Explorer.exe error when trying to open MY Computer on Windows 2000

I have Windows 2000 with service pack 4 on my PC and I use SBC Global
(dial-up) to access the Internet. Every since I launched and access the
Internet using both SBC Global shortcut and Internet Explorer shortcut at
same time (I was logged in both ways), I get an Explorer.exe error when I try
to open MY Computer, Start Icon and Recycle Bin from my workspace. It tells
me a program error has occured, error log created and I must reboot. Plus my
icons in workspace tray (bottom right) start disappearing. However, if I try
to open to open My Computer, etc. again, they open fine. I am using Internet
Explorer 6.0 SP1.

Is there a solution without trying to fix Internet Explorer using my Windows
2000 Professional disk? Last time I tried this, I was unable to launch
Windows and had to rebuild my Pc from scratch. I have tried to repair
Internet Explorer from Add/Remove Program but still get the error. I have
also ran virsus scan and get no errors. I even tried uninstalling Internet
Explorer so I can reinstall it and the system would not let me uninstall even
in Safe Mode. I am not seeing any log in the Event Viewer so I am not sure
where the log is being created.

From: "b4wego2000" <>

| I have Windows 2000 with service pack 4 on my PC and I use SBC Global
| (dial-up) to access the Internet. Every since I launched and access the
| Internet using both SBC Global shortcut and Internet Explorer shortcut at
| same time (I was logged in both ways), I get an Explorer.exe error when I try
| to open MY Computer, Start Icon and Recycle Bin from my workspace. It tells
| me a program error has occured, error log created and I must reboot. Plus my
| icons in workspace tray (bottom right) start disappearing. However, if I try
| to open to open My Computer, etc. again, they open fine. I am using Internet
| Explorer 6.0 SP1.
|
| Is there a solution without trying to fix Internet Explorer using my Windows
| 2000 Professional disk? Last time I tried this, I was unable to launch
| Windows and had to rebuild my Pc from scratch. I have tried to repair
| Internet Explorer from Add/Remove Program but still get the error. I have
| also ran virsus scan and get no errors. I even tried uninstalling Internet
| Explorer so I can reinstall it and the system would not let me uninstall even
| in Safe Mode. I am not seeing any log in the Event Viewer so I am not sure
| where the log is being created.
|


Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to allow it to download the needed AV vendor related files.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal Mode.
This way all the components can be downloaded from each AV vendor's web site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC.

You can choose to go to each menu item and just download the needed files or you can
download the files and perform a scan in Normal Mode. Once you have downloaded the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
during boot] and re-run the menu again and choose which scanner you want to run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
file. http://www.ik-cs.com/multi-av.htm


* * * Please report back your results * * *


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

I did not get any viruses detected using Trend. Cant seem to get the other
ones to work. I tried created a bootable disk as in the instructions but it
tells me that my diskette is not a bootable one. Do you think I have some
kind of virus on my PC since you recommend running these programs which
appears to look for virsus. Any other ideals?

"David H. Lipman" wrote:

> From: "b4wego2000" <>
>
> | I have Windows 2000 with service pack 4 on my PC and I use SBC Global
> | (dial-up) to access the Internet. Every since I launched and access the
> | Internet using both SBC Global shortcut and Internet Explorer shortcut at
> | same time (I was logged in both ways), I get an Explorer.exe error when I try
> | to open MY Computer, Start Icon and Recycle Bin from my workspace. It tells
> | me a program error has occured, error log created and I must reboot. Plus my
> | icons in workspace tray (bottom right) start disappearing. However, if I try
> | to open to open My Computer, etc. again, they open fine. I am using Internet
> | Explorer 6.0 SP1.
> |
> | Is there a solution without trying to fix Internet Explorer using my Windows
> | 2000 Professional disk? Last time I tried this, I was unable to launch
> | Windows and had to rebuild my Pc from scratch. I have tried to repair
> | Internet Explorer from Add/Remove Program but still get the error. I have
> | also ran virsus scan and get no errors. I even tried uninstalling Internet
> | Explorer so I can reinstall it and the system would not let me uninstall even
> | in Safe Mode. I am not seeing any log in the Event Viewer so I am not sure
> | where the log is being created.
> |
>
>
> Download MULTI_AV.EXE from the URL --
> http://www.ik-cs.com/programs/virtools/Multi_AV.exe
>
> To use this utility, perform the following...
> Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
> Choose; Unzip
> Choose; Close
>
> Execute; C:\AV-CLS\StartMenu.BAT
> { or Double-click on 'Start Menu' in C:\AV-CLS }
>
> NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
> FireWall to allow it to download the needed AV vendor related files.
>
> C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
> This will bring up the initial menu of choices and should be executed in Normal Mode.
> This way all the components can be downloaded from each AV vendor's web site.
> The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC.
>
> You can choose to go to each menu item and just download the needed files or you can
> download the files and perform a scan in Normal Mode. Once you have downloaded the files
> needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
> during boot] and re-run the menu again and choose which scanner you want to run in Safe
> Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.
>
> When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
> file. http://www.ik-cs.com/multi-av.htm
>
>
> * * * Please report back your results * * *
>
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>
>

From: "b4wego2000" <>

| I did not get any viruses detected using Trend. Cant seem to get the other
| ones to work. I tried created a bootable disk as in the instructions but it
| tells me that my diskette is not a bootable one. Do you think I have some
| kind of virus on my PC since you recommend running these programs which
| appears to look for virsus. Any other ideals?
|

Malware is a possibility. A bootable disk is NOT worthwhile unless you can download the
needed files for; Shophos, McAfee and/or Kaspersky as they can run under DOS whiles the
Trend Micro Sysclean utility is a win32 GUI utility.

McAfee has a library of ~175,000 infectors. To rule out the possibility of malware, it
would be good to at least be able to download the McAfee files.

Please try the McAfee module again.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

I ran the Mcafee software in Normal mode and it found and removed the
sdbot.worm and deleted somme potentially unwanted program but I am still
getting the explorer.exe error. I was unable to run the software in Safe
mode. From Dos prompt, I ran the startmenu.bat file and got the message that
update.ini not opened for read.

Thanks for your help.

"David H. Lipman" wrote:

> From: "b4wego2000" <>
>
> | I did not get any viruses detected using Trend. Cant seem to get the other
> | ones to work. I tried created a bootable disk as in the instructions but it
> | tells me that my diskette is not a bootable one. Do you think I have some
> | kind of virus on my PC since you recommend running these programs which
> | appears to look for virsus. Any other ideals?
> |
>
> Malware is a possibility. A bootable disk is NOT worthwhile unless you can download the
> needed files for; Shophos, McAfee and/or Kaspersky as they can run under DOS whiles the
> Trend Micro Sysclean utility is a win32 GUI utility.
>
> McAfee has a library of ~175,000 infectors. To rule out the possibility of malware, it
> would be good to at least be able to download the McAfee files.
>
> Please try the McAfee module again.
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>
>

From: "b4wego2000" <>

| I ran the Mcafee software in Normal mode and it found and removed the
| sdbot.worm and deleted somme potentially unwanted program but I am still
| getting the explorer.exe error. I was unable to run the software in Safe
| mode. From Dos prompt, I ran the startmenu.bat file and got the message that
| update.ini not opened for read.

The SDBot worm is nothing to laugh at. Its a serious Internet worm.

I'd like to see the McAfee HTML Log file created. Please Copy and pste its contents in your
reply.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

here is the Mcafee report:

Virus Scan Report File

--------------------------------------------------------------------------------
Virus Scan Information
--------------------------------------------------------------------------------

McAfee VirusScan for Win32 v4.40.0
Copyright (c) 1992-2004 Networks Associates Technology Inc. All rights
reserved.
(408) 988-3832 LICENSED COPY - Sep 23 2004

Scan engine v4.4.00 for Win32.
Virus data file v4690 created Feb 06 2006
Scanning for 175087 viruses, trojans and variants.


--------------------------------------------------------------------------------
Virus Scan Results
--------------------------------------------------------------------------------




02/07/2006 09:08:24


Options:
"C:\" /UNZIP /WINMEM /SUB /ANALYZE /PANALYZE /STREAMS /CLEAN /ALL /DEL /MIME
/PROGRAM /EXCLUDE C:\AV-CLS\EXCLIST.TXT /HTML
"C:\AV-CLS\MCAFEE\SCANREPORT.HTML"

Scanning C: []
Scanning C:\*.*
C:\Program Files\PgcEdit\bin\pskill.exe\0000c4a0.EXE ... Found potentially
unwanted program RemAdm-PSKill.
The file or process has been deleted.
The archive has been deleted.
C:\Program Files\PgcEdit\PgcEdit.exe\PSKILL.EXE\0000c4a0.EXE ... Found
potentially unwanted program RemAdm-PSKill.
C:\Program
Files\PgcEdit\pgcedit_winexe.zip\PGCEDIT.EXE\PSKIL L.EXE\0000c4a0.EXE ...
Found potentially unwanted program RemAdm-PSKill.
C:\WINNT\system32\i ... Found the W32/Sdbot.worm!ftp virus !!!
The file or process has been deleted.

Summary report on C:\*.*
File(s)
Total files: ........... 57280
Clean: ................. 57257
Possibly Infected: ..... 1
Cleaned: ............... 0
Deleted: ............... 2
Non-critical Error(s): 2


Time: 00:36.18



--------------------------------------------------------------------------------

Visit the McAfee Online Web Site
Need some help or advice? Send email to Technical Support.


"David H. Lipman" wrote:

> From: "b4wego2000" <>
>
> | I ran the Mcafee software in Normal mode and it found and removed the
> | sdbot.worm and deleted somme potentially unwanted program but I am still
> | getting the explorer.exe error. I was unable to run the software in Safe
> | mode. From Dos prompt, I ran the startmenu.bat file and got the message that
> | update.ini not opened for read.
>
> The SDBot worm is nothing to laugh at. Its a serious Internet worm.
>
> I'd like to see the McAfee HTML Log file created. Please Copy and pste its contents in your
> reply.
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>
>

From: "b4wego2000" <>

| here is the Mcafee report:
|
| Virus Scan Report File
| --------------------------------------------------------------------------------
| Virus Scan Information--------------------------------------------------------------------
|
| McAfee VirusScan for Win32 v4.40.0
| Copyright (c) 1992-2004 Networks Associates Technology Inc. All rights
| reserved.
| (408) 988-3832 LICENSED COPY - Sep 23 2004
|
| Scan engine v4.4.00 for Win32.
| Virus data file v4690 created Feb 06 2006
| Scanning for 175087 viruses, trojans and variants.
|
| --------------------------------------------------------------------------------
| Virus Scan Results------------------------------------------------------------------------
|
| 02/07/2006 09:08:24
|
| Options:
| "C:\" /UNZIP /WINMEM /SUB /ANALYZE /PANALYZE /STREAMS /CLEAN /ALL /DEL /MIME
| /PROGRAM /EXCLUDE C:\AV-CLS\EXCLIST.TXT /HTML
| "C:\AV-CLS\MCAFEE\SCANREPORT.HTML"
|
| Scanning C: []
| Scanning C:\*.*
| C:\Program Files\PgcEdit\bin\pskill.exe\0000c4a0.EXE ... Found potentially
| unwanted program RemAdm-PSKill.
| The file or process has been deleted.
| The archive has been deleted.
| C:\Program Files\PgcEdit\PgcEdit.exe\PSKILL.EXE\0000c4a0.EXE ... Found
| potentially unwanted program RemAdm-PSKill.
| C:\Program
| Files\PgcEdit\pgcedit_winexe.zip\PGCEDIT.EXE\PSKIL L.EXE\0000c4a0.EXE ...
| Found potentially unwanted program RemAdm-PSKill.
| C:\WINNT\system32\i ... Found the W32/Sdbot.worm!ftp virus !!!
| The file or process has been deleted.
|
| Summary report on C:\*.*
| File(s)
| Total files: ........... 57280
| Clean: ................. 57257
| Possibly Infected: ..... 1
| Cleaned: ............... 0
| Deleted: ............... 2
| Non-critical Error(s): 2
|
| Time: 00:36.18
|
| --------------------------------------------------------------------------------

I was hoping it might shed some light, however... It doesn't.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

Anyone else have any ideals?

"b4wego2000" wrote:

> I have Windows 2000 with service pack 4 on my PC and I use SBC Global
> (dial-up) to access the Internet. Every since I launched and access the
> Internet using both SBC Global shortcut and Internet Explorer shortcut at
> same time (I was logged in both ways), I get an Explorer.exe error when I try
> to open MY Computer, Start Icon and Recycle Bin from my workspace. It tells
> me a program error has occured, error log created and I must reboot. Plus my
> icons in workspace tray (bottom right) start disappearing. However, if I try
> to open to open My Computer, etc. again, they open fine. I am using Internet
> Explorer 6.0 SP1.
>
> Is there a solution without trying to fix Internet Explorer using my Windows
> 2000 Professional disk? Last time I tried this, I was unable to launch
> Windows and had to rebuild my Pc from scratch. I have tried to repair
> Internet Explorer from Add/Remove Program but still get the error. I have
> also ran virsus scan and get no errors. I even tried uninstalling Internet
> Explorer so I can reinstall it and the system would not let me uninstall even
> in Safe Mode. I am not seeing any log in the Event Viewer so I am not sure
> where the log is being created.
>
>
>

From: "b4wego2000" <>

| Anyone else have any ideals?
|

Realize that you posted this in the WRONG News Group in the first place.

This isn't a Win2K support News Group, it is all about the updating of the OS through the
Windows Update web site and other services to get Critical Updates and other software
updates.

The Win2K News Group is... microsoft.public.win2000.general

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm