Mcafee has been calling out some app code as problems
1/27/2011 3:07:00 PM Blocked by Access Protection rule T:\PortableApps\RedNotebookPortable\RedNotebookPortable.exe \REGISTRY\USER\S-1-5-21-3327122053-3267547230-2799438616-2482\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\AutoDetect Anti-spyware Standard Protection:Protect Internet Explorer favorites and settings Action blocked :
1/27/2011 9:46:41 AM Blocked by Access Protection rule T:\PortableApps\AudacityPortable\AudacityPortable.exe \REGISTRY\USER\S-1-5-21-3327122053-3267547230-2799438616-2482\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\AutoDetect Anti-spyware Standard Protection:Protect Internet Explorer favorites and settings Action blocked :
1/27/2011 9:46:40 AM Blocked by Access Protection rule :\PortableApps\PortableApps.com\PortableAppsPlatform.exe \REGISTRY\USER\S-1-5-21-3327122053-3267547230-2799438616-2482\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\AutoDetect Anti-spyware Standard Protection:Protect Internet Explorer favorites and settings Action blocked :
1/25/2011 5:24:42 PM Blocked by Access Protection rule T:\PortableApps\PortableApps.com\App\bin\eject.exe \REGISTRY\USER\S-1-5-21-3327122053-3267547230-2799438616-2482\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\AutoDetect Anti-spyware Standard Protection:Protect Internet Explorer favorites and settings Action blocked :
=====================
any ideas?
numerous hits on this issue
White Page Report from MCAfee basically says
"“Protect Internet Explorer favorites and settings”
Intention: This rule is designed to prevent modification of Microsoft Internet Explorer configurations and files by any process not listed in the rule’s exclusion list. A common tactic of malware is to change the browser’s start page, and install favorites. This rule protects against certain start page Trojans, adware, and spyware that modify browser settings.
Risks: There really aren’t any drawbacks to enabling this rule, as it simply blocks processes from making changes to favorites and settings in Microsoft Internet Explorer.
ID and Name in Host IPS:
3890, Access Protection—Protect Internet Explorer favorites and settings.
“Be who you are and say what you feel because those who mind don't matter and those who matter don't mind.” Dr. Seuss