Explorer - WINLOGON SHELL

Winlogon Shell (Explorer.exe) is the main shell interface for file handling in Windows.

Explorer will often be found in your list of services but will also be listed in your startup program list when loaded as the WinLogon Shell. When loaded by the WinLogon Shell it should not be modified. If modified it can be Reset using WinPatrol Startup Programs list.

Our favorite way to launch Explorer when needed is pressing the Windows Key + E. We'd recommend against trying to remove this program from your active tasks or your Startup Program list.

Having problems? Here's a fix for the most common problem associated with this file:
Invalid Page Fault in Module Explorer.exe

Safe

Microsoft.com


Less commonly, explorer.exe may be evidence of a possibile MyDoom B Infection
On January 29th, 2004 on the heals of the MyDoom virus there appeared MyDoom.B.
This virus uses a known file name of Explorer.exe. Typically, you will not find Explorer.exe in your startup list unless you put it there. If you're looking at your WinPatrol Task List and you are checking on C:\Windows\Explorer.exe that appears to be from Microsoft you're fine and should read the information offered above.

If it does not show Microsoft company and copyright information then you should remove it immediately, reboot and update any other virus protection software you use. Also look for CTFMON.DLL in your Task list and system folder and use WinPatrol to kill this file. While ctfmon.exe is a valid file name, ctfmon.dll is used by the MyDoom.B virus as a backdoor connection.

There is also a 'fake' explorer that installs with advertising spyware. More information about that program can be found here: Fake Explorer with DLDER.exe