odd behavior

[Guest]

I've installed MS-ASW on several computers, and it works
fine on all but one, a laptop running XP-Pro SP2. Of course,
the computer that is giving me problems is the one I use the most.

On this computer, MS-ASW is behaiving differently in a few ways.

If I look at the Summary page, I get purple question mark icons rather
than the normal gold stars. The Spyware Scan Schedule property shows
January 1, 2004 12:00:00 AM, instead of something like "Runs at 02:00 AM
every day".
The spyware definitions property is given as "00/00/0000 (version 12)"
In the "Message Center section of the same screen, the message is just
"lblMCText" instead of the usual information about the expiration date.

The other area where I'm seeing strange behavior is the Real-time
protection.
I'm seeing lots of conflicting information there. If I look at the
Real-time summary,
it says 18 agents are active, instead of three. All three agents are
listed, each with
a gold star. If I mouse over any of the agents, the text that appears says
that the agent is active.
Both the active and inactive links are disabled. For each one, it says that
"25 of 25 checkpoints are active", even the Internet Agent, which only has 9
checkpoints.

However, if I click on an agent icon to manange the agent, I get a whole
different picture.
For the Internet agent, it says that 0 of 1 checkpoint is being monitored.
The Window's Host
File Agent is the only one shown, and it is listed as being in-active.
Clicking on the activate link for this checkpoint seems to do nothing. For
the other agents,
it says 0 of 0 checkpoints are being monitored.

I have uninstalled and reinstalled several time in trying to fix this. I
have also removed other
security programs that I thought might be interfering, but that didn't help
things either.

Any ideas?

 

[Bill Sanderson]

What are the other security programs that you thought might be involved?
The only situation in which I've seen definite interference was a particular
program which threw up flags during the Microsoft Antispyware install, and
the user misinterpreted one of the flags and refused permission.

You are logged in as an administrator?

Have you tried the control panel, add or remove programs, change, update
route? I know this is probably the same as an uninstall reinstall, but....

If you check out the errors.log file in the programs installation
directory--do you see any errors referencing specific filenames?

 

[Guest]

What are the other security programs that you thought might be involved?

McAfee Virusscan 8 and Spybot search & Destroy, as both have
some degree of access protection. As I said though, uninstalling these
did not help.

You are logged in as an administrator?
yes.

Have you tried the control panel, add or remove programs, change, update
route? I know this is probably the same as an uninstall reinstall,
but....
yes

If you check out the errors.log file in the programs installation
directory--do you see any errors referencing specific filenames?
--

I've placed a copy of the error log here:
http://nadp.sws.uiuc.edu/msas/msaslog.txt

In my earlier message, I neglected to mention that I also have
no system explorers.

Thanks in advnce!

 

[Bill Sanderson]

I'm afraid that log is greek to me. It doesn't seem to name any OCX or DLL
file directly.

There is one GC*.dll file in system32 on my machine which can be registered
(via regsvr32 gccollection.dll <enter>) at a command prompt.

Microsoft Antispyware also installs the following OCX files:

03/09/2004 07:45 PM 212,240 RICHTX32.OCX
05/22/2000 04:58 PM 140,488 comdlg32.ocx
05/22/2000 04:58 PM 647,872 mscomct2.ocx
05/22/2000 04:58 PM 1,066,176 mscomctl.ocx

Checking for the presence of these files and registering them via regsvr32
might make sense.
They should all be in \system32.