cant remove

[lambo1989]

hi
spybot detects and then asks to fix a problem then apparently it does
but if i run spybot again it keeps finding and tries to fix problem
the problem is
Microsoft.WindowsSecurityCentre_disabled
cheers for any help

[md usa spybot fan]

Please post a log of the actual detection you are getting. To do that:

• Run another scan.
• When the scan completes, right click on the results list, select "Copy results to clipboard".
• Then paste those results to a new post in this thread.

Thanks

Added question:

Are you running under a Computer administrator account or a limited account?

[lambo1989]

as requested

Microsoft.WindowsSecurityCenter_disabled: Settings (Registry change, nothing done)
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wscsvc\Start!=W=2


cheers
for any help

[md usa spybot fan]

Windows Security Center service in Windows XP Service Pack 2 monitors system security settings and configurations. (firewall, anti-virus and Automatic Updates status).

The following Spybot-S&D detection indicates that Windows Security Center is not set to start automatically:

Microsoft.WindowsSecurityCenter_disabled: Settings (Registry change, nothing done)
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wscsvc\Start!=W=2

Spybot is looking for the following registry entry:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wscsvc]
"Start"=dword:00000002

The possible values of the "Start" entry in this key are:

• "Start"=dword:00000002 (Automatic)
• "Start"=dword:00000003 (Manual)
• "Start"=dword:00000004 (Disabled)

***************

I don't know why you can not reset Windows Security Center to start automatically by doing a "Fix selected problems" within Spybot-S&D.

Try resetting the start of Windows Security Center to automatic as follows:

• Click Start then Run.
• Type "Services.msc" (no quotes) in the Open block.
• Click OK.
• When the Services dialog opens, scroll down in the right pane and locate the "Security Center" entry in the list.
• Double click on the entry.
• In the Security Center Properties (Local Computer) dialog set the "Startup type" to "Automatic".
• Click Apply.
• If the "Service status" is Stopped, click Start. If Security Center was stopped and you have to start it, note any messages that you get besides the following pop-up with a progress bar:
  
  • Windows is attempting to start the following service on Local Computer
    Security Center
• After Windows Security Center starts, click OK.
• Exit from the Services dialog.
• Rerun a Spybot-S&D scan and see what happens.

[lambo1989]

hi
i followed steps but get this message
error 123 the filename, directory name, or volume label syntax is incorrect

so i will need more help
cheers

[md usa spybot fan]

lambo1989:

The fact that you can not start Security Center via "Services.msc" could explain why Spybot fails to fix the detection.

I personally wasn't able to find a solution to the problem you encountered. I did however receive a PM from Zenobia pointing to the following:

• "Error 1083" while attempting to start the Security Center service in Windows XP SP2
  http://windowsxp.mvps.org/wscsvcfix.htm

That article also claims that the wscsvcfix.exe will also fix the following:

• Could not start the Security Center service on Local Computer.
  Error 123: The filename, directory name, or volume label syntax is incorrect.

Since I never encountered any of the errors listed in that article and have never tried that fix, I must caution you that if you decide to try that fix that you do so entirely at your own risk.

[Jimmy]

I to have a similar problem with the windows security center disable notify being detected. I fix the problem rerun the search & Destroy and the the scan comes back clear ie no problems to report.Then a few days or weeks later when I run the search & Destroy the problem reappears. It has been going on for some time now possibly 3 or 4 months.
I do not use the windows security center, I have Norton Internet Security Professional installed.
On startup sometimes there is a windows warning box that the computer is at risk security is switched off. But by the time the computer is fully booted and the internet security icons appear in the notification area the warning disappears.
I automatically update with windows xp
is the threat a serious problem?

[md usa spybot fan]

Jimmy:

Unless you have the following detection then you do not have the same problem as lambo1989 has:

Microsoft.WindowsSecurityCenter_disabled: Settings (Registry change, nothing done)
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wscsvc\Start!=W=2

If these are the detections you are getting:

Windows Security Center.FirewallDisableNotify: Settings
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify!=dword:0

Windows Security Center.AntiVirusDisableNotify: Settings
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify!=dword:0

Please see the following thread:

• Spybot & Windows Security Centre.....warning
  http://forums.spybot.info/showthread.php?t=75

Including this post by bordello:

• http://forums.spybot.info/showthread...2092#post32092

If none of the detections above are what you are getting, please start your own thread and include the actual detections you are getting. To do that:

• Run another scan.
• When the scan completes, right click on the results list, select "Copy results to clipboard".
• Then paste those results into your new thread.