Link to home
Start Free TrialLog in
Avatar of john8217
john8217

asked on

IE gets pop-up

Somebody gave me this laptop to look at. It has Windows 7. They said it can't connect wirelessly. My first thought was, can it still connect through a cable. So when I took i home I plugged a NIC cable to it. It can get wired Internet. But every time I open IE, I get a pop-up saying:

"The C:\Windows\ System32\ config\ systemprofile\ AppData\ Lo...\ FCSB000063445folder does not exist. The file may have been moved or deleted."

Then it asks me if I want to create it (yes or no). Regardless of which option I choose, I have to choose that option twice to make that pop-up disappear.
     Why do I get that pop-up?
     I don't know what version of IE this has because when I click "Tools," there is no "About Internet Explorer" option for me to click on. Isn't that strange?
Avatar of John
John
Flag of Canada image

Download, set up (save) and run Process Explorer from Microsoft (Systinternals). Look in the left side tree under Explorer and see if there are any strange (alphanumeric) processes. If so kill the processes, do not restart and then run Malwarebytes to get rid of the malware.

If no such processes, restart in Safe Mode and run Malwarebytes.

Once done, remove add-ins in Internet Explorer.

Then restart and see if you have made progress.
Avatar of David Johnson, CD
have you tried running "iexplore.exe -extoff" ? and finding the bad addon a scan with malware bytes would also be  in order
john8217--
"I don't know what version of IE this has because when I click "Tools," there is no "About Internet Explorer" option for me to click on. Isn't that strange? "
No, you should click "Help".

Or click Start|right click "Computer"|click "Properties".

Are you running "Shop to Win"?
If so it is a Trojan and you should run both antimalware (as suggested) and antivirus scans.
Avatar of john8217
john8217

ASKER

I hope I'm not changing the original topic of this post, but, there's a new development. I ran Windows Defender Offline. It found some things and I followed the recommended action. But then, as a result, I couldn't log into any of the 3 accounts anymore (they're all admin accounts). It kept saying "The User Profile Service service failed the logon. User profile cannot be loaded."
     So I then booted to Safe Mode and logged into one of the accounts. I did some research. It said to go to a specific place in the registry  to find a .bak file. Problem is, it wasn't there. So I did a system restore and that restored everything (and also put me back where i started before I ran the scan).
     I created a brand new admin account. It's my intention to delete the other 3 accounts. Will this help to delete most of the malware?
     But here is the new problem: for all 3 accounts (and even the new 4th account!!!) when I logon, I get a message from the taskbar saying "Your user profile was not loaded correctly. You have been logged on with the default profile for the system. Please see the event log for details or contact your administrator" What should I do about this?
ASKER CERTIFIED SOLUTION
Avatar of David Johnson, CD
David Johnson, CD
Flag of Canada image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial