Windows Security - Your Internet Settings blocked one or more files...

[johnson903]

I am trying to open the my documents folder from my desktop and receive the Windows Security popup stating Your Internet security settings blocked one or more files from being opened. This just started to occur this morning.

 

[cottonball]

What version of IE do you have?

Try resetting IE to default:

http://www.sevenforums.com/tutorials/1222-internet-explorer-reset.html


Follow with Malwarebytes' Anti-Malware:
http://www.malwarebytes.org/mbam-download-exe.php
Save to the Desktop.


MBAM may make changes to the Registry as part of its disinfection routine.
If using other security programs that detect Registry changes, they may interfere or alert you.
Temporarily disable such programs as shown, or permit them to allow the changes:
http://www.bleepingcomputer.com/forums/topic114351.html


Right-click the MBAM file, and select: Run as Administrator
When the installation begins, follow the prompts.


Make sure you leave both of these checked:
Update Malwarebytes' Anti-Malware
Launch Malwarebytes' Anti-Malware
Click: Finish


MBAM automatically starts and you are asked to update the program.
If an update is found, the program automatically updates itself.
Press the OK button to close the box and continue.


On the Scanner tab:
Make sure the Perform Full Scan option is selected.
Then click on the Scan button.


If asked to select the drives to scan, leave all the drives selected.
Click on the Start Scan button.


The scan may take some time to complete, so please be patient.


When the scan is finished, a message box shows The scan completed successfully. Click 'Show Results' to display all objects found
Click OK to close the message box and continue with the removal process.


Back at the main Scanner screen:
Click on the Show Results button to see a list of any malware found.

Make sure everything is checked, and click: Remove Selected

When removal is completed, a report opens in Notepad.

The log is automatically saved and can be viewed by clicking the Logs tab.

Please copy/paste the entire contents of the MBAM report in your reply.
Exit MBAM when done.


Note: If MBAM encounters a file that is difficult to remove, you are asked to reboot the computer so MBAM can proceed with the disinfection process. If asked to restart the computer, please do so immediately.
Failure to reboot normally (not into safe mode) prevents MBAM from removing all the malware.


-->> When done, please give an update of how it is going.

 

[johnson903]

Thank you for your response. I am using IE 10 and have already reset the IE security options back to their defaults.

I use McAfee and have run a full scan with no bad results. I have also followed a few other suggestions, such as creating a new Admin id, running RegEdit, exporting the IE settings, signing back onto my id, deleting the IE settings under RegEdit and importing the newly created ones. This had no effect either.

I will try running mbam and let you know what happens.

 

[johnson903]

Here is the result of the scan:

Jeff :: ASPIRE5532 [administrator]
Protection: Enabled
5/26/2013 2:43:14 PM
mbam-log-2013-05-26 (14-43-14).txt
Scan type: Full scan (C:\|)
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 560435
Time elapsed: 3 hour(s), 41 minute(s), 16 second(s)
Memory Processes Detected: 0
(No malicious items detected)
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 0
(No malicious items detected)
Registry Values Detected: 0
(No malicious items detected)
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 1
C:\Users\Laura\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Security Tool.lnk (Rogue.SecurityTool) -> Quarantined and deleted successfully.
(end)


I selected the 1 file and removed it, then rebooted and deleted it.

And the problem still exists.

 

[cottonball]

johnson903,

See if the following works for you...

Please open Internet Explorer, and go to: Tools > Internet Options, and select the Security tab
Under the heading: Select a zone to view or change security settings, click: Local Intranet
Next, click: Custom Level

In the Security Settings console, scroll down to: Launching applications and unsafe files
Set it to: Enable
Click: OK

Next, under the heading: Select a zone to view or change security settings, click: Internet
Next, click: Custom Level

In the Security Settings console, scroll down to: Launching applications and unsafe files
Set it to: Prompt
Click: OK

Now, see if you can download.

If not, in the Security Settings console, make sure the setting for File Download is set to: Enabled
Check the setting for both, Local Intranet and Internet.

 

[johnson903]

Here are the only options i have under Local Intranet:

The new piece of info i have discovered, is that I have two accounts on this laptop. One has no problem, the other userID will not launch anything. I created a new user id and it could not launch anything either.

 

[cottonball]

johnson903,

Lots of entries missing from there...

Please download SystemLook from one of the links below:
64-bit system:
http://jpshortstuff.247fixes.com/SystemLook_x64.exe
http://images.malwareremoval.com/jpshortstuff/SystemLook_x64.exe

Save the file to the Desktop
Double-click SystemLook.exe to run it.

Copy the content inside the following quote box into the open field:

:reg
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings

Click the Look button to start the scan.

When finished, a Notepad window opens with the results of the scan.

Please post the SystemLook.txt in your reply.

 

[cottonball]

Edited above...missed an entry!

 

[johnson903]

I am out of town for a few days and will have to put this on hold until Friday.

 

[cottonball]

Enjoy your trip!!! (If it is not work related!)

 

[jasonf]

I just had to post this since I spent the last 2.5 hours figuring this out on a work pc and every site I went to and every fix I tried nothing worked.

If there is any key under the below reg key that is not a number you'll get that error. I've reproduced it on 4 Win7 x64 Enterprise pc's and it broke every one of them. Hopefully someone struggling to find the answer like I was will stumble across this. I'm going to post it other places too to make it easier to find.

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones

If you want to test, create a key like below and then try running appwiz.cpl from the command line.

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\a