Results 1 to 4 of 4

Thread: 2 programs

  1. #1
    Member
    Join Date
    Nov 2005
    Posts
    39

    Default 2 programs

    Windows antivirus disable notify and Windows firewall disable notify were flagged by ver SB 1.3 so I chose to neglect them under programs.
    Is this ok to do?

  2. #2
    Senior Member
    Join Date
    Oct 2005
    Location
    Germany
    Posts
    5,263

    Default

    Hello,

    Spybot - Search & Destroy 1.4 has been detecting Security Risks (renamed to "Windows Security Center" on July 30) associated with Microsoft Security Center Registry changes. This is neither a false positive nor a bug. It is just an information.
    Spybot-S&D only wants to bring to your attention that "someone" disabled one or more notifications in the Windows Security Center, e.g. the notifications that your virus protection is not active or not up-to-date. If you changed the settings yourself you can safely tell Spybot-S&D to exclude those detections from further scans.
    In order to do so please right-click each in turn, then click "exclude this detection from future scans". That way, should any other part of security center settings change, Spybot-S&D will still detect those.
    The same is true if you have another security solution installed (like McAfee Security Center or Norton Internet Security). These programs do also disable the Windows Security Center in order to take care of things themselves.
    The reason why the changes are flagged by Spybot-S&D is that there are also malware programs that disable the notifications so the user doesn't take note of his security tools not being effective.

    Some more information is also available in our forum:
    http://forums.spybot.info/showthread.php?t=87

    Best regards
    Sandra
    Team Spybot

  3. #3
    Member
    Join Date
    Nov 2005
    Posts
    39

    Default Windows and Mcafee

    Thank you for the note-Please see the results of my query below.
    The following were flagged:
    1-Windows.Security.InternetExplorer
    2-Windows SecurityCenter.AntiVirusDisableNotify
    3-Windows SecurityCenter.FirewallDisableNotify
    4-Windows SecurityCenter.UpdatelDisableNotify

    I spoke with Mcafee techs and when their security center is installed it "takes over" for the above thereby flagging them as pups. When the Mcafee securuty center is uninstalled, the windows programs are restored to default.
    I hope this helps others.

  4. #4
    Spybot Advisor Team [Retired] md usa spybot fan's Avatar
    Join Date
    Oct 2005
    Posts
    5,859

    Default

    nowellp:

    I believe that McAfee technician that you talked to is incorrect (or only half right).

    If during installation you elect to for the McAfee SecurityCenter to be the default Security Center it will cause the following two detections in Spybot:
    • Windows Security Center.AntiVirusDisableNotify
    • Windows Security Center.FirewallDisableNotify

    In the 14 months that the following detection has been in Spybot, to the best of my knowledge, no one else has reported any relationship between McAfee and its detection.
    • Windows SecurityCenter.UpdatelDisableNotify

    The following is a relative new detection:
    • Windows.Security.InternetExplorer

    It detects a less restrictive security setting within Internet Explorer that was added to Internet Explorer with the introduction of Windows XP with SP2. From the following Microsoft article:

    Prior to Service Pack 2 the Local Machine zone allowed Web content to run with fewer restrictions since local content was considered to be secure. Unfortunately, attackers also try to take advantage of the Local Machine zone to elevate their privileges and compromise a computer."
    I am extremely skeptical that McAfee would remove the restriction that Microsoft added and compromise the security of your system.

    Getting an answer is one thing, learning is another.


    Microsoft Windows XP Home Edition running on a 2.40GHz IntelŪ PentiumŪ 4 Processor with 512 MB of RAM and a 533 MHz System Bus.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •