CR2 Incident - root.exe present, but explorer.exe process not?

["Bartel, Matt" <Matt.Bartel () qg com>]

Has anyone experienced a CR2 instance where root.exe was present in the
directories it typically is in, but the explorer.exe process is not running?

Thank you.
-Matt

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com