Vista Login Problems "Can't login"

[FoxHound]

Running Windows Vista Home Premium SP1 on HP Pavilion TX 1250ee laptop.
I have a problem logging into Windows Vista. I get the screen up which allow me to select my account and enter a password.Then I get a welcome message.
Trouple is it goes no further .
The Screen went black with only a white cursor showing.
Seconds later, an error showed up saying
failed to set data for 'Shell'
I've left it for few hours but nothing changed.

I did some troubleshooting like testing the Hard Disk using the Built in Self Test in BIOS and everything was pass.

I tried to login through safe mode and fortunatlly it's ok.
but I don't exactlly know what's the problem?

Before it did happen I was creating CD recovery for my computer using the Recovery Manager.
Also, there was some updates from Windows which I think what cause the problem.

I'm still troubleshooting and waiting for any respond from you guys.

 

[SCSIraidGURU]

Run error checking and see what errors come up.

 

[FoxHound]

You mean the one at the Control Panel
"Problem Reports and Solutions"
or is it something else.

 

[FoxHound]

I've just notice that I can possible run anything through "Windows Task Manager"
I mean by opening it, I can go by run and put anything to run.
I tried the Control Panel and the Internet Explorer and everything runs fine.
It can also connect to Internet.

It's seem the probelm becoming more simple but I had to find what cause the blank page and that error.

 

[johngalt]

It sounds like you Windows Shell (what is used to display your desktop) has been incorrectly set to something that either does not exist or else cannot work with Vista. Since opening Task Manager allows you to run programs, see if there is an explorer.exe running 0 if not, run it - if so, close it and try to run it again manually.

In the meantime let me go look up somethings regarding the shell. There might be a simple fix for this in the registry, or it might be a bit more complicated, but since the system is, inherently, running in the background, the problem seems superficial at best.

My only concern is that some sort of malware may have invaded your computer and is trying to do something to your shell like older malware used to do on XP - and if so, then you might also want to also try running various scan applications.

 

[FoxHound]

I did what're you said but what's the point
It didn't solved anything.
I run with the Task Manager the explorer.exe and it's opened the Computer

Anyway, I'll be waiting for your respond.

 

[johngalt]

did you first close any existing explorer.exe?

 

[FoxHound]

First I did restart the computer from the begining. Then I log in with my user. I check the Task Manager but I couldn't find any explorer.exe in Processes, So I run it manually by typing exactlly explorer.exe. Then it showed me the computer page.

 

[johngalt]

OK, then for some reason it is not loading the explorer.exe task that shows your desktop - this seems to confirm that you have something trying to change the shell entries in the registry. have you tried moving any of your shell folders (namely Desktop) to another location that may not exist anymore?

 

[FoxHound]

I can never do something like that but it might be one of my friend
Anyway, it doesn't matter right now.
How can I solve this problem?

 

[johngalt]

have you tried using the Vista startup repair sequence? It will scan and see if it can find any errors, and it is pretty thorough....

 

[sidney1st]

Hi FoxHound,
In the registry, what is your "shell" value in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

 

[FoxHound]

have you tried using the Vista startup repair sequence? It will scan and see if it can find any errors, and it is pretty thorough....

I just did the Startup Repair from F8 then Computer Repair.
After that, I restart the computer and log in my user.
and nothing change

 

[FoxHound]

Hi FoxHound,
In the registry, what is your "shell" value in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

I went through the whole directory using the regedit but at last I couldn't find Winlogon

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

BTW, I tried to creat a new user but it didn't help though.

 

[sidney1st]

I went through the whole directory using the regedit but at last I couldn't find Winlogon

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

Are you sure? No, you're kidding me
To be serious, have a look again and find Shell in Winlogon.

 

[FoxHound]

I went through the whole directory using the regedit but at last I couldn't find Winlogon

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

Are you sure? No, you're kidding me
To be serious, have a look again and find Shell in Winlogon.

Sorry about last post. It seems CurrentVersion has a lot directories

Anyway, I checked Shell Value and it was
C:\Windows\csrss.exe

 

[sidney1st]

Yep, that is your problem, it should be explorer.exe
Would you please run hijackthis ( HijackThis Logfileauswertung ) and post here the log.

 

[FoxHound]

Yep, that is your problem, it should be explorer.exe
Would you please run hijackthis ( HijackThis Logfileauswertung ) and post here the log.

Shouldn't I just change it and it'd solve the probelm.
and btw, How can I use this program?
I've never used.

 

[sidney1st]

If you change the value, i bet you 1 billion $ that it'll be back to Csrss at next reboot

This program (hijackthis) is very safe, install it in C:\program Files or in C:\
When you run it it will ask you if you want a log of its scan, you say YES and please attach the log file to your next post.
I am afraid but you are surely infected.

 

[FoxHound]

Ok here you go the file