Solved

Windows Favorites folder keeps moving...

Posted on 2004-04-15
7
229 Views
Last Modified: 2012-08-13
Heres the deal....

Windows 2000 ran out of virtual memory, and after the reboot, the favorites menu appeared empty (when viewed from start, or from internet explorer) but the Documents and settings\username\favorites folder still contained its shortcuts....

Windows had reset itself to point the favorites folder to c:\winnt\favorites, and didn't want to give it up.

I started with editting the registry, changing the HKCU shell settings back to the proper c:\documents and settings\username\favorites, and editing HKLM shell settings to the proper %username%\favorites. You know what I'm talking about, and searched the registry for any other improper references and fixed them as well. Then deleted c:\winnt\favorites and rebooted. Well, windows rebuilt the c:\winnt\Favorites and replaced all the favorites references in the registry with the c:\winnt\favorites entry!

So I tried again, regedit, repair the entries, close and open regedit, yup changes were still there, deleted winnt\favorites, this time instead of shutting down and rebooting (in case it was changing them on shutdown) I hard booted the machine from windows, when it came back up, again, the folder was created in Winnt, and the registry was changed!

Anyone ever seen this, or can offer another opinion on how to fix it?

SD
0
Comment
Question by:SoundDoc
  • 4
7 Comments
 
LVL 11

Expert Comment

by:ewtaylor
ID: 10835704
You might want to install and run spybot it could be some malware that is doing it.
http://www.safer-networking.org/
0
 
LVL 7

Expert Comment

by:wtrmk74
ID: 10852168
install
HijackThis
http://www.spychecker.com/program/hijackthis.html
and post the log for review

thanks
wtrmk74
0
 
LVL 2

Author Comment

by:SoundDoc
ID: 10861177
Tried those. That was one of the first things I did.
Ran Ad-aware, ran Spybot search and destroy, machine is also running AV, did a full scan with PC-cillin, as well as a online scan with panda. (just to be sure.) nothing came up.

I've also uninstalled, and re-installed IE 6. plus all patches. No change, favorites still binds to the Winnt folder. I've also removed the user, and recreated the profile. Its manifests itself under all users, including the admin account on the machine.

I've pretty much ruled out malware and spyware as the cause. Any other ideas?

SD
0
Highfive + Dolby Voice = No More Audio Complaints!

Poor audio quality is one of the top reasons people don’t use video conferencing. Get the crispest, clearest audio powered by Dolby Voice in every meeting. Highfive and Dolby Voice deliver the best video conferencing and audio experience for every meeting and every room.

 
LVL 7

Expert Comment

by:wtrmk74
ID: 10935151
From command line

insert the windows2000 CD

type
sfc /scannow

this is the System File Checker to look for any corruptions or changes to your file structure

let us know
wtrmk74
0
 
LVL 7

Expert Comment

by:wtrmk74
ID: 10935270
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders

HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders

HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders

HKEY_USERS\S-1-5-21-606747145-484763869-1957994488-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders

HKEY_USERS\S-1-5-21-606747145-484763869-1957994488-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders

the last two entries are going to check the individual profiles stored in the registry......

let me know what you find....

all of these should have either the absolute path  ... ie...
C:\Documents and Settings\User\Favorites
or
%USERPROFILE%\Favorites
%ALLUSERSPROFILE%\Favorites

Thanks
wtrmk74
0
 
LVL 7

Accepted Solution

by:
wtrmk74 earned 250 total points
ID: 11023766
How is this going ?

wtrmk74
0

Featured Post

What Security Threats Are You Missing?

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

Suggested Solutions

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
Hyena v12.2 is now available for downloading and is available in English, French, German and Spanish versions.
In this seventh video of the Xpdf series, we discuss and demonstrate the PDFfonts utility, which lists all the fonts used in a PDF file. It does this via a command line interface, making it suitable for use in programs, scripts, batch files — any pl…
Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…

747 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now