Windows Security Center.SP2Update - Safer-Networking Forums

bazangare · 2005-10-26, 18:38

On my last scan Spybot picked up the following potential problem: Windows Security Center.SP2Update.

Should I be ingoring this or should I allow Spybot to fix it? What I have read on the internet is a little ambiguous and doesn't give me a solution.

Sincerely,

Basil Zangare

md usa spybot fan · 2005-10-26, 19:47

It doesn't matter what you do. I would just fix it and forget it or delete the registry entry itself.

The registry entry and value that is being detected by Spybot is no longer meaningful. It was originally used to block the download of XP SP2, but that blocking has expired and is no longer recognized by Windows update.

I hope that was less ambiguous.

Background (ambiguous as it may be):

The detection:

Windows Security Center.SP2Update: Settings
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\DoNotAllowXPSP2!=dword:0

Indicates that the following registry entry is not equal ("!=") to dword:00000000 ("dword:0").

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\DoNotAllowXPSP2]

From the following Microsoft articles I gather that you had (it expired) the installation of XP SP2 blocked:

FAQ – Temporarily Blocking Windows XP SP2 delivery through Windows Update and Automatic Updates
http://www.microsoft.com/technet/pro.../sp2aumng.mspx

Temporarily Disabling Delivery of Windows XP Service Pack 2 Through Windows Update and Automatic Updates has Expired
http://www.microsoft.com/technet/pro.../sp2aumng.mspx

Since the blocking only occurred when the registry entry was present and had a value dword:00000001, the registry entry can be deleted if is causing trouble.

From:

FAQ – Temporarily Blocking Windows XP SP2 delivery through Windows Update and Automatic Updates
http://www.microsoft.com/technet/pro.../sp2aumng.mspx

Quote:

Q. What is the key value name and what are the value options?
A. The key value name is “DoNotAllowXPSP2”

If the value is ‘1’ delivery of Windows XP SP2 via WU and AU is disabled. If the value is not ‘1’ or if the key doesn’t exist, the system will be able to get Windows XP SP2 if the Windows Update site is accessible or if AU is configured to get updates from Windows Update.

jms57 · 2006-07-04, 20:27

I found that by entering the registry then going to edit, then to find. I typed in the words exactly as shown in the subject. I then deleted the entry. The value of this was 000. It seems to have worked because I nolonger get the balloons coming up every time I log on.

md usa spybot fan · 2006-07-04, 20:53

jms57:

The title of your posts indicates that you may have receive the following detection:

Code:

Windows Security Center.AntiVirusOverride: Settings
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusOverride!=dword:0

This thread was discussing this detection:

Code:

Windows Security Center.SP2Update: Settings
 HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\DoNotAllowXPSP2!=dword:0

Those detections are different!

Deleting the following registry it may adversely affect Window Security Center:

Code:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusOverride

If you backed up the registry prior to deleting the entry, I suggest that you restore it.

AngGoldstein · 2008-03-13, 11:44

Quote:

Originally Posted by md usa spybot fan

If you backed up the registry prior to deleting the entry, I suggest that you restore it.

How do you make backup and restore registry?

tnx

md usa spybot fan · 2008-03-13, 13:28

AngGoldstein:

See:

How to back up and restore the registry in Windows
http://support.microsoft.com/kb/322756

When just editing the registry as jms57 apparently did, the easiest way to back up the registry is to just export that particular registry key so that if anything happens during the editing you can use the exported copy to restore.

mateon3000 · 2009-03-20, 02:08

like md usa spybot fan said. Always backup your registry before editing. Even if you are just modifying any random software registry key. The dependencies of the edited key could potentially cause your system to act abnormally. Not too mention taking extra precautions with core windows system related registry edits such as "security center". Good luck with the bk and restore. Take your time with it and google anything you are not certain about or post on the forum any questions.

2005-10-26, 18:38	#1
bazangare Junior Member Join Date: Oct 2005 Posts: 1	Windows Security Center.SP2Update On my last scan Spybot picked up the following potential problem: Windows Security Center.SP2Update. Should I be ingoring this or should I allow Spybot to fix it? What I have read on the internet is a little ambiguous and doesn't give me a solution. Sincerely, Basil Zangare

2006-07-04, 20:27	#3
jms57 Junior Member Join Date: Jul 2006 Posts: 1	Windows Security Center.Antivirus0 verride I found that by entering the registry then going to edit, then to find. I typed in the words exactly as shown in the subject. I then deleted the entry. The value of this was 000. It seems to have worked because I nolonger get the balloons coming up every time I log on.

2006-07-04, 20:53	#4
md usa spybot fan Spybot Advisor Team Join Date: Oct 2005 Posts: 5,879	jms57: The title of your posts indicates that you may have receive the following detection: Code: Windows Security Center.AntiVirusOverride: Settings HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusOverride!=dword:0 This thread was discussing this detection: Code: Windows Security Center.SP2Update: Settings HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\DoNotAllowXPSP2!=dword:0 Those detections are different! Deleting the following registry it may adversely affect Window Security Center: Code: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusOverride If you backed up the registry prior to deleting the entry, I suggest that you restore it. __________________ Getting an answer is one thing, learning is another. Microsoft Windows XP Home Edition running on a 2.40GHz Intel® Pentium® 4 Processor with 512 MB of RAM and a 533 MHz System Bus.

2008-03-13, 13:28	#6
md usa spybot fan Spybot Advisor Team Join Date: Oct 2005 Posts: 5,879	AngGoldstein: See: How to back up and restore the registry in Windows http://support.microsoft.com/kb/322756 When just editing the registry as jms57 apparently did, the easiest way to back up the registry is to just export that particular registry key so that if anything happens during the editing you can use the exported copy to restore. __________________ Getting an answer is one thing, learning is another. Microsoft Windows XP Home Edition running on a 2.40GHz Intel® Pentium® 4 Processor with 512 MB of RAM and a 533 MHz System Bus.

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

2009-03-20, 02:08	#7
mateon3000 Junior Member Join Date: Mar 2009 Posts: 7	like md usa spybot fan said. Always backup your registry before editing. Even if you are just modifying any random software registry key. The dependencies of the edited key could potentially cause your system to act abnormally. Not too mention taking extra precautions with core windows system related registry edits such as "security center". Good luck with the bk and restore. Take your time with it and google anything you are not certain about or post on the forum any questions.