I found this answer on the internet. Sounds like your issue.
a few days ago i had a similar problem whereby 4 to 6 instances of explorer.exe would load every boot. I noticed HKCU and HKLM entries in startup from msconfig which i know is not right so i did some sleuthing. Ended up finding a directory "c:\windows\explorer" which contained 1 file "svchost.exe". Zone Alarm recognized it as virus but wouldnt remove it. Just kept respawning instantly. Had to boot into safe mode, remove entries from registry, then delete said folder. Entries found in "HKCU\Software\Microsoft\Windows\CurrentVersion\Ru n" and also HKLM\Software\Wow6432Node\Microsoft\Windows\Curren tVersion\Run". Also removed all prefetch entries.
|