Thread: Explorer window on startup!!

Something will be launching explorer against my documents in the startup sequence. This is in the registry. You can look at what fires up though using MSCONFIG, from the Run command.

Originally Posted by dm_td5

Something will be launching explorer against my documents in the startup sequence. This is in the registry. You can look at what fires up though using MSCONFIG, from the Run command.

GGGEEE that a bit techo for us lay peoples


Mrs ho har

Originally Posted by The ho har's

GGGEEE that a bit techo for us lay peoples

Nearly 20 years in IT before I got a real job. How tek-neck-ill do you want it to get

Originally Posted by dm_td5

Nearly 20 years in IT before I got a real job. How tek-neck-ill do you want it to get

thats tek-neck-ill enough for me


Mrs ho har

ps- haven't chatted for a little while....been busy??

Originally Posted by dm_td5

Something will be launching explorer against my documents in the startup sequence. This is in the registry. You can look at what fires up though using MSCONFIG, from the Run command.

I cannot find any mention of Explorer in the Startup list in MSCONFIG. This was the 1st thing I tried. There is no apparent reference in HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Run either.

What is the exact reference I should look for? It might not be as obvious as I think it is.

Cheers,

Lionel

Look in the registry for something like
C:\windows\system32\userinit.exe,C:\windows\system 32\userinit.exe,
in the HKLM/SOFTWARE/Microsoft/Windows/CurrentVersion folders.

It could still be malware related though. Do a google search for "windows opens my documents on startup" there's a number of different reasons this can occur.

Originally Posted by dm_td5

Look in the registry for something like
C:\windows\system32\userinit.exe,C:\windows\system 32\userinit.exe,
in the HKLM/SOFTWARE/Microsoft/Windows/CurrentVersion folders.

It could still be malware related though. Do a google search for "windows opens my documents on startup" there's a number of different reasons this can occur.

I have found in:

HKLM/SOFTWARE/WINDOWS/WINDOWS NT/Current Version/Win logon/

Name: Userinit, value: REG_SZ C:\Windows\system32\userinit.exe, C:\Windows\system32\\userinit.exe

This is the only occurrence in the registry, and MY computer, which is unaffected by this problem, ALSO has this entry, but WITHOUT the C:\Windows\system32\\userinit.exe (with 2 backward slashes).

What do you reckon? Is this likely to be the problem, and is it safe to delete the 2nd (2 slash) one? Needless to say I will bachup the registry first.

Cheers,

Lionel

Yep, I'd delete the second part of this entry and see what happens