IE 11 won't download anything
Hi
On a client's computer (Windows 7 64bit, Office 2010 + + ESET Nod 32)
IE 11 won't dowload anything, stating that the file has been deleted
because suspicious or infected
I have cleared the IE history & cache, set scanwithantivirus to 1 in the
registry, checked the addons, ensured Enahnced Protected Mode was
disabled and that downloads are allowed, and reset IE settings
Any other possibilities ?
thanks
yann
On a client's computer (Windows 7 64bit, Office 2010 + + ESET Nod 32)
IE 11 won't dowload anything, stating that the file has been deleted
because suspicious or infected
I have cleared the IE history & cache, set scanwithantivirus to 1 in the
registry, checked the addons, ensured Enahnced Protected Mode was
disabled and that downloads are allowed, and reset IE settings
Any other possibilities ?
thanks
yann
Have you tried disabling the antivirus completely for the sake of testing? Is there maybe a second antivirus active on the background? Microsoft Security Essentials, for example.
I was adding
see these
ESET Smart Security or ESET NOD32 Antivirus blocks access to a specific file on a website
http://support.eset.com/kb3097/?viewlocale=en_US
see these
ESET Smart Security or ESET NOD32 Antivirus blocks access to a specific file on a website
http://support.eset.com/kb3097/?viewlocale=en_US
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thank you all for your responses
Merete: any file download, and any site, causes this error
Vergezogt_: will try without the AV, although other PCs at the same site have same AV and no issue - furthermore I have no issues downloading the same files from the same sites using Firefox
LockDown32: this suggestion looks the most promising.
I'll keep you posted
yann
Merete: any file download, and any site, causes this error
Vergezogt_: will try without the AV, although other PCs at the same site have same AV and no issue - furthermore I have no issues downloading the same files from the same sites using Firefox
LockDown32: this suggestion looks the most promising.
I'll keep you posted
yann
Yann it sounds like some spyware. Or possibly Ransom ware?
As it is only using IE and applies to all sites but does not happen with FF.
Here is the specs please follow this as it is quite a lengthy thorough cleanup>
Remove “file contained a virus and was deleted” (Removal Guide)
If you are seeing a “this file contained a virus and was deleted” message, when trying to download a program using Internet Explorer 8, 9 or 10, then your computer is infected with a ZeroAccess rootkit.
To protect itself from being removed, the ZeroAccess rootkit will prevent Internet Explorer 8, 9 and 10 users from downloading any piece of software that might lead to its removal.
When this happens, the Internet Explorer users will see a “filename.exe contained a virus and was deleted” message, which is obviously generated by this infection.
STEP 1: Rename Windows Defender folder to stop the “file contained a virus and was deleted” notification
The ZeroAccess rootkit has corrupted the Windows Defender program, so we will need to temporarily rename its folder.
SOURCE
https://malwaretips.com/blogs/file-contained-a-virus-and-was-deleted-removal/
There is also
ESET Free Online Scanner
http://www.eset.com/au/home/products/online-scanner/
As it is only using IE and applies to all sites but does not happen with FF.
Here is the specs please follow this as it is quite a lengthy thorough cleanup>
Remove “file contained a virus and was deleted” (Removal Guide)
If you are seeing a “this file contained a virus and was deleted” message, when trying to download a program using Internet Explorer 8, 9 or 10, then your computer is infected with a ZeroAccess rootkit.
To protect itself from being removed, the ZeroAccess rootkit will prevent Internet Explorer 8, 9 and 10 users from downloading any piece of software that might lead to its removal.
When this happens, the Internet Explorer users will see a “filename.exe contained a virus and was deleted” message, which is obviously generated by this infection.
STEP 1: Rename Windows Defender folder to stop the “file contained a virus and was deleted” notification
The ZeroAccess rootkit has corrupted the Windows Defender program, so we will need to temporarily rename its folder.
SOURCE
https://malwaretips.com/blogs/file-contained-a-virus-and-was-deleted-removal/
There is also
ESET Free Online Scanner
http://www.eset.com/au/home/products/online-scanner/
ASKER
I tested for zeroaccess rootkit: null
Ran sfc /scannow : halded in error at 53%
It was in fact a Windows Defender issue
There were two Windows Defender folders, one in Program Files (x86) and another in Programmes
I renamed both .OLD and ensured the service was disabled
Rebooted, then tried to delete the folders: some files weren't deletable by the user (with admin rights)
Tried to download with IE and now it works properly: that'll do
thanks
Ran sfc /scannow : halded in error at 53%
It was in fact a Windows Defender issue
There were two Windows Defender folders, one in Program Files (x86) and another in Programmes
I renamed both .OLD and ensured the service was disabled
Rebooted, then tried to delete the folders: some files weren't deletable by the user (with admin rights)
Tried to download with IE and now it works properly: that'll do
thanks
Thanks for refreshing my memory Yann. You are correct. Just the presence of those folders is a problem and the article I found did say to rename them. Did you find the article?
( ESET Nod 32)
Turn OFF detection of potentially unwanted or suspicious applications (uncheck the boxes in the control panel). temporarily risky to do as the file may actually be spyware.
Try and add internet explorer to safe zones in firewall in control panel
Test the file use Chrome instead.
https://www.google.com.au/intl/en/chrome/browser/desktop/index.html