Member Avatar for Smalls

This is a recent problem that i have run into. When I start my computer the 'explorer.exe' gets turned off or shut down or something, it took me a while to figure out how to turn it back on. But I have to manually restart it every time I start my pc. This is very annoying if you can imagine.

This same problem happens at random every once in a while but it used to start back up after a few second.

please if anyone knows how to fix this problem
please tell me
thanx in adv.

  • 1 Contributor
  • 2 Replies
  • 128 Views
  • 6 Hours Discussion Span
  • Latest Post Latest Post by Smalls

Dani AI

Generated

— the symptoms you describe (Explorer exiting, repeated “antivirus” pop-ups that demand installation, factory resets that don’t help, and inability to remove files because of permission errors) strongly point to scareware / rogue-AV with persistence. The immediate priorities are to stop further damage, collect evidence, and run clean-tool scans from a trusted environment.

First steps (do these in order):

  • Disconnect the PC from the Internet and do not click the pop-ups or run any suggested installers.
  • Boot to Safe Mode (F8) and see if the pop-ups continue. If they stop, it’s almost certainly a startup component.
  • Use a process-stopper such as RKill to halt malicious processes, then run a full scan with Malwarebytes and Microsoft Safety Scanner from Safe Mode (links below).
  • Use Autoruns (Sysinternals) to inspect and disable suspicious Run/RunOnce entries, scheduled tasks, services and Winlogon entries (check the Shell and Userinit values).
  • If scans don’t remove it, create a bootable rescue ISO on another machine and run an offline scan (rescue media from major AV vendors).

Commands to regain ownership and remove stubborn files (run from an elevated command prompt):

takeown /f "C:\path\to\file_or_folder" /r /d y
icacls  "C:\path\to\file_or_folder" /grant Administrators:F /t
del     "C:\path\to\file_or_folder"

To enable the built‑in Administrator (if needed):

net user Administrator /active:yes
net user Administrator NewPassword

Always export/backup the registry before editing and only run these commands from an elevated/Admin prompt.

If a factory restore repeatedly returns the same infection, the recovery image or another external component may be compromised. In that case back up personal data (scan it on a different, clean machine), wipe the drive, and reinstall Windows from clean media. For help producing logs to post to a removal forum, capture Autoruns and FRST logs so experienced volunteers can advise.

Helpful references: Autoruns (Sysinternals), Malwarebytes, Microsoft Safety Scanner, RKill.

Member Avatar for Smalls

about every 5-10 minutes there is a pop-up window with 1 of 3 different things.

1 wanting to install an anti-virus scanner

another saying I've got some kind of Trojan at 'C:\Windows\Wml.exe' although I've looked and this file doesn't exist

and 1 more saying I've got a '' and that i need a product called '' to remove them

since these have started showing up i have restored my pc to 'factory default', which restores the pc to what was on it when i got it wiping it clean or so i thought, 3 times already trying to stop these.

Norton says there is nothing wrong

I can't figure out how to stop this

Member Avatar for Smalls

I am the owner and sole user of my pc, i can do almost anything but i can't do somethings like delete files that were put on it by me but it says that i need administrative rights to perform the action

how can i fix this?

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.