Solved Regular format of downloads folder

[ethanchal]

Do you or have you been using Advanced System Care by IObits or any other programs from IObits?

Nice call Jack.

Search results show that there are remnants left behind when ASC is uninstalled. I'm not certain, but some reports state that there are running remnants. The really sad thing is that the IObit uninstaller is recommended as a remedy. This is a general uninstaller, not a specific ASC uninstaller as far as I can tell.

@ethanchal: rather than download another IObit program, see if Revo uninstaller (free) can clean up ASC for you.
Video Instructions: http://www.sevenforums.com/tutorials/106594-revo-uninstaller-freeware-uninstall-programs.html
Revo docs: Revo Uninstaller Pro - How To

I was suspicious about using/removing that program but there were no remnants of the program once installed. I have checked the program files folders and nothing. I tried the Revo Uninstaller and it didn't even show up as a program to be removed. So I assume that when I uninstalled it, It actually uninstalled it.

Thanks though.

 

[ethanchal]

Iobit programs are very difficult to remove. They may also leave behind the ability to call home to China. Their was one member on the Seven Forum after blocking the Iobit call home on his computer they started calling him on his regular phone.

Many have had to do a Clean Install just to get rid of all the Iobit. If you just remove A.S.C. you don't know what it has done so you don't know what needs fixed.
Any internal or external drives can also have damage done by this Iobit trash.

I've no remnants of Iobit that I'm aware of and haven't had any issues, apart from this one, with them. I'm planning to do a system reset at the end of the year, so I could live with it until then. So there is no real easy method in restoring that data in it's original form (in folders etc...)?

 

[ignatzatsonic]

So I assume that when I uninstalled it, It actually uninstalled it.

Probably not a valid assumption.

Revo isn't clairvoyant and can't know for certain where portions of the installation reside. It makes an educated guess based on how registry entries are named. Something as sinister as this program likely goes to great lengths to conceal where it is installed.

 

[Slartybart]

.....
I was suspicious about using/removing that program but there were no remnants of the program once installed. I have checked the program files folders and nothing. I tried the Revo Uninstaller and it didn't even show up as a program to be removed. So I assume that when I uninstalled it, It actually uninstalled it.

Thanks though.

You're welcome.

ignatzatsonic makes a good point, could you post a screen shot of what Revo did find installed? The Details view provides more information than the icon or list views.
See: http://www.sevenforums.com/tutorials/9733-screenshots-files-upload-post-seven-forums.html

Thanks

 

[Layback Bear]

ethanchal what ever you do I highly recommend going to another uninfected computer and change all your passwords to every thing. Their is a very good chance your password are in China by now.
Check all bank account, credit card accounts and the like from a uninfected computer to see if any goofy things have been happening.

 

[carwiz]

Yeah, some of that "malware" is hard to remove if you can find it. It can leave behind a service that uses a backdoor through a svchost.exe process. Unless you happen to catch the communication with a TCP Viewer, you never know it's happening. It gets buried with 10-20 other legitimate svchost processes. I found that problem with an often recommended free video converter and downloader. I suspect it was reporting everything you downloaded back to home base--Also a Chinese IP address. But it would run whether you were downloading videos or not. I caught it by accident while watching something else with a TCP viewer.

 

[derekimo]

Iobit programs are very difficult to remove. They may also leave behind the ability to call home to China. Their was one member on the Seven Forum after blocking the Iobit call home on his computer they started calling him on his regular phone.

This is very interesting, I don't want to derail this thread but maybe a follow up about this can be started?

 

[Layback Bear]

If I can find it I will post it.

 

[derekimo]

If I can find it I will post it.

Thank you Jack.

 

[Layback Bear]

So far I haven't found it so I must be lying or drunk.

 

[derekimo]

So far I haven't found it so I must be lying or drunk.

Don't worry about that, I just thought a separate discussion could be started mainly, if you find the other post too that just extra.

Sounds like pretty scary stuff to me.

 

[Layback Bear]

I have corrected my post # 20 to give warning to all and ask for help.

 

[Slartybart]

There's an interesting discussion on Chromium - it's old, but it might be something to try.

Thread -> Issue 153212: Downloaded files disappearing on Windows

Summary: Downloaded files disappearing on Windows Oct 5, 2012
#46 I had the same issue and solved it this way:
Start->run regedit

Find this key:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments
Set ScanWithAntiVirus to 1.

Probably not the best work around, but it was getting reallllly annoying not being able to download files. I can change it back once a real fix comes along.

There are lots of ideas and links in the thread, but the one above seems quick and easy to test.

dev.Chromium punted at the end as it wasn't a Chrome browser issue.

One other link pointed to Internet Security zones - so you might want to take a look at those settings in Control Panel > Internet Properties
Security Tab
If you don't have any cutom settings, try hitting the
Reset all zones to default levels.

Another ting to consider - resetting your browsers. Try IE first and see if that has a positive effect on the downloads issue. If after a month (intermittent issue) without resolution try resetting Chrome. You could of course just reset both now and see if that helps.

http://www.sevenforums.com/tutorials/1222-internet-explorer-reset.html
http://www.sevenforums.com/tutorials/272251-chrome-browser-reset-default.html

Why IE when you use Chrome? Windows and IE are tied together very closely. Think of IE as Control Panel Internet Options.

 

[ethanchal]

There's an interesting discussion on Chromium - it's old, but it might be something to try.

Thread -> Issue 153212: Downloaded files disappearing on Windows

Summary: Downloaded files disappearing on Windows Oct 5, 2012
#46 I had the same issue and solved it this way:
Start->run regedit

Find this key:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments
Set ScanWithAntiVirus to 1.

Probably not the best work around, but it was getting reallllly annoying not being able to download files. I can change it back once a real fix comes along.

There are lots of ideas and links in the thread, but the one above seems quick and easy to test.

dev.Chromium punted at the end as it wasn't a Chrome browser issue.

One other link pointed to Internet Security zones - so you might want to take a look at those settings in Control Panel > Internet Properties
Security Tab
If you don't have any cutom settings, try hitting the
Reset all zones to default levels.

Another ting to consider - resetting your browsers. Try IE first and see if that has a positive effect on the downloads issue. If after a month (intermittent issue) without resolution try resetting Chrome. You could of course just reset both now and see if that helps.

http://www.sevenforums.com/tutorials/1222-internet-explorer-reset.html
http://www.sevenforums.com/tutorials/272251-chrome-browser-reset-default.html

Why IE when you use Chrome? Windows and IE are tied together very closely. Think of IE as Control Panel Internet Options.

Hmm went into regedit and there doesn't seem to be a "Current Version" folder under the "Microsoft" folder which stopped me from getting any further.

The security zones was already at default levels.

Finally I've just reset Chrome, but I don't have IE anywhere (not in control panel) as I remember disabling it via the Windows Features tab. We shall have to wait and see now to see if the problem persists.

Thanks for your help.

 

[ethanchal]

Yeah, some of that "malware" is hard to remove if you can find it. It can leave behind a service that uses a backdoor through a svchost.exe process. Unless you happen to catch the communication with a TCP Viewer, you never know it's happening. It gets buried with 10-20 other legitimate svchost processes. I found that problem with an often recommended free video converter and downloader. I suspect it was reporting everything you downloaded back to home base--Also a Chinese IP address. But it would run whether you were downloading videos or not. I caught it by accident while watching something else with a TCP viewer.

How bizarre. So would you recommend me to install a TCP viewer and keep an eye out for any communication which doesn't look normal?

 

[ethanchal]

.....
I was suspicious about using/removing that program but there were no remnants of the program once installed. I have checked the program files folders and nothing. I tried the revo uninstaller and it didn't even show up as a program to be removed. So i assume that when i uninstalled it, it actually uninstalled it.

Thanks though.

you're welcome.

Ignatzatsonic makes a good point, could you post a screen shot of what revo did find installed? The details view provides more information than the icon or list views.
See: http://www.sevenforums.com/tutorials/9733-screenshots-files-upload-post-seven-forums.html

thanks

 

[Slartybart]

That's more than I expected, but I don't see anything that might be troublesome.

Thanks for posting the full list.

Hmm went into regedit and there doesn't seem to be a "Current Version" folder under the "Microsoft" folder which stopped me from getting any further.

The security zones was already at default levels.

Finally I've just reset Chrome, but I don't have IE anywhere (not in control panel) as I remember disabling it via the Windows Features tab. We shall have to wait and see now to see if the problem persists.

Thanks for your help.

This is a bit disconcerting there doesn't seem to be a "Current Version" folder under the "Microsoft" .

I think you would have more issues than downloads, but maybe not.

try this: open a command prompt and type the following

reg query HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\ /s > rqHLKMpolicy.txt
exit​

Please attach the rqHLKMpolicy.txt that should be in your user folder.

Thanks

 

[ethanchal]

that's more than i expected, but i don't see anything that might be troublesome.

Thanks for posting the full list.

hmm went into regedit and there doesn't seem to be a "current version" folder under the "microsoft" folder which stopped me from getting any further.

The security zones was already at default levels.

Finally i've just reset chrome, but i don't have ie anywhere (not in control panel) as i remember disabling it via the windows features tab. We shall have to wait and see now to see if the problem persists.

Thanks for your help.

this is a bit disconcerting there doesn't seem to be a "current version" folder under the "microsoft" .

I think you would have more issues than downloads, but maybe not.

Try this: Open a command prompt and type the following

reg query hklm\software\microsoft\windows\currentversion\policies\ /s > rqhlkmpolicy.txt
exit​

please attach the rqhlkmpolicy.txt that should be in your user folder.

Thanks

View attachment rqHLKMpolicy.txt

 

[Slartybart]

Thanks and phewwwww - the registry entry is there.

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments
ScanWithAntiVirus REG_DWORD 0x3​

The post I linked suggested changing it to

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments
ScanWithAntiVirus REG_DWORD 0x1​

 

[ethanchal]

Thanks and phewwwww - the registry entry is there.

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments
ScanWithAntiVirus REG_DWORD 0x3​

The post I linked suggested changing it to

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments
ScanWithAntiVirus REG_DWORD 0x1​

Okay great. All done, so have we found a fix?