by Ken Task.
That's very strange!!! What happens when the download is completed?
Uhhhh ... scan the .mbz before attempting to open.
Happens to just admins? or all users?
Would help to know ... 'login to the portal' means logging onto Moodle or something else prior to Moodle?
What OS? What version of Moodle (can be found via version.php file in code directory)? Is it remotely hosted if so is it a shared plan or VPS? What provider?
Also, turn on debugging by taking the Debug lines from config-dist.php and adding those to config.php.
Let's see if Moodle is actually reporting anything at anytime.
'spirit of sharing', Ken