Is there a setting to d/l in IE??

June 10, 2017 at 12:37:36
Specs: Windows 7
Every time I try downloading something, either from mail or articles, my Toshiba will start d/ling and it will then say "couldn't be d/l'd. I'm using IE.

See More: Is there a setting to d/l in IE??

Report •

#1
June 10, 2017 at 12:43:37
Let us have an example of something that won't download. Are you Saving the download as a file rather then using Run? If not, Save the download as a file which is not only the best way but it will tell us whether it is the downloading or the running which is playing up.

Always pop back and let us know the outcome - thanks


Report •

#2
June 10, 2017 at 13:18:20
I am saving the d/l. I've actually tried it both ways. It will show the program d/ling, then when it finishes it will say "this file couldn't be d/l'd. You go to the d/l folder and click on "retry" and you get the same thing. Doesn't matter if it's a picture I receive in e-mail, a joke someone sends me or something else from another web site. Seems like I had this problem once before and did something in IE that corrected it, but I can't remember what it was. If there is some setting in IE that prevents this, perhaps you know what it is?? Thanks in advance for your time in this matter.....

Report •

#3
June 10, 2017 at 15:58:52
The only thing I can suggest is IE Reset:
Go to Tools > Internet Options > Advanced > Reset button.

You will lose your IE add-ons but they come back with usage or can be added if you remember what they were. Your favorites will not be affected but you might need to set up your home page again as it will probably reset it to default.

Always pop back and let us know the outcome - thanks


Report •

Related Solutions

#4
June 10, 2017 at 22:52:18
You might see if you can upgrade your IE or try another browser and see if the same thing happens.

Report •

#5
June 11, 2017 at 08:13:57
My sis in law gave me a Win 7 OEM Disk last nite. I may try installing that and see if it clears up all the problems. Hopefully I can do this without screwing everything up. Do you know if I have to d/l all my files and programs to another disk or will it ask me if I want to save them??

Report •

#6
June 11, 2017 at 09:34:37
Sounds like taking a sledge hammer to crack a nut. Did you try #3? If that doesn't help try another browser, such as Firefox, to prove whether it is a browser issue. It is best to try to diagnose the problem before resorting to reloads.

Another possibility, if you know when this started happening, is to do System Restore (a Windows feature) which will keep all your own stuff. You chose a restore date just before the problem came along.

Always pop back and let us know the outcome - thanks

message edited by Derek


Report •

#7
June 11, 2017 at 10:23:05
LOL,,,If I can't d/l a simple picture from e-mail, I certainly wasn't able to d/l Firefox or Chrome or any other search engine. This is about to drive me nuts. That is why I'm considering re-doing my whole OS. That is the only solution I can think of. I've also done the SR and that didn't work either. I don't know what would be left to do other than the OS...If you can think of anything else,,,let me know!!

Thanks again!!


Report •

#8
June 11, 2017 at 11:35:07
Were you able to download files or open them in email and then it just stopped working? What are you using for an email client? Web-based or an installed program such as Outlook? Normally, one doesn't "download" files in email. They usually come in as attachments. So, are you saying you can't open any attachments?

As for the downloading in IE, as Derek asked, have you tried using Firefox to download?

We're here to help, but you have to help us help you by providing a little more information.

Doing the best I can here... And remember, there's always more than one path to success. :)

message edited by Jennifer SUMN


Report •

#9
June 11, 2017 at 12:10:54
Did you try #3. It is just a few clicks in IE.

You said System Restore didn't work. In what way - do you mean it worked but the fault remains?

You can always download firefox (as a file) on another computer then transfer it across to yours using a flash drive. It then just takes a double click of the file to install it. This could easily be a browser issue.

Always pop back and let us know the outcome - thanks


Report •

#10
June 11, 2017 at 13:53:13
I use Yahoo for my homepage and I use it for mail, but that is thru ATT and I use sbcglobal.net. If someone sends me an attachment, no, I can't open it if it has to be d/l'd. NO d/l's will work. Doesn't matter what they are. It will sometimes go thru the motions, say so many seconds left and then when it gets to zero, says the file could not be d/l'd. I did a SR and it worked fine,,said it was restored to the point I chose, but it did nothing to fix the d/l problem. It has to be something in IE. I don't know if I would remove IE and then re d/l it if that would work or not. I do have another cpu that I could d/l Firefox to disk on and I could try to install it on this one. Oh,,,I can't open a pdf. file either . forgot about that. I was looking up some legal information and of course, it's in pdf. format. Won't d/l and open that either. I'll try d/ling Firefox to disk. You say to d/l it in "file" form. How do I do that?

Report •

#11
June 11, 2017 at 14:20:41
Third time of asking - did you try the IE Reset given in my #3?

We can come back to your other queries after that.

Always pop back and let us know the outcome - thanks


Report •

#12
June 11, 2017 at 14:30:08
No,,,I didn't do the reset. Here is something new. I have 2 log ins. One under my name, which I use most of the time and one as Admin. I logged off the Name and logged in to the Admin...I can d/l whatever on this one..Same cpu, same IE, same homepage, Yahoo. I d/l'd Firefox with no problem so something under the other log in is preventing the d/l's from working. Any ideas??

Report •

#13
June 11, 2017 at 15:25:06
What's the background to this downloading trouble? Was it working normally (using Name account) and then you suddenly ran into this problem, or was it after you did something or other?

[Just for info CPU is the processor chip - you mean "computer"]

Always pop back and let us know the outcome - thanks


Report •

#14
June 11, 2017 at 16:06:54
Firstly see #13 above.

Also run these two freebies:
AdwCleaner:
https://toolslib.net/downloads/view...
(blue "Download Now" button on right).
Download and "Save" the file somewhere. Go to the saved file then double click it to run the program. Use the "Scan" button, followed by the "Clean" button.

MalwareBytes:
https://www.malwarebytes.org/
(use the "Free Download" button rather than the "Buy Now" button).
After the install go to "Settings > Protection". Under Scan Options move the "Scan for rootkits" slider over to On and Run the Threat Scan. Quarantine anything it finds.

If either report something please copy/paste the associated logs on here. If you lose the ADW log you can find it as a text file in the ADWCleaner folder directly off the system drive root (usually C).

The above is just a quick check to see if malware is causing your problems.

Always pop back and let us know the outcome - thanks

message edited by Derek


Report •

#15
June 11, 2017 at 17:48:41
Here ya go:::::
# AdwCleaner v6.047 - Logfile created 11/06/2017 at 20:40:54
# Updated on 19/05/2017 by Malwarebytes
# Database : 2017-06-10.1 [Server]
# Operating System : Windows 7 Ultimate Service Pack 1 (X86)
# Username : Administrator - PAT-PC
# Running from : C:\Users\Administrator\Downloads\adwcleaner_6.047.exe
# Mode: Clean
# Support : https://www.malwarebytes.com/support

***** [ Services ] *****

***** [ Folders ] *****

[-] Folder deleted: C:\ProgramData\Avg_Update_0615av
[-] Folder deleted: C:\ProgramData\bb7210ac-ad39-453c-b2ee-d38b02bb6360
[-] Folder deleted: C:\Program Files\Search Voyage
[-] Folder deleted: C:\Users\Pat\AppData\Local\WebBar
[-] Folder deleted: C:\Users\Pat\AppData\LocalLow\ShopAtHome
[-] Folder deleted: C:\Users\Pat\AppData\Roaming\ShopAtHome
[-] Folder deleted: C:\ProgramData\AVG Security Toolbar
[#] Folder deleted on reboot: C:\ProgramData\Application Data\AVG Security Toolbar
[-] Folder deleted: C:\Program Files\avg web tuneup
[-] Folder deleted: C:\Windows\system32\config\systemprofile\AppData\Local\WebBar
[-] Folder deleted: C:\Windows\system32\config\systemprofile\AppData\LocalLow\avg web tuneup
[-] Folder deleted: C:\Users\Pat\AppData\Roaming\Mozilla\Firefox\Profiles\lqm6tpph.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}


***** [ Files ] *****

***** [ DLL ] *****

***** [ WMI ] *****

***** [ Shortcuts ] *****

***** [ Scheduled Tasks ] *****

[-] Task deleted: 0615avUpdateInfo
[-] Task deleted: 0615avUpdateInfo


***** [ Registry ] *****

[-] Key deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Search Voyage
[#] Key deleted on reboot: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Search Voyage_is1
[-] Key deleted: HKLM\SOFTWARE\Classes\ComObject.DeskbarEnabler
[-] Key deleted: HKLM\SOFTWARE\Classes\ComObject.DeskbarEnabler.1
[-] Key deleted: HKLM\SOFTWARE\Classes\TbCommonUtils.CommonUtils
[-] Key deleted: HKLM\SOFTWARE\Classes\TbCommonUtils.CommonUtils.1
[-] Key deleted: HKLM\SOFTWARE\Classes\TbHelper.TbDownloadManager
[-] Key deleted: HKLM\SOFTWARE\Classes\TbHelper.TbDownloadManager.1
[-] Key deleted: HKLM\SOFTWARE\Classes\TbHelper.TbPropertyManager
[-] Key deleted: HKLM\SOFTWARE\Classes\TbHelper.TbPropertyManager.1
[-] Key deleted: HKLM\SOFTWARE\Classes\TbHelper.TbRequest
[-] Key deleted: HKLM\SOFTWARE\Classes\TbHelper.TbRequest.1
[-] Key deleted: HKLM\SOFTWARE\Classes\TbHelper.TbTask
[-] Key deleted: HKLM\SOFTWARE\Classes\TbHelper.TbTask.1
[-] Key deleted: HKLM\SOFTWARE\Classes\TbHelper.ToolbarHelper
[-] Key deleted: HKLM\SOFTWARE\Classes\TbHelper.ToolbarHelper.1
[-] Key deleted: HKLM\SOFTWARE\Classes\URLSearchHook.ToolbarURLSearchHook
[-] Key deleted: HKLM\SOFTWARE\Classes\URLSearchHook.ToolbarURLSearchHook.1
[-] Key deleted: HKLM\SOFTWARE\Classes\AppID\{4CE516A7-F7AC-4628-B411-8F886DC5733E}
[-] Key deleted: HKLM\SOFTWARE\Classes\AppID\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
[-] Key deleted: HKLM\SOFTWARE\Classes\CLSID\{1C950DE5-D31E-42FB-AFB9-91B0161633D8}
[-] Key deleted: HKLM\SOFTWARE\Classes\CLSID\{3BDF4CE9-E81D-432B-A55E-9F0570CE811F}
[-] Key deleted: HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
[-] Key deleted: HKLM\SOFTWARE\Classes\CLSID\{9F34B17E-FF0D-4FAB-97C4-9713FEE79052}
[-] Key deleted: HKLM\SOFTWARE\Classes\CLSID\{A9A56B8E-2DEB-4ED3-BC92-1FA450BCE1A5}
[-] Key deleted: HKLM\SOFTWARE\Classes\CLSID\{AE338F6D-5A7C-4D1D-86E3-C618532079B5}
[-] Key deleted: HKLM\SOFTWARE\Classes\CLSID\{C339D489-FABC-41DD-B39D-276101667C70}
[-] Key deleted: HKLM\SOFTWARE\Classes\CLSID\{D433A9D0-8267-40CB-8AD5-24F22FA5373F}
[-] Key deleted: HKLM\SOFTWARE\Classes\CLSID\{D89031C2-10DA-4C90-9A62-FCED012BC46B}
[-] Key deleted: HKLM\SOFTWARE\Classes\CLSID\{F83D1872-D9FF-47F8-B5A0-49CC51E24EE8}
[-] Key deleted: HKLM\SOFTWARE\Classes\CLSID\{99415057-7C50-439D-AA20-02D83C071B61}
[-] Key deleted: HKLM\SOFTWARE\Classes\CLSID\{66516A07-F617-488A-90CF-4E690CFB3C5F}
[-] Key deleted: HKLM\SOFTWARE\Classes\CLSID\{DC4F1329-2852-42D3-83F1-ED8DF06E3EC7}
[-] Key deleted: HKLM\SOFTWARE\Classes\CLSID\{311B58DC-A4DC-4B04-B1B5-60299AD3D803}
[-] Key deleted: HKLM\SOFTWARE\Classes\CLSID\{40A61B9E-B111-46EE-A1F2-C1100192BA48}
[-] Key deleted: HKLM\SOFTWARE\Classes\Interface\{01221FCC-4BFB-461C-B08C-F6D2DF309921}
[-] Key deleted: HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
[-] Key deleted: HKLM\SOFTWARE\Classes\Interface\{0FA32667-9A8A-4E9C-902F-CA3323180003}
[-] Key deleted: HKLM\SOFTWARE\Classes\Interface\{452AE416-9A97-44CA-93DA-D0F15C36254F}
[-] Key deleted: HKLM\SOFTWARE\Classes\Interface\{45CDA4F7-594C-49A0-AAD1-8224517FE979}
[-] Key deleted: HKLM\SOFTWARE\Classes\Interface\{4D8ED2B3-DC62-43EC-ABA3-5B74F046B1BE}
[-] Key deleted: HKLM\SOFTWARE\Classes\Interface\{6B458F62-592F-4B25-8967-E6A350A59328}
[-] Key deleted: HKLM\SOFTWARE\Classes\Interface\{81E852CC-1FD5-4004-8761-79A48B975E29}
[-] Key deleted: HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
[-] Key deleted: HKLM\SOFTWARE\Classes\Interface\{B2CA345D-ADB8-4F5D-AC64-4AB34322F659}
[-] Key deleted: HKLM\SOFTWARE\Classes\Interface\{B9F43021-60D4-42A6-A065-9BA37F38AC47}
[-] Key deleted: HKLM\SOFTWARE\Classes\Interface\{BF921DD3-732A-4A11-933B-A5EA49F2FD2C}
[-] Key deleted: HKLM\SOFTWARE\Classes\Interface\{D83B296A-2FA6-425B-8AE8-A1F33D99FBD6}
[-] Key deleted: HKLM\SOFTWARE\Classes\Interface\{FCC9CDD3-EFFF-11D1-A9F0-00A0244AC403}
[-] Key deleted: HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
[-] Key deleted: HKLM\SOFTWARE\Classes\TypeLib\{B87F8B63-7274-43FD-87FA-09D3B7496148}
[-] Key deleted: HKLM\SOFTWARE\Classes\TypeLib\{C4BAE205-5E02-4E32-876E-F34B4E2D000C}
[-] Key deleted: HKLM\SOFTWARE\Classes\TypeLib\{CC6A58F3-FD45-4D29-BD83-3F87ACEAAEEE}
[-] Key deleted: HKLM\SOFTWARE\Classes\TypeLib\{76481128-CCDC-4073-8F65-B06F23B138FC}
[-] Key deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B2BC04DF-EFBD-409A-95CA-36874E5AB92A}
[-] Key deleted: HKU\S-1-5-21-3886772159-2697916840-4207260712-500\Software\Earth Networks
[#] Key deleted on reboot: HKCU\Software\Earth Networks
[-] Key deleted: HKLM\SOFTWARE\WebBar
[-] Key deleted: HKU\S-1-5-21-3886772159-2697916840-4207260712-500\Software\Microsoft\Internet Explorer\SearchScopes\{7E98EF51-D02F-4C64-91F7-35D23A27EFE3}
[#] Key deleted on reboot: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{7E98EF51-D02F-4C64-91F7-35D23A27EFE3}
[-] Value deleted: HKU\S-1-5-21-3886772159-2697916840-4207260712-500\Software\Microsoft\Windows\CurrentVersion\Run [WeatherBug]
[#] Value deleted on reboot: HKCU\Software\Microsoft\Windows\CurrentVersion\Run [WeatherBug]
[-] Key deleted: HKLM\SOFTWARE\Classes\AppID\ShopAtHomeHelper.EXE
[-] Key deleted: HKLM\SOFTWARE\Classes\AppID\TbCommonUtils.DLL
[-] Key deleted: HKLM\SOFTWARE\Classes\AppID\TbHelper.EXE
[-] Value deleted: HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION [winwb.exe]
[-] Key deleted: HKLM\SYSTEM\CurrentControlSet\Control\Power\User\PowerSchemes\e24b7131-d039-43cb-9e6f-ad4be601ec1f
[-] Key deleted: HKLM\SYSTEM\CurrentControlSet\Control\Power\User\PowerSchemes\04262113-2a31-48e1-b4bb-3b42174bea0f
[-] Key deleted: HKLM\SYSTEM\ControlSet002\Control\Power\User\PowerSchemes\e24b7131-d039-43cb-9e6f-ad4be601ec1f
[-] Key deleted: HKLM\SYSTEM\ControlSet002\Control\Power\User\PowerSchemes\04262113-2a31-48e1-b4bb-3b42174bea0f
[#] Key deleted on reboot: HKLM\SYSTEM\ControlSet001\Control\Power\User\PowerSchemes\e24b7131-d039-43cb-9e6f-ad4be601ec1f
[#] Key deleted on reboot: HKLM\SYSTEM\ControlSet001\Control\Power\User\PowerSchemes\04262113-2a31-48e1-b4bb-3b42174bea0f


***** [ Web browsers ] *****

*************************

:: "Tracing" keys deleted
:: Winsock settings cleared

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [7934 Bytes] - [11/06/2017 20:40:54]
C:\AdwCleaner\AdwCleaner[S0].txt - [7733 Bytes] - [11/06/2017 20:39:29]

########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [8080 Bytes] ##########


Report •

#16
June 11, 2017 at 18:14:27
Hmm, I wasn't really expecting that lot. In view of what ADWCleaner found run this program too:

Junkware Removal Tool (JRT)
https://www.malwarebytes.org/junkwa...
(blue Download button).
Download and "Save" the file somewhere. Go to the saved file then double click it to run JRT. It might appear to have stopped at times or flash the screen but sit tight until it has finished.

I'll await the logs and the results from MalwareBytes (#14 second link), also the background to this issue (#13).

Always pop back and let us know the outcome - thanks


Report •

#17
June 11, 2017 at 18:49:55
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.3 (04.10.2017)
Operating System: Windows 7 Ultimate x86
Ran by Administrator (Administrator) on Sun 06/11/2017 at 21:38:59.18
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


File System: 25

Successfully deleted: C:\Program Files\Common Files\bb7210ac-ad39-453c-b2ee-d38b02bb6360 (Folder)
Successfully deleted: C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\23EPLI7G (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\29LU8BD6 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3C7DI6AD (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BHRGD8ZV (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DQATA998 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GGHF11R8 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HYLZIXTU (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IX5L2P12 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QJJ73B5R (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QOS85A1M (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SEQHNWXM (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U834GSVK (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\23EPLI7G (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\29LU8BD6 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3C7DI6AD (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BHRGD8ZV (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DQATA998 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GGHF11R8 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HYLZIXTU (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IX5L2P12 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QJJ73B5R (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QOS85A1M (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SEQHNWXM (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U834GSVK (Temporary Internet Files Folder)

Registry: 1

Successfully deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233} (Registry Key)


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Sun 06/11/2017 at 21:40:55.92
End of JRT log


Report •

#18
June 11, 2017 at 18:51:08
Last One::::::::::::: Actually, I did this second but then you said to use the other one so I did. Here it is:::::
Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 6/11/17
Scan Time: 8:52 PM
Log File: malwarescan.txt
Administrator: Yes

-Software Information-
Version: 3.1.2.1733
Components Version: 1.0.141
Update Package Version: 1.0.2135
License: Trial

-System Information-
OS: Windows 7 Service Pack 1
CPU: x86
File System: NTFS
User: Pat-PC\Administrator

-Scan Summary-
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 282167
Threats Detected: 36
Threats Quarantined: 36
Time Elapsed: 11 min, 26 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 0
(No malicious items detected)

Registry Value: 1
Hijack.ShellA.Gen, HKU\S-1-5-21-3886772159-2697916840-4207260712-1000\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON|SHELL, Quarantined, [13187], [187664],1.0.2135

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 4
PUP.Optional.FixIt, C:\Users\Administrator\AppData\Roaming\Fix It\Languages, Quarantined, [654], [339690],1.0.2135
PUP.Optional.FixIt, C:\Users\Administrator\AppData\Roaming\Fix It\WL, Quarantined, [654], [339690],1.0.2135
PUP.Optional.FixIt, C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\FIX IT, Quarantined, [654], [339690],1.0.2135
Trojan.Boaxxe, C:\USERS\PAT\APPDATA\LOCAL\Ektion, Quarantined, [63], [401241],1.0.2135

File: 31
PUP.Optional.FixIt, C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\FIX IT\LANGUAGES\ENGLISH.JSON, Quarantined, [654], [339690],1.0.2135
PUP.Optional.FixIt, C:\Users\Administrator\AppData\Roaming\Fix It\Languages\Danish.json, Quarantined, [654], [339690],1.0.2135
PUP.Optional.FixIt, C:\Users\Administrator\AppData\Roaming\Fix It\Languages\Dutch.json, Quarantined, [654], [339690],1.0.2135
PUP.Optional.FixIt, C:\Users\Administrator\AppData\Roaming\Fix It\Languages\French.json, Quarantined, [654], [339690],1.0.2135
PUP.Optional.FixIt, C:\Users\Administrator\AppData\Roaming\Fix It\Languages\German.json, Quarantined, [654], [339690],1.0.2135
PUP.Optional.FixIt, C:\Users\Administrator\AppData\Roaming\Fix It\Languages\Italian.json, Quarantined, [654], [339690],1.0.2135
PUP.Optional.FixIt, C:\Users\Administrator\AppData\Roaming\Fix It\Languages\Norwegian.json, Quarantined, [654], [339690],1.0.2135
PUP.Optional.FixIt, C:\Users\Administrator\AppData\Roaming\Fix It\Languages\Parameters.json, Quarantined, [654], [339690],1.0.2135
PUP.Optional.FixIt, C:\Users\Administrator\AppData\Roaming\Fix It\Languages\Portuguese.json, Quarantined, [654], [339690],1.0.2135
PUP.Optional.FixIt, C:\Users\Administrator\AppData\Roaming\Fix It\Languages\Spanish.json, Quarantined, [654], [339690],1.0.2135
PUP.Optional.FixIt, C:\Users\Administrator\AppData\Roaming\Fix It\Languages\Swedish.json, Quarantined, [654], [339690],1.0.2135
PUP.Optional.FixIt, C:\Users\Administrator\AppData\Roaming\Fix It\Languages\tmpLang.json, Quarantined, [654], [339690],1.0.2135
PUP.Optional.FixIt, C:\Users\Administrator\AppData\Roaming\Fix It\CallBanner.png, Quarantined, [654], [339690],1.0.2135
PUP.Optional.FixIt, C:\Users\Administrator\AppData\Roaming\Fix It\FinishedScan.png, Quarantined, [654], [339690],1.0.2135
PUP.Optional.DownloadAssist, C:\PROGRAMDATA\MICROSOFT\WINDOWS DEFENDER\SCANS\FILESSTASH\69743578-A55D-40FC-9EE2-118BE3B5B56A_1D1C112AF4969B3, Quarantined, [16775], [300914],1.0.2135
Ransom.CryptoWall.Trace, C:\USERS\PAT\APPDATA\ROAMING\MICROSOFT\WINDOWS\START MENU\PROGRAMS\STARTUP\DECRYPT_INSTRUCTION.TXT, Quarantined, [15342], [245805],1.0.2135
Trojan.FakeMS, C:\USERS\PAT\APPDATA\LOCAL\TEMP\289A.TMP, Quarantined, [233], [64463],1.0.2135
Trojan.Injector, C:\USERS\PAT\APPDATA\LOCAL\TEMP\4A68.TMP, Quarantined, [10], [87778],1.0.2135
Trojan.Agent.DED, C:\USERS\PAT\APPDATA\LOCAL\TEMP\38B2.TMP, Quarantined, [6085], [56133],1.0.2135
Trojan.Injector, C:\USERS\PAT\APPDATA\LOCAL\TEMP\64DF.TMP, Quarantined, [10], [87778],1.0.2135
Trojan.Agent, C:\USERS\PAT\APPDATA\LOCAL\TEMP\566D.TMP, Quarantined, [24], [65144],1.0.2135
Trojan.Agent, C:\USERS\PAT\APPDATA\LOCAL\TEMP\6DD2.TMP, Quarantined, [24], [65144],1.0.2135
Ransom.CryptoLocker.PDED, C:\USERS\PAT\APPDATA\LOCAL\TEMP\8019.TMP, Quarantined, [8034], [88586],1.0.2135
Backdoor.Bot, C:\USERS\PAT\APPDATA\LOCAL\TEMP\C1E0.TMP, Quarantined, [62], [63286],1.0.2135
Trojan.Agent, C:\USERS\PAT\APPDATA\LOCAL\TEMP\9A0.TMP, Quarantined, [24], [65144],1.0.2135
Trojan.FakeMS.ED, C:\USERS\PAT\APPDATA\LOCAL\TEMP\79F8.TMP, Quarantined, [1003], [64762],1.0.2135
Trojan.FakeMS.ED, C:\USERS\PAT\APPDATA\LOCAL\TEMP\F00.TMP, Quarantined, [1003], [64762],1.0.2135
Trojan.Downloader.ED, C:\USERS\PAT\APPDATA\LOCAL\TEMP\F30C.TMP, Quarantined, [1543], [276051],1.0.2135
Trojan.Agent.ED, C:\USERS\PAT\APPDATA\LOCAL\TEMP\E7B6.TMP, Quarantined, [1446], [55963],1.0.2135
Backdoor.Bot, C:\USERS\PAT\APPDATA\LOCAL\TEMP\F36A.TMP, Quarantined, [62], [63337],1.0.2135
Trojan.Boaxxe, C:\Users\Pat\AppData\Local\Ektion\UrchinUISlice.lck, Quarantined, [63], [401241],1.0.2135

Physical Sector: 0
(No malicious items detected)


Report •

#19
June 12, 2017 at 03:52:27
OK thanks. Good to get shot of that lot. Is there any change to your download situation?

If not please answer #13.

Always pop back and let us know the outcome - thanks


Report •

#20
June 12, 2017 at 06:36:26
Nope,,,,still can't d/l. I'll try the IE reset!! I''m not sure how it is different from my "name" account and my "Admin" account. It's all on the same computer. Let me see what happens then...

Report •

#21
June 12, 2017 at 07:25:04
Is there some reason you do not wish to answer my #13?

EDIT:
I am not confident that IE Reset will work either. That suggestion was made before you discoveredc the Admin -v- Name situation.

Always pop back and let us know the outcome - thanks

message edited by Derek


Report •

#22
June 12, 2017 at 12:15:07
No,,,I thought I had answered # 13. It's been going on for quite a while. I don't remember what I was doing when it happened. IE Reset reinstalled Adobe Reader and now I can "read" an image on a court site that I couldn't before. That's copies of paperwork that are d/l'd copies of court documents. Those are now working. Let me go to some other programs that have to be d/l'd and see what happens. I think I tried something after the IE reset and still couldn't get it to work....I'll try something else and get back to you.


Report •

#23
June 12, 2017 at 12:21:35
It is possible that malware caused this problem initially, corrupting IE which the Reset then cured.

If you get this sorted then "Restart" the computer and run those three malware programs again, in this order:
ADWCleaner, Junkware Removal Tool, MalwareBytes.
Let us know if they find anything.

Always pop back and let us know the outcome - thanks

message edited by Derek


Report •

#24
June 12, 2017 at 14:19:53
I'll run them again. I did go to an e-mail my sister had sent me of my nephew. It's sent as an attachment and I can see the small pic, but underneath it says download and I wanted to save it to my pictures and it wouldn't work. Says it can't be downloaded. That's a jpg. image. I have a AVG on the computer and would have thought it would have kept my files clean but obviously it didn't and neither did the Windows Firewall or Windows Defender. I'll try running the above again...

Report •

#25
June 12, 2017 at 15:22:20
What email service or program are you using?

Unfortunately there is no one program that picks up all viruses and malware. Those three are worth knowing about for use when you suspect there might be something or just to run at odd times. Malware often gets picked up with free programs so always watch out for pre-checked unwanted items or do a custom install if available. Always check out on the internet what folk are saying about freebie programs - sometimes there are known scams.

Always pop back and let us know the outcome - thanks


Report •

#26
June 12, 2017 at 21:10:19
Ran the 3 programs in the order suggested and got nothing!! No threats detected. I'll continue to run them occasionally or when, as you say, things just don't seem right. I can try another e-mail program,,like yahoo.com. I guess it could be in that, but I don't see how. Now, all my "favorites" are on the "Pat" sign in. I really don't have any under the Admin sign in. I'll try setting up new favorites under Admin and see what happens. If necessary, I'll get back to you...Thanks for all your help!!

Pat.


Report •

#27
June 13, 2017 at 01:33:55
In Internet Explorer go to Tools > Internet Options > Security > Custom Level.... > Downloads - download files > select Enable. Then click Apply > OK

____________________________________________
Dell Optiplex 740 Enhanced, AMD Athlon 64, 4gb Ram. Windows 7 Pro 32bit.
Dell Optiplex 780, intel Core2 Quad, 16gb Ram. Windows 10 Pro 64bit

message edited by Pappy


Report •

#28
June 13, 2017 at 03:17:09
OK. You ought to check the setting in #27, although it would be unusual for it to have changed.

I asked what email you were using so that we could understand what we were looking at, not that I was suggesting changing it to something else particularly. We don't even know whether it is a program or webmail. Another secret LOL.

Always pop back and let us know the outcome - thanks

message edited by Derek


Report •

#29
June 13, 2017 at 07:04:47
If you look@ # 10,,,,I told you. My homepage is yahoo and my e-mail is ATT,,,,which is @sbcglobal.net. That's when I said I could always change to yahoo.com and see what happens. I am not trying to hide anything. There is so much going on in these posts, I lose track. I use the computer for e-mail,,news and FB. I don't d/l movies, songs or do anything technical.

Pappy,,,,I did that. It was "prompt" instead of "enable". I don't know if that made a difference. I'll let you know...Thanks.
'


Report •

#30
June 13, 2017 at 07:14:11
Pappy,,,that didn't do it either. Does the Activ X have anything to do with d/l ing??

Report •

#31
June 13, 2017 at 07:41:39
"If you look@ # 10"
Apologies - as you say, on long posts one can lose track.

Remind me - As things stand right now is it only email attachments that don't download?

Is AVG scanning emails? If so, see if temporarily turning off email scanning makes any difference to the problem.

Always pop back and let us know the outcome - thanks

message edited by Derek


Report •

#32
June 13, 2017 at 10:05:47
It's looking like it's everything under the sign in "Pat". I'm on here under that sign in now and just tried to d/l ADW and could not be d/l'd. In fact, when I tried, it shut down IE. It has to be something in IE on THIS sign in. I d/l'd them just fine under the Admin sign in and had no problem...

I turned AVG off so that can't be the problem. I'll shut down Windows Defender, but I don't think that's it because I tried shutting that down before and then d/l something and it still didn't work. I am just lost here for an answer.

If I go to the Admin sign in and transfer all my Fav's and the same thing happens, I guess it could be in something I've "Saved" in Fav's.


Report •

#33
June 13, 2017 at 10:22:55
Saving something in your Favorites wouldn't have anything to do with this problem. If it's working properly for your Admin account, then it's either a permissions issue or a corrupt Windows profile.

I'm going with a corrupt user profile. You could copy everything over to another folder, remove your user profile, then log back in to recreate it.


Report •

#34
June 13, 2017 at 10:32:46
Yes, I was beginning to suspect a corrupt user profile myself, probably brought about by malware. The only other possibility that springs to mind is that there is still some malware about, requiring a deep clean.

Always pop back and let us know the outcome - thanks


Report •

#35
June 13, 2017 at 10:42:49
But,,,if it's Malware, wouldn't it affect the computer as opposed to one sign in and not the other?? How do I do a "deep clean" and are you talking about copying all my favorites into a folder and then what??

Report •

#36
June 13, 2017 at 12:06:52
Malware could corrupt permissions. A deep clean would need to supervised by a specialist and probably require the running of several programs. If you want to go that way I can contact someone to see if he is available to do this with you.

I think a corrupt profile is rather more likely. This is the procedure:
https://support.microsoft.com/en-gb...
(As a home user I assume you will be looking at the "workgroup" procedure).

Always pop back and let us know the outcome - thanks


Report •

Ask Question