Explorer window on startup!!

[Lionel]

I have been clearing my wife's computer of Malware, and everything seemed OK until I installed SP3!

Since then, whenever she boots up, she gets a Window Explorer displaying the My Documents folder, which has to be manually closed. Nothing untoward in the startup list, and I am wondering where it's coming from.

Anybody here experienced this problem? If there is a tech type who can analyse a HiJackThis logfile, I am happy to provide one.

Any help would be appreciated.

Cheers,

Lionel

[dmdigital]

Something will be launching explorer against my documents in the startup sequence. This is in the registry. You can look at what fires up though using MSCONFIG, from the Run command.

[The ho har's]

Something will be launching explorer against my documents in the startup sequence. This is in the registry. You can look at what fires up though using MSCONFIG, from the Run command.


GGGEEE that a bit techo for us lay peoples:)


Mrs ho har:angel:

[dmdigital]

GGGEEE that a bit techo for us lay peoples:)
Nearly 20 years in IT before I got a real job. How tek-neck-ill do you want it to get:twisted:

[The ho har's]

Nearly 20 years in IT before I got a real job. How tek-neck-ill do you want it to get:twisted:

thats tek-neck-ill enough for me:p


Mrs ho har:angel:

ps- haven't chatted for a little while....been busy??:angel:

[Lionel]

Something will be launching explorer against my documents in the startup sequence. This is in the registry. You can look at what fires up though using MSCONFIG, from the Run command.

I cannot find any mention of Explorer in the Startup list in MSCONFIG. This was the 1st thing I tried. There is no apparent reference in HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Run either.

What is the exact reference I should look for? It might not be as obvious as I think it is.

Cheers,

Lionel

[dmdigital]

Look in the registry for something like
C:\windows\system32\userinit.exe,C:\windows\system 32\userinit.exe,
in the HKLM/SOFTWARE/Microsoft/Windows/CurrentVersion folders.

It could still be malware related though. Do a google search for "windows opens my documents on startup" there's a number of different reasons this can occur.

[Lionel]

Look in the registry for something like
C:\windows\system32\userinit.exe,C:\windows\system 32\userinit.exe,
in the HKLM/SOFTWARE/Microsoft/Windows/CurrentVersion folders.

It could still be malware related though. Do a google search for "windows opens my documents on startup" there's a number of different reasons this can occur.

I have found in:

HKLM/SOFTWARE/WINDOWS/WINDOWS NT/Current Version/Win logon/

Name: Userinit, value: REG_SZ C:\Windows\system32\userinit.exe, C:\Windows\system32\\userinit.exe

This is the only occurrence in the registry, and MY computer, which is unaffected by this problem, ALSO has this entry, but WITHOUT the C:\Windows\system32\\userinit.exe (with 2 backward slashes).

What do you reckon? Is this likely to be the problem, and is it safe to delete the 2nd (2 slash) one? Needless to say I will bachup the registry first.

Cheers,

Lionel

[dmdigital]

Yep, I'd delete the second part of this entry and see what happens

[Lionel]

Yep, I'd delete the second part of this entry and see what happens

Yes!! That has fixed it. Thanks heaps for your advice.

Cheers,

Lionel