1

I (accidently) launched Internet Explorer today and this triggered the following alert in Windows Defender (copy from the windows event log Microsoft-Windows-Windows Defender/Operational):

C:\Program Files\internet explorer\iexplore.exe was blocked by controlled folder access to change the path %desktopdirectory%\瘁毓翹.
    Detection Time: 2018-07-05T19:07:47.684Z
    Path: %desktopdirectory%\瘁毓翹
    Process Name: C:\Program Files\internet explorer\iexplore.exe
    Signature Version: 1.271.495.0
    Module Version: 1.1.15000.2
    Product Version: 4.18.1806.18062

While other people seem to have the same problem, I found no explanation what iexplore.exe is trying to do there. Any ideas? Should I be worried about malware?

And: I won't whitelist iexplore.exe because I don't use it and I find that path suspicious.

  • ver says: Microsoft Windows [Version 10.0.17134.112] – ventiseis Jul 5 '18 at 19:30
  • Did you enable Controlled Folder Access on your desktop directory on purpose? An English translation would be appreciated. The non-English characters should be removed (since they are not appearing correctly anyways). – Ramhound Jul 5 '18 at 19:32
  • I activated it some time ago and after I whitelisted several known applications which I and trust didn't find it problematic. I translated the log message from german to english. – ventiseis Jul 5 '18 at 19:35
  • "瘁毓翹" is from the error message or is it being introduced by something else? – Ramhound Jul 5 '18 at 19:54
  • 1
    Well 瘁毓翹 isn't german. It also has nothing to do with your locale. IE is trying to access a file or folder on your desktop. If you create a new user profile, does the behavior, exhibit itself? I have identified a thread, surrounding this exact same warning with IE, so the problem isn't unique to 1803. However, the Chinese characters were not identical. So is there perhaps a hidden folder on your desktop? – Ramhound Jul 5 '18 at 20:02

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Browse other questions tagged or ask your own question.