File Explorer Keeps Popping Up on Its Own — Every Cause and Fix

File Explorer opening randomly on its own in Windows 10 or 11 is an abnormal behavior that usually indicates either malware activity, a misconfigured startup script, a corrupted Windows Explorer process, or an active Windows bug. Identifying which of these is causing the behavior determines the correct fix.

Part 1. Run a Malware and Adware Scan First

The most common cause of File Explorer randomly opening is malware — particularly adware that hijacks Explorer to display advertising content or redirect to sponsored folders.

Step 1 — Windows Defender full scan:

1. Open Windows Security (search in Start menu)
2. Go to Virus & threat protection
3. Click Scan options → select Full scan → Scan now
4. Wait for the scan to complete (30–60 minutes for a full scan)

Step 2 — Malwarebytes scan (complementary):

Malwarebytes catches adware and PUPs (Potentially Unwanted Programs) that Windows Defender sometimes misses.

1. Download and install the free version of Malwarebytes
2. Run a Threat Scan
3. Quarantine any detected threats
4. Restart Windows and test whether File Explorer still opens spontaneously

⚠️ Important: If Windows Defender or Malwarebytes detect and remove threats, change your important passwords immediately from a separate, clean device — including email, banking, and any accounts accessed on the infected PC. Malware that opens Explorer as a decoy may also be logging keystrokes or stealing credentials.

Part 2. Check Startup Programs and Scheduled Tasks

A startup script or scheduled task can trigger File Explorer to open at regular intervals. This is a common result of software installations that add unwanted tasks.

Check startup programs:

1. Press Ctrl + Shift + Esc to open Task Manager
2. Click the Startup apps tab (Windows 11) or Startup tab (Windows 10)
3. Look for any unfamiliar programs with descriptions like "Open folder," "File browser," or unusual publisher names
4. Right-click suspicious entries → Disable

Check Task Scheduler:

1. Press Win + S → search for Task Scheduler → open it
2. In the left panel, click Task Scheduler Library
3. Sort by Last Run Time to find tasks that run frequently
4. Look for tasks that run explorer.exe with folder path arguments
5. Right-click suspicious tasks → Disable or Delete

🗣️ r/techsupport user: "Found a scheduled task added by some freeware installer that ran 'explorer.exe C:\Users\Public\Downloads\sponsor_content' every 15 minutes. Deleted the task and the random File Explorer windows stopped immediately."

Part 3. Repair the Explorer.exe Process

A corrupted Windows Explorer process can cause erratic behavior including spontaneous windows opening. The System File Checker (SFC) can detect and repair corrupted system files.

Run SFC:

1. Open Command Prompt as Administrator (right-click Start → Terminal (Admin) or Command Prompt (Admin))
2. Run: sfc /scannow
3. Wait for the scan to complete — this can take 10–20 minutes
4. Review the results — SFC will report if it found and repaired corrupted files

Run DISM if SFC reports errors:

DISM /Online /Cleanup-Image /RestoreHealth

After DISM completes, run sfc /scannow again to confirm the repairs.

💡 Tip: If SFC reports "Windows Resource Protection found corrupt files but was unable to fix some of them," a DISM repair followed by another SFC run usually resolves this. In rare cases, a Windows repair install is needed.

Restart Windows Explorer:

A quick fix for an active misbehaving Explorer process:

1. Open Task Manager (Ctrl + Shift + Esc)
2. Find Windows Explorer under Windows processes
3. Right-click → Restart

Part 4. Check Context Menu Shell Extensions

Third-party software often adds shell extensions to the Windows context menu. Some of these can conflict with Explorer and cause unusual behavior.

Use ShellExView to diagnose:

1. Download ShellExView (free, from Nirsoft — safe and reputable)
2. Run it (no installation required)
3. Sort by Company — non-Microsoft extensions from unknown publishers are highlighted in pink
4. Disable suspicious extensions by selecting them → press F7

🗣️ r/Windows10 user: "ShellExView found three shell extensions from a PDF printer app I had uninstalled 2 years ago. Disabled them and the random Explorer popups stopped."

Part 5. Check for Windows-Specific Bugs

Occasionally, a Windows bug causes File Explorer to open spontaneously — particularly after updates. Known instances include:

• Windows 10 — OneDrive integration bug: OneDrive sync errors can trigger Explorer to open to specific folders
• Quick Access pinned locations auto-opening: Some users report pinned network locations causing Explorer to open when the network path becomes available
• Removable drive auto-open setting: Windows may be configured to automatically open File Explorer when a USB drive is connected

Check auto-open for removable drives:

1. Go to Settings → Bluetooth & devices → AutoPlay
2. Set Removable drive to Ask me every time or Take no action

Check OneDrive sync errors:

1. Click the OneDrive icon in the system tray
2. Check for any sync errors or notifications that might be triggering folder opens

💡 Tip: After eliminating malware and startup programs as causes, check the Windows Event Viewer for related entries: Win + S → Event Viewer → Windows Logs → Application → filter for Explorer.exe events around the times File Explorer opened unexpectedly.

Part 6. Recover Files Deleted by Malware With Ritridata

If malware that was causing File Explorer to open also deleted or encrypted files on your system, Ritridata can recover deleted files from your Windows drive.

Recovery steps:

1. After removing the malware, immediately stop normal computer use on the affected drive
2. Install Ritridata on an external USB drive — not the infected drive
3. Run a Deep Scan on the affected system drive
4. Preview recoverable files — documents, photos, and other data
5. Recover to an external drive

💡 Tip: Ransomware-encrypted files (showing unusual file extensions) cannot be recovered by Ritridata — encryption prevents recovery without the decryption key. However, shadow copy-based recovery may work for some files: right-click a folder → Properties → Previous Versions tab to check.

FAQ

Q: Why does File Explorer open to a specific folder every time? If File Explorer opens to the same specific folder each time, a scheduled task, a startup program, or a shell extension is passing that path to explorer.exe. Use Task Scheduler (check for tasks with that folder path) and ShellExView to identify the source.

Q: Can a keyboard shortcut cause File Explorer to keep opening? If the Win + E keyboard shortcut is somehow being triggered repeatedly, a stuck Windows key, a macro keyboard, or HID device firmware issue could be responsible. Test by disconnecting external keyboards temporarily.

Q: How do I stop File Explorer from opening when I plug in a USB drive? Go to Settings → Bluetooth & devices → AutoPlay → set Removable drive to "Take no action" or "Ask me every time." This prevents Windows from automatically opening File Explorer when USB drives are connected.

Q: Is it safe to disable all non-Microsoft shell extensions with ShellExView? Disabling non-Microsoft shell extensions with ShellExView is generally safe — it does not delete the extensions, only disables them. You can re-enable them individually if you find a specific feature stops working. It is one of the safer diagnostic steps for Explorer issues.

Q: How do I tell if File Explorer is being opened by a virus? Use Task Manager to watch for explorer.exe being started by an unusual parent process. Open Task Manager → Details tab → find explorer.exe → right-click → Analyze wait chain or Go to parent process. If the parent process is something unfamiliar (not userinit.exe or explorer.exe itself), malware is likely involved.

Q: Could a Windows update cause File Explorer to open randomly? Yes — some Windows cumulative updates have contained bugs that caused Explorer to open randomly or crash repeatedly. If this started immediately after an update, check Windows Update history and consider rolling back the specific update: Settings → Windows Update → Update history → Uninstall updates.

References

• Microsoft Support — Windows Explorer crashing or not responding
• Microsoft Docs — SFC /scannow command
• Malwarebytes — Free download
• NirSoft ShellExView
• Ritridata — Data Recovery Software