Solved

Windows Favorites folder keeps moving...

Posted on 2004-04-15
7
235 Views
Last Modified: 2012-08-13
Heres the deal....

Windows 2000 ran out of virtual memory, and after the reboot, the favorites menu appeared empty (when viewed from start, or from internet explorer) but the Documents and settings\username\favorites folder still contained its shortcuts....

Windows had reset itself to point the favorites folder to c:\winnt\favorites, and didn't want to give it up.

I started with editting the registry, changing the HKCU shell settings back to the proper c:\documents and settings\username\favorites, and editing HKLM shell settings to the proper %username%\favorites. You know what I'm talking about, and searched the registry for any other improper references and fixed them as well. Then deleted c:\winnt\favorites and rebooted. Well, windows rebuilt the c:\winnt\Favorites and replaced all the favorites references in the registry with the c:\winnt\favorites entry!

So I tried again, regedit, repair the entries, close and open regedit, yup changes were still there, deleted winnt\favorites, this time instead of shutting down and rebooting (in case it was changing them on shutdown) I hard booted the machine from windows, when it came back up, again, the folder was created in Winnt, and the registry was changed!

Anyone ever seen this, or can offer another opinion on how to fix it?

SD
0
Comment
Question by:SoundDoc
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
7 Comments
 
LVL 11

Expert Comment

by:ewtaylor
ID: 10835704
You might want to install and run spybot it could be some malware that is doing it.
http://www.safer-networking.org/
0
 
LVL 7

Expert Comment

by:wtrmk74
ID: 10852168
install
HijackThis
http://www.spychecker.com/program/hijackthis.html
and post the log for review

thanks
wtrmk74
0
 
LVL 2

Author Comment

by:SoundDoc
ID: 10861177
Tried those. That was one of the first things I did.
Ran Ad-aware, ran Spybot search and destroy, machine is also running AV, did a full scan with PC-cillin, as well as a online scan with panda. (just to be sure.) nothing came up.

I've also uninstalled, and re-installed IE 6. plus all patches. No change, favorites still binds to the Winnt folder. I've also removed the user, and recreated the profile. Its manifests itself under all users, including the admin account on the machine.

I've pretty much ruled out malware and spyware as the cause. Any other ideas?

SD
0
Simplifying Server Workload Migrations

This use case outlines the migration challenges that organizations face and how the Acronis AnyData Engine supports physical-to-physical (P2P), physical-to-virtual (P2V), virtual to physical (V2P), and cross-virtual (V2V) migration scenarios to address these challenges.

 
LVL 7

Expert Comment

by:wtrmk74
ID: 10935151
From command line

insert the windows2000 CD

type
sfc /scannow

this is the System File Checker to look for any corruptions or changes to your file structure

let us know
wtrmk74
0
 
LVL 7

Expert Comment

by:wtrmk74
ID: 10935270
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders

HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders

HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders

HKEY_USERS\S-1-5-21-606747145-484763869-1957994488-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders

HKEY_USERS\S-1-5-21-606747145-484763869-1957994488-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders

the last two entries are going to check the individual profiles stored in the registry......

let me know what you find....

all of these should have either the absolute path  ... ie...
C:\Documents and Settings\User\Favorites
or
%USERPROFILE%\Favorites
%ALLUSERSPROFILE%\Favorites

Thanks
wtrmk74
0
 
LVL 7

Accepted Solution

by:
wtrmk74 earned 250 total points
ID: 11023766
How is this going ?

wtrmk74
0

Featured Post

Ransomware: The New Cyber Threat & How to Stop It

This infographic explains ransomware, type of malware that blocks access to your files or your systems and holds them hostage until a ransom is paid. It also examines the different types of ransomware and explains what you can do to thwart this sinister online threat.  

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
Originally, this post was published on Monitis Blog, you can check it here . In business circles, we sometimes hear that today is the “age of the customer.” And so it is. Thanks to the enormous advances over the past few years in consumer techno…
There's a multitude of different network monitoring solutions out there, and you're probably wondering what makes NetCrunch so special. It's completely agentless, but does let you create an agent, if you desire. It offers powerful scalability …
Michael from AdRem Software outlines event notifications and Automatic Corrective Actions in network monitoring. Automatic Corrective Actions are scripts, which can automatically run upon discovery of a certain undesirable condition in your network.…

617 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question