Trend Micro Internet Security Pro & JV16 Powertools Conflict

uriel

I upgraded Trend micro Internet Security Pro to the 2010 version last week. Now whenever the registry cleaner is run, Trend micro pops up a message telling me that Jv16 Powertools tried to disable system protection. Is this a bug with JV16 Powertools? Or is this a false positive that I should be reporting to Trend Micro? Thx!

"Time" "Type" "Sub Type" "Detected Resource or Process ID" "Affected File" "Action Taken" "Company ID" "Types" "Policy Violated"

"12" "" "" "HKLM\SOFTWARE\TrendMicro\PC-cillin\17\Installer" "C:\Program Files\jv16 PowerTools 2009\jv16PT.exe" "Deny" "" "Registry" "System self protection"

boofo

Since it just started happening with the new version, I would say it has something to do with Trend Micro Internet Security 2010.

uriel

This is a serious issue if JV16 is attempting to disable my system protection. I'm not keen on the idea that JV16 might be trying to take out my system security and feel that I should report this to Macecraft to be checked out. I'm quite confident that it can be resolved. If this turns out to be a false positive, I will report it to Trend Micro.

boofo

Just add Trend Micro to your ignore list. Problem solved.

tullik

Boofo wrote
Just add Trend Micro to your ignore list. Problem solved.

Maybe. Maybe not.

If Trend Micro is monitoring access to its own keys, PowerTools can't ignore it until it is read. Perhaps Trend Micro has an exclude/ignore list ... ?

boofo

Well, trying it would tell a lot more since it seemed to have started happening with the Trend Micro update and not the PowerTools update.

tullik

Boofo wrote
Well, trying it would tell a lot more since it seemed to have started happening with the Trend Micro update and not the PowerTools update.

Yes.

One interpretation of the Trend Micro message is that it does not let PowerTools even look at the key.

If the message still occurs with the ignore word you suggested, it proves that interpretation.

uriel

The suggestion seems like a band aide fix to me. JV16 sees the key as being useless and wants to sweep it out for me. But Trend Micro is saying that if JV16 removes it, my security is going to be disabled. Trend Micro is doing it's job. Why is JV16 seeing this key as being useless when Trend Micro says it isn't?

tullik

Uriel wrote
The suggestion seems like a band aide fix to me. JV16 sees the key as being useless and wants to sweep it out for me. But Trend Micro is saying that if JV16 removes it, my security is going to be disabled. Trend Micro is doing it's job. Why is JV16 seeing this key as being useless when Trend Micro says it isn't?

You provided the details of a message from Trend Micro.

What are the details shown for this item by PowerTools in its results list?

uriel

tullik wrote
Uriel wroteThe suggestion seems like a band aide fix to me. JV16 sees the key as being useless and wants to sweep it out for me. But Trend Micro is saying that if JV16 removes it, my security is going to be disabled. Trend Micro is doing it's job. Why is JV16 seeing this key as being useless when Trend Micro says it isn't?

You provided the details of a message from Trend Micro.

What are the details shown for this item by PowerTools in its results list?

I fixed the problem.

I followed your suggestion and checked out the reported details in which Power Tools listed eight keys as stating that the files they referred to didn't exist. I used Power Tools handy feature by right clicking on the keys to explore the folders they were supposed to be in and discovered that they indeed were not there. So I went into the Trend Micro Internet Security Pro's toolbox and use the Trend Micro Support Diagnostic Toolkit application to turn off the self protection controls under the debug tab and rebooted. With Trend Micro disabled, I ran Power Tools once again and they still couldn't be removed. So I successfully used Power Tools to remove them manually. The handy features that Power Tools offered when I right clicked on the keys saved me much time by taking me right to the key in Microsoft's registry editor.

Everything is good now. I suspect that the keys were probably leftovers from the upgrade.

thx

tullik

I suspected that might have been the case from the "...\installer" part of the key in Trend Micro's message. : 8)

boofo

Norton Internet Security also has the self-protection mode. I just added Symantec and Norton to the exclude list and it no longer showed the keys, which were also protected from being deleted.