txt
 Dir /a /s %windir%\$NtUninstallKB911565$ >>F.txt
 Dir /a /s %windir%\ $NtUninstallKB911927$ >>F.txt
 Dir /a /s %windir%\$NtUninstallKB913446$ >>F.txt
Start Notepad F.txt
 
I added a space and so need to ask you to try again. Shortly I am going to sign off. I am tired and making stupid typos. Apologies.


Create a new batch and see if this is shorter. It should be.
Code: 
 Dir /a /s %windir%\$NtUninstallKB911564$ >F.txt
 Dir /a /s %windir%\$NtUninstallKB911565$ >>F.txt
 Dir /a /s %windir%\$NtUninstallKB911927$ >>F.txt
 Dir /a /s %windir%\$NtUninstallKB913446$ >>F.txt
Start Notepad F.txt

Please post the contents of f.txt
 
Volume in drive C has no label.
Volume Serial Number is 5012-4708

Directory of C:\WINDOWS\$NtUninstallKB911564$

02/18/2006 03:03 AM <DIR> .
02/18/2006 03:03 AM <DIR> ..
08/04/2004 02:56 AM 364,544 npdsplay.dll
02/18/2006 03:03 AM <DIR> spuninst
1 File(s) 364,544 bytes

Directory of C:\WINDOWS\$NtUninstallKB911564$\spuninst

02/18/2006 03:03 AM <DIR> .
02/18/2006 03:03 AM <DIR> ..
06/28/2005 09:23 AM 213,216 spuninst.exe
02/18/2006 03:03 AM 7,995 spuninst.inf
02/18/2006 03:03 AM 231 spuninst.txt
06/28/2005 09:23 AM 371,424 updspapi.dll
4 File(s) 592,866 bytes

Total Files Listed:
5 File(s) 957,410 bytes
5 Dir(s) 57,361,969,152 bytes free
Volume in drive C has no label.
Volume Serial Number is 5012-4708

Directory of C:\WINDOWS\$NtUninstallKB911565$

02/18/2006 03:02 AM <DIR> .
02/18/2006 03:02 AM <DIR> ..
02/18/2006 03:02 AM <DIR> spuninst
08/04/2004 02:56 AM 4,874,240 wmp.dll
1 File(s) 4,874,240 bytes

Directory of C:\WINDOWS\$NtUninstallKB911565$\spuninst

02/18/2006 03:02 AM <DIR> .
02/18/2006 03:02 AM <DIR> ..
06/28/2005 09:23 AM 213,216 spuninst.exe
02/18/2006 03:03 AM 7,817 spuninst.inf
02/18/2006 03:02 AM 203 spuninst.txt
06/28/2005 09:23 AM 371,424 updspapi.dll
4 File(s) 592,660 bytes

Total Files Listed:
5 File(s) 5,466,900 bytes
5 Dir(s) 57,361,969,152 bytes free
Volume in drive C has no label.
Volume Serial Number is 5012-4708

Directory of C:\WINDOWS\$NtUninstallKB911927$

02/18/2006 03:03 AM <DIR> .
02/18/2006 03:03 AM <DIR> ..
02/18/2006 03:03 AM <DIR> spuninst
08/04/2004 02:56 AM 67,584 webclnt.dll
1 File(s) 67,584 bytes

Directory of C:\WINDOWS\$NtUninstallKB911927$\spuninst

02/18/2006 03:03 AM <DIR> .
02/18/2006 03:03 AM <DIR> ..
10/12/2005 06:12 PM 213,216 spuninst.exe
02/18/2006 03:03 AM 8,070 spuninst.inf
02/18/2006 03:03 AM 267 spuninst.txt
10/12/2005 06:12 PM 371,424 updspapi.dll
4 File(s) 592,977 bytes

Total Files Listed:
5 File(s) 660,561 bytes
5 Dir(s) 57,361,969,152 bytes free
Volume in drive C has no label.
Volume Serial Number is 5012-4708

Directory of C:\WINDOWS\$NtUninstallKB913446$

02/18/2006 03:02 AM <DIR> .
02/18/2006 03:02 AM <DIR> ..
02/18/2006 03:02 AM <DIR> spuninst
05/25/2005 02:04 PM 359,808 tcpip.sys
1 File(s) 359,808 bytes

Directory of C:\WINDOWS\$NtUninstallKB913446$\spuninst

02/18/2006 03:02 AM <DIR> .
02/18/2006 03:02 AM <DIR> ..
10/12/2005 06:12 PM 213,216 spuninst.exe
02/18/2006 03:02 AM 7,971 spuninst.inf
02/18/2006 03:02 AM 269 spuninst.txt
10/12/2005 06:12 PM 371,424 updspapi.dll
4 File(s) 592,880 bytes

Total Files Listed:
5 File(s) 952,688 bytes
5 Dir(s) 57,361,969,152 bytes free
 
I've never used HJT to uninstall - do I go to Misc Tools and highlight the item? will dlete this entry unistall the item (my guess) or just remove the entry from the list (probably not)
 
I don't think those updates are the cause. So we can leave them in place.


Did you ask about how this all came about? When did the problem occur and what lead up to it?


We have had segver thunder storms here all day and may have more. I'll have to leave if they startup again. If I disappear, that's what happened.
 
Were you able to perform the sfc /scannow and the restart?

There are several other things we may look at as well. A colleague has requested some information too. I'll post that in a bit, after I hear back on these issues.
 
ran sfc - no errors
ran Dell tests "cannot boot os" - all test reported as passed, although IDE Disk confidence check didn't get a checkmark - i'm rerunning that test now
 
We have some choices here. One is to see if Folder Magic is a problem. Before you disable that you should ask the owner. We don't want to lose any information. I am not sure if they have encrypted folders using it depending on which version they installed.

Another is to try a batch I wrote to replace and then register some important files. Then restart.

The third would be to uninstall Service Pack 2. Restart and see if Explorer is back. You would have to reinstall SP2 again and then perform all Updates.

And a friend did ask me for some information. I should ask you to do this first for informational purposes:


Please download Registry Search 2.0 by Bobbi Flekman

http://www.xs4all.nl/~fstaal01/regsearch-us.html

1. Create a new folder and download the Regsearch.zip file into it.

2. extract the zip file to the same folder

3. Double click the Regsearch.exe file > regsearch opens

4. In the top box enter the following bold line

explorer.exe

5. Leave all the boxes ticked and click the OK button

6. as the program says "this may take some time, so please be patient"

7. eventually notepad will open with some text in it, please copy & paste that text here into your next reply.


After we get those registry search results we can go to the next step.

I'll email you the batch for later use if you want to try that next.
 
Last edited:
well it ran a lot faster than i expected so here it is

REGEDIT4

; Registry Search 2.0 by Bobbi Flekman © 2005
; Version: 2.0.0.1

; Results at 3/13/2006 10:37:08 PM for strings:
; 'explorer.exe'
; Strings excluded from search:
; (None)
; Search in:
; Registry Keys Registry Values Registry Data
; HKEY_LOCAL_MACHINE HKEY_USERS


[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\explorer.exe]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\explorer.exe]
; Contents of value:
; %SystemRoot%\Explorer.exe,13
"TaskbarGroupIcon"=hex(2):25,53,79,73,74,65,6d,52,6f,6f,74,25,5c,45,78,70,6c,\
6f,72,65,72,2e,65,78,65,2c,31,33,00

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\WINWORD.EXE\TaskbarExceptionsIcons\WordMail\IconPath]
@="explorer.exe,16"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Briefcase\shell\open\command]
@="explorer.exe %1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0CD7A5C0-9F37-11CE-AE65-08002B2E1262}\shell\explore\command]
; Contents of value:
; %SystemRoot%\Explorer.exe /e,/idlist,%I,%L
@=hex(2):25,53,79,73,74,65,6d,52,6f,6f,74,25,5c,45,78,70,6c,6f,72,65,72,2e,65,\
78,65,20,2f,65,2c,2f,69,64,6c,69,73,74,2c,25,49,2c,25,4c,00

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0CD7A5C0-9F37-11CE-AE65-08002B2E1262}\shell\find\command]
; Contents of value:
; %SystemRoot%\Explorer.exe
@=hex(2):25,53,79,73,74,65,6d,52,6f,6f,74,25,5c,45,78,70,6c,6f,72,65,72,2e,65,\
78,65,00

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0CD7A5C0-9F37-11CE-AE65-08002B2E1262}\shell\open\command]
; Contents of value:
; %SystemRoot%\Explorer.exe /idlist,%I,%L
@=hex(2):25,53,79,73,74,65,6d,52,6f,6f,74,25,5c,45,78,70,6c,6f,72,65,72,2e,65,\
78,65,20,2f,69,64,6c,69,73,74,2c,25,49,2c,25,4c,00

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{208D2C60-3AEA-1069-A2D7-08002B30309D}\shell\find\command]
; Contents of value:
; %SystemRoot%\Explorer.exe
@=hex(2):25,53,79,73,74,65,6d,52,6f,6f,74,25,5c,45,78,70,6c,6f,72,65,72,2e,65,\
78,65,00

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\DefaultIcon]
; Contents of value:
; %SystemRoot%\Explorer.exe,0
@=hex(2):25,53,79,73,74,65,6d,52,6f,6f,74,25,5c,45,78,70,6c,6f,72,65,72,2e,65,\
78,65,2c,30,00

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\shell\find\command]
; Contents of value:
; %SystemRoot%\Explorer.exe
@=hex(2):25,53,79,73,74,65,6d,52,6f,6f,74,25,5c,45,78,70,6c,6f,72,65,72,2e,65,\
78,65,00

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2559a1f0-21d7-11d4-bdaf-00c04f60b9f0}]
"LocalizedString"="@explorer.exe,-7020"
"InfoTip"="@explorer.exe,-7000"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2559a1f1-21d7-11d4-bdaf-00c04f60b9f0}]
"LocalizedString"="@explorer.exe,-7021"
"InfoTip"="@explorer.exe,-7001"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2559a1f2-21d7-11d4-bdaf-00c04f60b9f0}]
"LocalizedString"="@explorer.exe,-7022"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}]
"LocalizedString"="@explorer.exe,-7023"
"InfoTip"="@explorer.exe,-7003"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0}]
"LocalizedString"="@explorer.exe,-7024"
"InfoTip"="@explorer.exe,-7004"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0}\DefaultIcon]
; Contents of value:
; %SystemRoot%\explorer.exe,-253
@=hex(2):25,53,79,73,74,65,6d,52,6f,6f,74,25,5c,65,78,70,6c,6f,72,65,72,2e,65,\
78,65,2c,2d,32,35,33,00

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}]
"LocalizedString"="@explorer.exe,-7025"
"InfoTip"="@explorer.exe,-7005"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}\DefaultIcon]
; Contents of value:
; %SystemRoot%\explorer.exe,-254
@=hex(2):25,53,79,73,74,65,6d,52,6f,6f,74,25,5c,65,78,70,6c,6f,72,65,72,2e,65,\
78,65,2c,2d,32,35,34,00

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{450D8FBA-AD25-11D0-98A8-0800361B1103}\shell\find\command]
; Contents of value:
; %SystemRoot%\Explorer.exe
@=hex(2):25,53,79,73,74,65,6d,52,6f,6f,74,25,5c,45,78,70,6c,6f,72,65,72,2e,65,\
78,65,00

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{48e7caab-b918-4e58-a94d-505519c795dc}\shell\open\command]
; Contents of value:
; %SystemRoot%\Explorer.exe /idlist,%I,%L
@=hex(2):25,53,79,73,74,65,6d,52,6f,6f,74,25,5c,45,78,70,6c,6f,72,65,72,2e,65,\
78,65,20,2f,69,64,6c,69,73,74,2c,25,49,2c,25,4c,00

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7be9d83c-a729-4d97-b5a7-1b7313c39e0a}\shell\open\command]
; Contents of value:
; %SystemRoot%\Explorer.exe /idlist,%I,%L
@=hex(2):25,53,79,73,74,65,6d,52,6f,6f,74,25,5c,45,78,70,6c,6f,72,65,72,2e,65,\
78,65,20,2f,69,64,6c,69,73,74,2c,25,49,2c,25,4c,00

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9E56BE61-C50F-11CF-9A2C-00A0C90A90CE}\DefaultIcon]
@="C:\\WINDOWS\\explorer.exe,-103"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E211B736-43FD-11D1-9EFB-0000F8757FCD}\AllDevices\shell\explore\command]
@="Explorer.exe /e,/idlist,%I,/L"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E211B736-43FD-11D1-9EFB-0000F8757FCD}\AllDevices\shell\open\command]
@="Explorer.Exe /idlist,%I,/L"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E211B736-43FD-11D1-9EFB-0000F8757FCD}\Camera\shell\explore\command]
@="Explorer.exe /e,/idlist,%I,/L"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E211B736-43FD-11D1-9EFB-0000F8757FCD}\Camera\shell\open\command]
@="Explorer.Exe /idlist,%I,/L"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E211B736-43FD-11D1-9EFB-0000F8757FCD}\CameraContainerItems\shell\explore\command]
@="Explorer.exe /e,/idlist,%I,/L"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E211B736-43FD-11D1-9EFB-0000F8757FCD}\CameraContainerItems\shell\open\command]
@="Explorer.Exe /idlist,%I,/L"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E211B736-43FD-11D1-9EFB-0000F8757FCD}\Scanner\shell\explore\command]
@="Explorer.exe /e,/idlist,%I,/L"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E211B736-43FD-11D1-9EFB-0000F8757FCD}\Scanner\shell\open\command]
@="Explorer.Exe /idlist,%I,/L"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E773F1AF-3A65-4866-857D-846FC9C4598A}\shell\explore\command]
; Contents of value:
; %SystemRoot%\Explorer.exe /e,/idlist,%I,%L
@=hex(2):25,53,79,73,74,65,6d,52,6f,6f,74,25,5c,45,78,70,6c,6f,72,65,72,2e,65,\
78,65,20,2f,65,2c,2f,69,64,6c,69,73,74,2c,25,49,2c,25,4c,00

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E773F1AF-3A65-4866-857D-846FC9C4598A}\shell\open\command]
; Contents of value:
; %SystemRoot%\Explorer.exe /idlist,%I,%L
@=hex(2):25,53,79,73,74,65,6d,52,6f,6f,74,25,5c,45,78,70,6c,6f,72,65,72,2e,65,\
78,65,20,2f,69,64,6c,69,73,74,2c,25,49,2c,25,4c,00

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CompressedFolder\Shell\find\command]
; Contents of value:
; C:\WINDOWS\Explorer.exe
@=hex(2):43,3a,5c,57,49,4e,44,4f,57,53,5c,45,78,70,6c,6f,72,65,72,2e,65,78,65,\
00

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shell\find\command]
; Contents of value:
; %SystemRoot%\Explorer.exe
@=hex(2):25,53,79,73,74,65,6d,52,6f,6f,74,25,5c,45,78,70,6c,6f,72,65,72,2e,65,\
78,65,00

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Drive\shell\find\command]
; Contents of value:
; %SystemRoot%\Explorer.exe
@=hex(2):25,53,79,73,74,65,6d,52,6f,6f,74,25,5c,45,78,70,6c,6f,72,65,72,2e,65,\
78,65,00

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\fndfile\shell\open\command]
; Contents of value:
; %SystemRoot%\Explorer.exe
@=hex(2):25,53,79,73,74,65,6d,52,6f,6f,74,25,5c,45,78,70,6c,6f,72,65,72,2e,65,\
78,65,00

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shell\explore\command]
; Contents of value:
; %SystemRoot%\Explorer.exe /e,/idlist,%I,%L
@=hex(2):25,53,79,73,74,65,6d,52,6f,6f,74,25,5c,45,78,70,6c,6f,72,65,72,2e,65,\
78,65,20,2f,65,2c,2f,69,64,6c,69,73,74,2c,25,49,2c,25,4c,00

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shell\open\command]
; Contents of value:
; %SystemRoot%\Explorer.exe /idlist,%I,%L
@=hex(2):25,53,79,73,74,65,6d,52,6f,6f,74,25,5c,45,78,70,6c,6f,72,65,72,2e,65,\
78,65,20,2f,69,64,6c,69,73,74,2c,25,49,2c,25,4c,00

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Publishing Folder\shell\explore\command]
@="explorer.exe /e,/idlist,%I,%L"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Publishing Folder\shell\open\command]
@="explorer.exe /idlist,%I,%L"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SHCmdFile\shell\open\command]
@="explorer.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Shell\shell\explore\command]
; Contents of value:
; %SystemRoot%\Explorer.exe /e,/idlist,%I,%L
@=hex(2):25,53,79,73,74,65,6d,52,6f,6f,74,25,5c,45,78,70,6c,6f,72,65,72,2e,65,\
78,65,20,2f,65,2c,2f,69,64,6c,69,73,74,2c,25,49,2c,25,4c,00

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Shell\shell\open\command]
; Contents of value:
; %SystemRoot%\Explorer.exe /idlist,%I,%L
@=hex(2):25,53,79,73,74,65,6d,52,6f,6f,74,25,5c,45,78,70,6c,6f,72,65,72,2e,65,\
78,65,20,2f,69,64,6c,69,73,74,2c,25,49,2c,25,4c,00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\International]
"explorer.exe"="6.0.2600.0-6.0.9999.9999"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS]
"explorer.exe"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]
"explorer.exe"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]
"explorer.exe"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]
"explorer.exe"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]
"explorer.exe"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]
"explorer.exe"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]
"explorer.exe"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]
"explorer.exe"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]
"explorer.exe"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]
"explorer.exe"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]
"explorer.exe"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileAssociation]
"KillList"="%1;explorer.exe;dvdplay.exe;mplay32.exe;msohtmed.exe;quikview.exe;rundll.exe;rundll32.exe;taskman.exe;bck32api.dll;"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartMenu\StartPanel\MyComp]
"Bitmap"="%SystemRoot%\\explorer.exe,100"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0]
"Icon"="explorer.exe#0100"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Shell"="Explorer.exe"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\MUILanguages\RCV2\explorer.exe]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Nls\MUILanguages\RCV2\explorer.exe]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Control\Nls\MUILanguages\RCV2\explorer.exe]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\explorer.exe]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0]
"Icon"="explorer.exe#0100"

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0]
"Icon"="explorer.exe#0100"

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0]
"Icon"="explorer.exe#0100"

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0]
"Icon"="explorer.exe#0100"

[HKEY_USERS\S-1-5-21-3757089453-2358952087-4291990509-1012\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU]
"b"="C:\\WINDOWS\\explorer.exe\\1"

[HKEY_USERS\S-1-5-21-3757089453-2358952087-4291990509-1012\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0]
"Icon"="explorer.exe#0100"

[HKEY_USERS\S-1-5-21-3757089453-2358952087-4291990509-1012\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0]
"Icon"="explorer.exe#0100"

[HKEY_USERS\S-1-5-21-3757089453-2358952087-4291990509-1012\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"@explorer.exe,-7025"="E-mail"
"@explorer.exe,-7024"="Internet"
"@explorer.exe,-7023"="&Run..."
"@explorer.exe,-7020"="&Search"
"@explorer.exe,-7021"="&Help and Support"
"@explorer.exe,-7004"="Opens your Internet browser."
"C:\\WINDOWS\\explorer.exe"="Windows Explorer"
"@explorer.exe,-7005"="Opens your e-mail program so you can send or read a message."
"@explorer.exe,-7000"="Opens a window where you can pick search options and work with search results."

[HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0]
"Icon"="explorer.exe#0100"

[HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0]
"Icon"="explorer.exe#0100"

; End Of The Log...
 
Do you want to run the batch I sent you (Replace.bat )and restart? See if you get explorer back? That would be the next and easiest step.


After you try that and restart, find me.txt and post the contents please. me.txt is the log the batch creates and should be found in the same folder where replace.bat is located.


I am not counting on it, but we should try this next.
 
how was the storm? all we got was a 40 degree temp drop and wind and a $500 gutter estimate

hey I ran the replace script, but I hosed it up and ended up running it twice
1st output

Working on Explorer.exe
dllcache\Explorer.exe here
Working on browseui.dll
dllcache\browseui.dll here
Working on Comctl32.dll
dllcache\Comctl32.dll here
Working on Comdlg32.dll
dllcache\Comdlg32.dll here
Working on Mlang.dll
dllcache\Mlang.dll here
Working on Ole32.dll
dllcache\Ole32.dll here
Working on Oleaut32.dll
dllcache\Oleaut32.dll here
Working on Shdocvw.dll
dllcache\Shdocvw.dll here
Working on Shell32.dll
dllcache\Shell32.dll here
Working on Shlwapi.dll
dllcache\Shlwapi.dll here
Working on Urlmon.dll
dllcache\Urlmon.dll here
Working on Wininet.dll
dllcache\Wininet.dll here
Working on Setupapi.dll
dllcache\Setupapi.dll here

*********************************
2nd output

Working on Explorer.exe
dllcache\Explorer.exe here
A duplicate file name exists, or the file
cannot be found.
Working on browseui.dll
dllcache\browseui.dll here
A duplicate file name exists, or the file
cannot be found.
Working on Comctl32.dll
dllcache\Comctl32.dll here
A duplicate file name exists, or the file
cannot be found.
Working on Comdlg32.dll
dllcache\Comdlg32.dll here
A duplicate file name exists, or the file
cannot be found.
Working on Mlang.dll
dllcache\Mlang.dll here
A duplicate file name exists, or the file
cannot be found.
Working on Ole32.dll
dllcache\Ole32.dll here
A duplicate file name exists, or the file
cannot be found.
Working on Oleaut32.dll
dllcache\Oleaut32.dll here
A duplicate file name exists, or the file
cannot be found.
Working on Shdocvw.dll
dllcache\Shdocvw.dll here
A duplicate file name exists, or the file
cannot be found.
Working on Shell32.dll
dllcache\Shell32.dll here
A duplicate file name exists, or the file
cannot be found.
Working on Shlwapi.dll
dllcache\Shlwapi.dll here
A duplicate file name exists, or the file
cannot be found.
Working on Urlmon.dll
dllcache\Urlmon.dll here
A duplicate file name exists, or the file
cannot be found.
Working on Wininet.dll
dllcache\Wininet.dll here
A duplicate file name exists, or the file
cannot be found.
Working on Setupapi.dll
dllcache\Setupapi.dll here
A duplicate file name exists, or the file
cannot be found.
 
We had very high wind and the temperature dropped like a rock. Just a dusting of snow though.

The log shows that the first time it ran. The second shows that it already had run.


Can I assume that after a restart you still have no explorer.exe running?

If so, the next step is your choice.

I would like to rule out Magic Folders. Did you ask the owner if it was ok to disable it? If that's ok then let's give that a shot.

If not, then I would say let's uninstall Service Pack 2 and see if the older version of Windows will run Explorer.
 
You must log in or register to reply here.
Back
Top