cancel
Showing results for 
Search instead for 
Did you mean: 

Protect Internet Explorer favorites and settings

Is anyone seeing an lot of abnormal blocks by having this enabled lately. It is blocking Microsoft mouse and keyboard center, and it is very noisy during third party updates.

3 Replies
wwarren
Level 15
Report Inappropriate Content
Message 2 of 4

Re: Protect Internet Explorer favorites and settings

Would you mind sharing some recent AP log entries that show the activity? (You can scrub the username details if need be)

What I'm most curious about is what process we are tagging as being responsible for the activity, especially when you say the Microsoft mouse and keyboard center might be that entity.

Makes you wonder why such an app would care about your IE settings.

Whatever the case, you have to recognize that Access Protection does not "false", so whatever that process is, it really is accessing the protected settings and trying to do so with enough privileges to change them, not just read them. Meaning, if you want to stop the noise you have to exclude the process or disable the reporting of the rule.

William W. Warren | S.I.R.R. | Customer Success Group | McAfee

Re: Protect Internet Explorer favorites and settings

Blocked by Access Protection rulec:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe\REGISTRY\USER\S-1-5-21-1129609126-404639183-60295696-18202\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\AutoDetectAnti-spyware Standard ProtectionSmiley Tonguerotect Internet Explorer favorites and settingsAction blocked : Create
5/19/20159:08:29 AMBlocked by Access Protection rulec:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe\REGISTRY\USER\S-1-5-21-1129609126-404639183-60295696-18202\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\AutoDetectAnti-spyware Standard ProtectionSmiley Tonguerotect Internet Explorer favorites and settingsAction blocked : Create
5/19/20159:08:29 AMBlocked by Access Protection rulec:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe\REGISTRY\USER\S-1-5-21-1129609126-404639183-60295696-18202\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\AutoDetectAnti-spyware Standard ProtectionSmiley Tonguerotect Internet Explorer favorites and settingsAction blocked : Create
5/19/20159:08:29 AMBlocked by Access Protection rulec:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe\REGISTRY\USER\S-1-5-21-1129609126-404639183-60295696-18202\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\AutoDetectAnti-spyware Standard ProtectionSmiley Tonguerotect Internet Explorer favorites and settingsAction blocked : Create

This is just one example of things that are staring to get blocked by this rule.

wwarren
Level 15
Report Inappropriate Content
Message 4 of 4

Re: Protect Internet Explorer favorites and settings

You should be safe in this case for adding the affected processes to the "Processes to exclude" list of that AP rule.

Either the process name or the full path + process name, should work out for you.

e.g.

itype.exe, c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe

William W. Warren | S.I.R.R. | Customer Success Group | McAfee