Malwarebytes Log result

Muppet81

Below is the log from a scan carries out today.


I did the scan because every time I now try to download anything, no matter how trusted, I get message in red saying that the xls contained a virus and has been deleted.


This is still happening after I ran the scan and 1 file was deleted by MB


Could anyone assist me please. This is so annoying and I do not know much about the techie side of things.


I use AVAST as my anti virus.


Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org
Database version: v2014.01.09.02
Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16476
Pam :: PAM-PC [administrator]
09/01/2014 11:21:41
mbam-log-2014-01-09 (11-21-41).txt
Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 260271
Time elapsed: 8 minute(s), 50 second(s)
Memory Processes Detected: 0
(No malicious items detected)
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 0
(No malicious items detected)
Registry Values Detected: 0
(No malicious items detected)
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 1
C:\Users\Pam\AppData\Local\Temp\01373553709791.exe (Trojan.FakeMS) -> Quarantined and deleted successfully.
(end)

GunJack

have you re-booted since the removal?

GunJack

have a read of this too...

https://forums.malwarebytes.org/index.php?showtopic=129893

that infection may be indicative if other nasties too...

WTFH

Is it the same file or same website that you are always trying to download from?

waddler_8

Muppet81 wrote: »

I did the scan because every time I now try to download anything, no matter how trusted, I get message in red saying that the xls contained a virus and has been deleted.

That's IE's SmartScreen filter.

http://windows.microsoft.com/en-gb/windows7/smartscreen-filter-frequently-asked-questions-ie9

You could turn it off temporarily to download the file, but to be sure first save the file and then upload it to VirusTotal before opening. Do this at your own risk.

http://support.microsoft.com/kb/930168

https://www.virustotal.com/en/

Example .xls detection:
https://www.virustotal.com/en/file/6d35bacf4d5d5b6f79eb6fe8e9e4c439452f9106a39db735430e84b53043c75c/analysis/

http://www.microsoft.com/security/portal/threat/encyclopedia/entry.aspx?Name=Virus%3AXF%2FSic.E

Muppet81

GunJack wrote: »

have you re-booted since the removal?

Yes. The problem still exisits

Muppet81

WTFH wrote: »

Is it the same file or same website that you are always trying to download from?

No. Happens on any site.

Muppet81

waddler_8 wrote: »

That's IE's SmartScreen filter.

http://windows.microsoft.com/en-gb/windows7/smartscreen-filter-frequently-asked-questions-ie9

You could turn it off temporarily to download the file, but to be sure first save the file and then upload it to VirusTotal before opening. Do this at your own risk.

http://support.microsoft.com/kb/930168

https://www.virustotal.com/en/

Example .xls detection:
https://www.virustotal.com/en/file/6d35bacf4d5d5b6f79eb6fe8e9e4c439452f9106a39db735430e84b53043c75c/analysis/

http://www.microsoft.com/security/portal/threat/encyclopedia/entry.aspx?Name=Virus%3AXF%2FSic.E

Scary! Will have a good look t all this. Thanks

Muppet81

GunJack wrote: »

have a read of this too...

https://forums.malwarebytes.org/index.php?showtopic=129893

that infection may be indicative if other nasties too...

Will do. Thanks

waddler_8

If you give us an example link of a file you are trying to download we could take a look for you.

Muppet81

Switched off Smart Filter but still happening.


Went into AVAST - looked at Network System File Shield
Tried to copy and paste the result for you to see but too big to include. Cannot just C and P the important line but have tried to copy it manually here.
C:\Users\Pam\AppData\Local\Microsoft\InternetExplorer\Recovery\LastActivity\RecoveryStore/C00F5ADE1-4B92-11E3-92E4-1c7508DF925C}dat


This is a file from the Martin Lewis MSE website and I would be very surprised if this was a dangerous file. Has occurred everything I try to download for weeks. Or maybe it isn't. When I looked it was the MSE file which was the last activity but by the time I went back and copied this I think it had changed. seems as though it may be AVAST which has started to block everything but if so, why all of a sudden or is IE blocking although Smart Filter switched off for time being?