You should check in both the System, and Application event logs. My Vista
machine is downstairs at the moment--I'll check which log is right for
startup items when I get down there.
Interesting. My startup alert is UAC--it comes as an independent dialog
window on the left bottom of the screen, with a choice to allow if known or
not--nothing related to Windows Defender at all. Hmm--Now that I think of
it--Defender may not be running on that machine because of the antivirus
solution I'm using.
I'll go look at the logs anyway, just to see what I can guess at. Under XP,
there are events in both System and Application event logs. I would expect
parallel in Vista, but I know that there are different logs--so I'll go look
at them.
--
"lewisma9" <(E-Mail Removed)> wrote in message
news:FC6649CC-299A-4A11-ACE2-(E-Mail Removed)...
> Thanks, Engle:
> Since I use Vista, this didn't work as described, but I poked around and
> found the"event logs" and checked them out in the "event viewer". I
> opened
> every one of the Windows Defender events, but none of them related to the
> Antivirus. Could it possibly be somewhere else? Thanks.
> --
> lewisma9
>
>
> "Engel" wrote:
>
>> Hi lewisma9,
>>
>> Here's how to find out more information: (XP)
>> Start, Run, eventvwr.msc
>> Highlight the System event log in the left column.
>> Go to View, choose Filter, and, in the dropdown control for source,
>> choose
>> "windefend"
>> Look in the right pane for yellow-triangle events at the time of the
>> original scan (when you boot up)--and double click on these to open
>> them--they have a button to cut and paste to the clipboard if you want to
>> post them.
>> There should be full path and file and object name in these entries.
>> --
>>
>>
>>
>> "lewisma9" wrote:
>>
>> > Thank you, Bill:
>> > Here are more details. When I boot up, Windows Defender has an icon in
>> > the
>> > tray (lower rh side of screen) with a red x on it. When I hover over
>> > it, it
>> > says "Blocked start-up program". I right-click it, and get several
>> > options -
>> > one of which is "Show or remove blocked programs". When I click this,
>> > Windows Defender opens up a screen with a list of all my start-up
>> > programs
>> > and, after a few seconds, lists whether each one is "Permitted" or not.
>> > When
>> > it completes the process, Trend Micro AntiVirusConfig Manager is listed
>> > as"Permitted." Nonetheless, it remains blocked until I go back to the
>> > tray
>> > icon and choose instead to unblock the program- which it does, but only
>> > for
>> > this time. Then the process is repeated each time I reboot.
>> > Where would I find the "event log" you talk about? Thanks.
>> >
>> > lewisma9
>> >
>> >
>> > "Bill Sanderson MVP" wrote:
>> >
>> > > Are you sure that Windows Defender is doing this, and not User
>> > > Account
>> > > Control? I'm not sure I've seen Defender blocks on startup items in
>> > > Vista--but I get one for the SBS 2000 client code that is ancient and
>> > > unsigned.
>> > >
>> > > I would expect Trend Micro to have some support resource that would
>> > > address
>> > > this, but I don't know where that would be. I am also wondering
>> > > whether
>> > > this is an instance of a program creating a .lnk in a startup area
>> > > on each
>> > > Windows boot? The .lnk file won't be signed, and it will be a
>> > > modification
>> > > to the startup area which will raise an alarm every time.
>> > >
>> > > Can you give more details about the exact message you get? I've also
>> > > not
>> > > looked to see whether such messages are logged. If they are in an
>> > > event
>> > > log, a cut and paste from that might be very useful.
>> > >
>> > > --
>> > >
>> > > "lewisma9" <(E-Mail Removed)> wrote in message
>> > > news:F3D1838D-3CE6-4669-BCF8-(E-Mail Removed)...
>> > > > Hello -
>> > > > I use Windows Vista on a Gateway desktop, and I'm new to Vista.
>> > > > Every time
>> > > > I
>> > > > start up, this program is "blocked": Trend Micro AntiVirus
>> > > > Configuration
>> > > > Manager. It is easy to click through and start it up, but it
>> > > > shouldn't
>> > > > happen
>> > > > at all -- this is a "signed" program which is listed as "permitted"
>> > > > in the
>> > > > Windows Defender list. What is happening, and how can I fix it?
>> > > > Thanks.
>> > > > --
>> > > > lewisma9
>> > >
>> > >
>> > >
|
Similar Threads
