Please help on unblocking actions!

[JP]

A PC here does not display the Favorites. Nor can one Organize Favorites or
Add to Favorites.

Export-Import to Favorites does not work either.

The only even prior to this was that a user clicked on "Block" for a
Security Alert from MS Spyware regarding something about the Favorites
folder. Unfortunately the Block option was clicked too fast before any
details could be noted.

There is no option visible in MS Spyware to unblock this action - all events
come up blank. However the event log does show the following items:

Windows Services alert
Occurred on: 4/25/2005 at 10:12:45
The user Administrator, has decided to block the Windows service ISO
Recorder C:\Program Files\Alex Feinman\ISO Recorder\ImapiHelper.exe from
being added.

User Shell Folders alert
Occurred on: 4/25/2005 at 10:12:42
The user Administrator, has decided to prevent a change to the user's
defined shell folders from Favorites to %USERPROFILE%\Favorites.

How can these actions be now undone? Unfortunately System Restore was not
enabled on this particular machine.

Also, the locations of the Favorites folder is correct in the registry:

Current User/Software/Microsoft/Windows/Current Version/Explorer/Shell
Folders

Current User/Software/Microsoft/Windows/Current Version/Explorer/User Shell
Folders

Also MS Spyware itself cannot be uninstalled as it says something like:
%/USERPROFILE/FAVORITES/% NOT FOUND (or words to that effect)

The Favorites folder itself in Documents and Settings/Administrator/ shows
all entries intact.

This has me a bit puzzled not to say frazzled.

Thanks for any pointers.

JP

PS: CD burning and ISO Recorder works fine!

 

[Andre Da Costa]

Maybe the User Profile has become corrupted. You could try creating
another one using this method :
http://support.microsoft.com/?id=811151

Then attempt to import your Favorites again.

Steve Wechsler (akaMowGreen)

MS-MVP 2004-2005

 

[JP]

Thanks for your response.

Very good idea - unfortunately the PC was up and running as the
Administrator when the event happened! The user at the time was not at fault
as we all keep watch for intrusions and do expect security tools as MS
Spyware to present such alerts.

Subsequently, I did log on the machine using the other user accounts and
things work perfectly! Earlier I had assumed the PC was running on a user
account - I forgot it was started in Administrator mode!

One day one forgets one thing and that is the day dear ol' Mr Murphy decides
to pay a visit.

Unfortunately I am balding - this does not allow for pulling on too much
hair right now!

I would welcome suggestions - very much indeed! Thanks.

JP


: Maybe the User Profile has become corrupted. You could try creating
: another one using this method :
: http://support.microsoft.com/?id=811151
:
: Then attempt to import your Favorites again.
:
: Steve Wechsler (akaMowGreen)
:
: MS-MVP 2004-2005
: --
:
: Andre
: http://spaces.msn.com/members/adacosta
: FAQ for MS AntiSpy http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm
:
: : >A PC here does not display the Favorites. Nor can one Organize Favorites
or
: > Add to Favorites.
: >
: > Export-Import to Favorites does not work either.
: >
: > The only even prior to this was that a user clicked on "Block" for a
: > Security Alert from MS Spyware regarding something about the Favorites
: > folder. Unfortunately the Block option was clicked too fast before any
: > details could be noted.
: >
: > There is no option visible in MS Spyware to unblock this action - all
: > events
: > come up blank. However the event log does show the following items:
: >
: > Windows Services alert
: > Occurred on: 4/25/2005 at 10:12:45
: > The user Administrator, has decided to block the Windows service ISO
: > Recorder C:\Program Files\Alex Feinman\ISO Recorder\ImapiHelper.exe from
: > being added.
: >
: > User Shell Folders alert
: > Occurred on: 4/25/2005 at 10:12:42
: > The user Administrator, has decided to prevent a change to the user's
: > defined shell folders from Favorites to %USERPROFILE%\Favorites.
: >
: > How can these actions be now undone? Unfortunately System Restore was
not
: > enabled on this particular machine.
: >
: > Also, the locations of the Favorites folder is correct in the registry:
: >
: > Current User/Software/Microsoft/Windows/Current Version/Explorer/Shell
: > Folders
: >
: > Current User/Software/Microsoft/Windows/Current Version/Explorer/User
: > Shell
: > Folders
: >
: > Also MS Spyware itself cannot be uninstalled as it says something like:
: > %/USERPROFILE/FAVORITES/% NOT FOUND (or words to that effect)
: >
: > The Favorites folder itself in Documents and Settings/Administrator/
shows
: > all entries intact.
: >
: > This has me a bit puzzled not to say frazzled.
: >
: > Thanks for any pointers.
: >
: > JP
: >
: > PS: CD burning and ISO Recorder works fine!
: >
: >
:
:

 

[JP]

The problem has been solved simply by restoring the computer from a
five-month old Norton Ghost image. The PC was then updated with Windows
components as well as updates to other software and utilities.

The added advantage was that it also got rid of MS Spyware!

Since this is no longer a software used - (the affected PC was the only one
with it) - this newsgroup is being unsubscribed to herewith also.

Thanks and regards.

JP

 

[Andre Da Costa]

You can take another whack at it in beta 2? ;-)

 

[Guest]

Dude. I got just what you need.

If you used MS Antispyware to block, you can use it to
unblock. Listen closely.

Open MS Antispyware from your system tray. Click the
realtime protection (shield). Click on Application Agents.
Here is where the road may split:

1. Click on View all application events and try to see how
it was blocked. (I expect it is a script block). Find the
correct one on the list that refers to the checkpoint that
blocked it.

OR 2. Go down the list till you find Script Blocking.
(This probably was what blocked you). Remove what was
blocked.

OR 3. Go back to the main Application Agents window and
check each agent individually to see what check point is
blocking you.

Respond for further clarification.
Thomas.