Explorer.exe Runtime Error

[wayliff]

I am getting a runtime error every time I open explorer. (Not internet explorer)

My windows log shows the information below but I was unable to find a solution.

I have reformatted my hard drive and reinstalled windows but the error came back.

I need help, it is driving me nuts.
I cant send attachments or view my pictures.



Details
Product: Windows Operating System
ID: 1002
Source: Winlogon
Version: 5.0
Component: Application Event Log
Symbolic Name: EVENT_SHELL_RESTARTED
Message: The shell stopped unexpectedly and %1 was restarted.

Explanation
The shell was stopped and then restarted. By default, the shell is explorer.exe; however, you might have a customized shell.


User Action
No user action is required.



Version: 5.2
Symbolic Name: EVENT_SHELL_RESTARTED
Message: The shell stopped unexpectedly and %1 was restarted.

Explanation
The shell was stopped and then restarted. By default, the shell is explorer.exe; however, you might have a customized shell.


User Action
No user action is required.



--------------------------------------------------------------------------------


Currently there are no Microsoft Knowledge Base articles available for this specific error or event message. For information about other support options you can use to find answers online, see http://support.microsoft.com/default.aspx.

 

[BadThad]

I had a similar problem on one of my kids computers and was on the verge of reinstalling windows when I finally found the cause.
On his computer, there was a pattern to the problem. If you tried opening a windows app such as My Computer, Explorer, IE, every other attempt would be OK, the next would result in desktop icons going away for a few seconds and no window would open up. I would see in event manager the "The shell stopped unexpectedly and Explorer.exe was restarted" message each time it happened.

I finally pinned down the date it started and searched the computer for all files created withing that 24 hours and found a directory c:\FTapp. I then proceeded to find on the web at http://vil.mcafee.com/dispVirus.asp?virus_k=99206& that this is a trojan, low risk advertising/user monitor. I don't know who installed it but I suspect maybe IMesh.

To get rid of it, you can try going to Add/Remove programs where there is an uninstall. If not, go into regedit and search for 'ftapp' and delete every instance where found. If it's found down a layer in a registery key, go back up to the top of that key and delete the key itself. You will now have to restart the computer and then delete the c:\FTapp directory.

Relief came immediately upon deleting the registry keys, even without restarting the computer.

Reference: http://forums.devshed.com/t23567/s.html

I got a lot of hits with google, I'm sure there's a solution somewhere.

 

[BadThad]

Oh, here's the google search:

http://www.google.com/search?hl=en&ie=UTF-8&q=The+shell+stopped+unexpectedly+and+%251+was+restarted&btnG=Google+Search

 

[wayliff]

BUMP...still looking for alternative suggestions.

How about a trojan?
How about Memory Issues?

 

[wayliff]

Dont have such folder in my system...so far I have not found any viruses.

Bump for more alternatives.