I tried to reset using the link above, restarted windows about three times, and turning the message off, and on in the action center but the message is still coming up.
A week ago I did a boot scan and Avast found Win64:Dropper-gen then moved it to the virus chest. I deleted the three Avast virus chest entries then ran the following malware/adware scanners after googling:
Malwarebytes Anti-Malware free version-detected a PUP.Optional.OpenCandy then removed it then ran Malwarebytes again (after checking box to scan for rootkits) and did not find anything
Microsoft Safety Scanner-did not detect anything
AdwCleaner-detected the following registry entries, firefox, and google chrome information and fix them
Registry entries
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Google chrome
Found [Search Provider] : hxxp://search.aol.com/aol/search?q={searchTerms}
Found [Search Provider] : hxxp://www.ask.com/web?q={searchTerms}
Firefox
[ File : C:\Users\Brian\AppData\Roaming\Mozilla\Firefox\Profiles\osplslwh.default\prefs.js ]
Ran Avast boot scan again-got the Win64:Dropper-gen false positive message wscript.exe is infected by Win64:Dropper-gen [Drp], Move to chest: Error 42111 {The operation is not supported for this type of archive.} I tried using virustotal to scan this file but the file is too large for virustotal.
I had to set the Avast boot scan to move to virus chest in order to stop the boot scan from stopping on this false positive so it would complete the scan.
I only discovered the procedure to save logs from the three additional programs on the virus and worms forum yesterday and I would like to know this PC is free of any other malware that could have been delivered by Win64:Dropper-gen. Could Win64:Dropper-gen be the reason I cannot disable Avast shields? Should I continue this thread or start a new one on the virus and worms forum?