BleepingComputer.com: Explorer repeatedly restarting- Windows Vista

Jump to content

Forum Guidelines

Posted Image Read the following topic before creating a new topic in this forum. It contains instructions on the what we would like you to post, which will enable us to help you more quickly.

Preparation Guide For Use Before Using Malware Removal Tools and Requesting Help


Posted Image Unfortunately, with the amount of logs we receive per day, the average response time is 5 days. I want to assure you, though, that your topic will be looked at and responded to. So please be patient.


Posted Image DO NOT RUN ComboFix unless requested to.


Posted Image Only members of the Malware Response Team or Moderators are allowed to help people with logs. Anyone else should refrain from posting to another user's log.


Posted Image When posting a log please put the type of infection you have in the topic title. IE: Winfixer, Virtumonde, WinTools, WebSearch, Home Search Assistant, etc.


Posted Image Do not bump your topic. We try to resolve logs on a first come/first served basis. By bumping your log you will be pushed back in line due to the new date of your bump.
  • 2 Pages +
  • 1
  • 2
  • You cannot start a new topic
  • You cannot reply to this topic

Explorer repeatedly restarting- Windows Vista

#1 User is offline   kingsteve2002 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 30
  • Joined: 21-November 07

Posted 21 June 2011 - 10:20 AM

My Vista computer shows 'window explorer not responding', then searching for solutions then restarting. and it keeps on repeating, hardly letting me click anything. Is this a malware issue? Hope you can help, thanks.

#2 User is online   gringo_pr 

  • Bleepin Gringo
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Response Team
  • Posts: 85,465
  • Joined: 03-July 08
  • Gender:Male
  • Location:Puerto rico

Posted 21 June 2011 - 10:32 AM

Try this please. You will need a USB drive.

Download http://unetbootin.sourceforge.net/unetbootin-xpud-windows-latest.exe & http://noahdfear.net/downloads/bootable/xPUD/xpud-0.9.2.iso to the desktop of your clean computer
  • Insert your USB drive
  • Press Start > My Computer > right click your USB drive > choose Format > Quick format
  • Double click the unetbootin-xpud-windows-387.exe that you just downloaded
  • Press Run then OK
  • Select the DiskImage option then click the browse button located on the right side of the textbox field.
  • Browse to and select the xpud-0.9.2.iso file you downloaded
  • Verify the correct drive letter is selected for your USB device then click OK
  • It will install a little bootable OS on your USB device
  • Once the files have been written to the device you will be prompted to reboot ~ do not reboot and instead just Exit the UNetbootin interface
  • After it has completed do not choose to reboot the clean computer simply close the installer
  • Next download http://noahdfear.net/downloads/driver.sh to your USB
  • Remove the USB and insert it in the sick computer
  • Boot the Sick computer
  • Press F12 and choose to boot from the USB
  • Follow the prompts
  • A Welcome to xPUD screen will appear
  • Press File
  • Expand mnt
  • sda1,2...usually corresponds to your HDD
  • sdb1 is likely your USB
  • Click on the folder that represents your USB drive (sdb1 ?)
  • Confirm that you see driver.sh that you downloaded there
  • Press Tool at the top
  • Choose Open Terminal
  • Type bash driver.sh
  • Press Enter
  • After it has finished a report will be located on your USB drive named report.txt
  • Remove the USB drive and insert back in your working computer and navigate to report.txt

    Please note - all text entries are case sensitive
Copy and paste the report.txt for my review
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic


Please Only Copy And Paste Reports Into Topic - Do Not Attach

My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->Posted Image<-- Don't worry every little bit helps.

#3 User is offline   kingsteve2002 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 30
  • Joined: 21-November 07

Posted 21 June 2011 - 12:15 PM

Thanks for the reply.
I tried a couple of times, and the boot fails in middle, first it says " assuming drive cache: write through" and then something like no such file' and no such directory'.

#4 User is online   gringo_pr 

  • Bleepin Gringo
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Response Team
  • Posts: 85,465
  • Joined: 03-July 08
  • Gender:Male
  • Location:Puerto rico

Posted 21 June 2011 - 12:25 PM

Ok lets try from a CD

Try this please. You will need a USB drive.

Download GETxPUD.exe to the desktop of your clean computer
  • Run GETxPUD.exe
  • A new folder will appear on the desktop.
  • Open the GETxPUD folder and click on the get&burn.bat
  • The program will download xpud_0.9.2.iso, and upon finished will open BurnCDCC ready to burn the image.
  • Click on Start and follow the prompts to burn the image to a CD.
  • Next download driver.sh to your USB drive
  • Remove the USB & CD and insert it in the sick computer
  • Boot the Sick computer with the CD you just burned
  • The computer must be set to boot from the CD
  • Gently tap F12 and choose to boot from the CD
  • Follow the prompts
  • A Welcome to xPUD screen will appear
  • Press File
  • Expand mnt
  • sda1,2...usually corresponds to your HDD
  • sdb1 is likely your USB
  • Click on the folder that represents your USB drive (sdb1 ?)
  • Confirm that you see driver.sh that you downloaded there
  • Press Tool at the top
  • Choose Open Terminal
  • Type bash driver.sh
  • Press Enter
  • After it has finished a report will be located on your USB drive named report.txt
  • Remove the USB drive and insert it back in your working computer and navigate to report.txt

    Please note - all text entries are case sensitive
Copy and paste the report.txt for my review
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic


Please Only Copy And Paste Reports Into Topic - Do Not Attach

My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->Posted Image<-- Don't worry every little bit helps.

#5 User is offline   kingsteve2002 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 30
  • Joined: 21-November 07

Posted 21 June 2011 - 01:34 PM

Same result with the cd.
The Xpud screen comes up then yield to a dark screen with 'assuming drive cache' 'No such file or directory', sh: no job control in this shell.

#6 User is offline   kingsteve2002 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 30
  • Joined: 21-November 07

Posted 22 June 2011 - 03:25 PM

Hi,
The last time Windows Explorer crashed it showed this message, I'm not sure if it helps or not:

Additional details about what went wrong can help microsoft create a ssolution
files that help describe the problem
C:\Users\CS\AppData\Local\temp\WER64EA.tmp.version.txt
C:\Users\CS\AppData\Local\temp\WER7BC5.tmp.appcompat.txt
C:\Users\CS\AppData\Local\temp\WER7C23.tmp.mdmp

#7 User is online   gringo_pr 

  • Bleepin Gringo
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Response Team
  • Posts: 85,465
  • Joined: 03-July 08
  • Gender:Male
  • Location:Puerto rico

Posted 25 June 2011 - 03:25 PM

Hello

been researching about this and haven't come up with anything


do you have the install CD for vista - to see if we do a repair install or something like that



gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic


Please Only Copy And Paste Reports Into Topic - Do Not Attach

My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->Posted Image<-- Don't worry every little bit helps.

#8 User is offline   kingsteve2002 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 30
  • Joined: 21-November 07

Posted 26 June 2011 - 02:21 PM

Oh my. Here's what happened since.
I did an end run around the constantly restarting Explorer by creating a new user on the computer and Windows worked great when I logged in with the new user. A day later I turned on the computer, Windows wouldn't start at all and it went straight to Recovery panel.
When I tried startup repair or restore to an earlier time, it wouldn't recognize the system, and asked for the location of the drivers.
I don't have a vista disc right now.
I tried taking out the hard drive and putting it back in. Nothing changed. While it was out I turned on the computer with the Xpud cd inside and it booted just fine from the disc only while the hard drive was disconnected.
Are the drivers located on the hard drive so I can browse there and find it?
Any advice on the next move would be appreciated. Thanks

#9 User is offline   kingsteve2002 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 30
  • Joined: 21-November 07

Posted 27 June 2011 - 10:53 AM

Hi, I actually got some good news from my computer. I ran Ubuntu operating system, booted from a cd and got access to my computer and files. I haven't installed it yet on the computer because I'd still like to fix Windows.
Is there any way to get the report you requested while on Ubuntu?

#10 User is online   gringo_pr 

  • Bleepin Gringo
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Response Team
  • Posts: 85,465
  • Joined: 03-July 08
  • Gender:Male
  • Location:Puerto rico

Posted 27 June 2011 - 11:37 AM

I don't know much about Ubuntu so I will need your help here

we need to search the computer for explorer.exe to see if there is a replacement that we can use


gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic


Please Only Copy And Paste Reports Into Topic - Do Not Attach

My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->Posted Image<-- Don't worry every little bit helps.

#11 User is offline   kingsteve2002 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 30
  • Joined: 21-November 07

Posted 27 June 2011 - 12:13 PM

Yes, I see a few of them.

#12 User is online   gringo_pr 

  • Bleepin Gringo
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Response Team
  • Posts: 85,465
  • Joined: 03-July 08
  • Gender:Male
  • Location:Puerto rico

Posted 27 June 2011 - 12:30 PM

can you copy and paste the locations here for me


gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic


Please Only Copy And Paste Reports Into Topic - Do Not Attach

My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->Posted Image<-- Don't worry every little bit helps.

#13 User is offline   kingsteve2002 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 30
  • Joined: 21-November 07

Posted 27 June 2011 - 01:09 PM

/media/0C2E0CF96A7F073F/Windows/winsxs/x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16549_none_4fac29707cae347a
/media/0C2E0CF96A7F073F/Windows/winsxs/x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16386_none_4f7de5167cd15deb

#14 User is online   gringo_pr 

  • Bleepin Gringo
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Response Team
  • Posts: 85,465
  • Joined: 03-July 08
  • Gender:Male
  • Location:Puerto rico

Posted 27 June 2011 - 01:28 PM

hello

ok lets try this

go to the explorer.exe that is in this location - /media/0C2E0CF96A7F073F/Windows/winsxs/x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16549_none_4fac29707cae347a right click on it and select copy

now go to the folder windows at the root of the drive and find explorer.exe and right click on it and select rename and rename it to explorer.old

no right click on an empty space in the folder and select paste a new explorer.exe should now show up

restart the computer and see if things are any better


gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic


Please Only Copy And Paste Reports Into Topic - Do Not Attach

My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->Posted Image<-- Don't worry every little bit helps.

#15 User is offline   kingsteve2002 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 30
  • Joined: 21-November 07

Posted 27 June 2011 - 01:32 PM

Which is the root of the drive folder?

Share this topic:


  • 2 Pages +
  • 1
  • 2
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users