TrendMicro Antivirus startup blocked -- How to fix?

G

Guest

Hello -
I use Windows Vista on a Gateway desktop, and I'm new to Vista. Every time I
start up, this program is "blocked": Trend Micro AntiVirus Configuration
Manager. It is easy to click through and start it up, but it shouldn't happen
at all -- this is a "signed" program which is listed as "permitted" in the
Windows Defender list. What is happening, and how can I fix it? Thanks.
 
B

Bill Sanderson MVP

Are you sure that Windows Defender is doing this, and not User Account
Control? I'm not sure I've seen Defender blocks on startup items in
Vista--but I get one for the SBS 2000 client code that is ancient and
unsigned.

I would expect Trend Micro to have some support resource that would address
this, but I don't know where that would be. I am also wondering whether
this is an instance of a program creating a .lnk in a startup area on each
Windows boot? The .lnk file won't be signed, and it will be a modification
to the startup area which will raise an alarm every time.

Can you give more details about the exact message you get? I've also not
looked to see whether such messages are logged. If they are in an event
log, a cut and paste from that might be very useful.
 
G

Guest

Thank you, Bill:
Here are more details. When I boot up, Windows Defender has an icon in the
tray (lower rh side of screen) with a red x on it. When I hover over it, it
says "Blocked start-up program". I right-click it, and get several options -
one of which is "Show or remove blocked programs". When I click this,
Windows Defender opens up a screen with a list of all my start-up programs
and, after a few seconds, lists whether each one is "Permitted" or not. When
it completes the process, Trend Micro AntiVirusConfig Manager is listed
as"Permitted." Nonetheless, it remains blocked until I go back to the tray
icon and choose instead to unblock the program- which it does, but only for
this time. Then the process is repeated each time I reboot.
Where would I find the "event log" you talk about? Thanks.

lewisma9
 
G

Guest

Hi lewisma9,

Here's how to find out more information: (XP)
Start, Run, eventvwr.msc
Highlight the System event log in the left column.
Go to View, choose Filter, and, in the dropdown control for source, choose
"windefend"
Look in the right pane for yellow-triangle events at the time of the
original scan (when you boot up)--and double click on these to open
them--they have a button to cut and paste to the clipboard if you want to
post them.
There should be full path and file and object name in these entries.
 
G

Guest

Thanks, Engle:
Since I use Vista, this didn't work as described, but I poked around and
found the"event logs" and checked them out in the "event viewer". I opened
every one of the Windows Defender events, but none of them related to the
Antivirus. Could it possibly be somewhere else? Thanks.
 
B

Bill Sanderson MVP

You should check in both the System, and Application event logs. My Vista
machine is downstairs at the moment--I'll check which log is right for
startup items when I get down there.

Interesting. My startup alert is UAC--it comes as an independent dialog
window on the left bottom of the screen, with a choice to allow if known or
not--nothing related to Windows Defender at all. Hmm--Now that I think of
it--Defender may not be running on that machine because of the antivirus
solution I'm using.

I'll go look at the logs anyway, just to see what I can guess at. Under XP,
there are events in both System and Application event logs. I would expect
parallel in Vista, but I know that there are different logs--so I'll go look
at them.

--
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top