PDA

View Full Version : Recurring Error



Kaput
2007-03-13, 16:03
On more that one occasion recently I rcve the same error after doing a scan.
Unfortunately I am not efficient in using the method of inserting an image so I am going to quote what error appears on more than one occasion even after
marking it to be fixed

quote
MicrosoftSecurityCenter.AntivirusOverride: Settings (Registry change, nothing done)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusOverride!=dword:0
unquote

Can someone possibly help/advise what causes this error recurring and how to possibly clear completely.

Thanks

spybotsandra
2007-03-13, 16:21
Hello,

Spybot - Search & Destroy 1.4 has been detecting Security Risks (renamed to "Windows Security Center" on July 30) associated with Microsoft Security Center Registry changes. This is neither a false positive nor a bug. It is just an information.
Spybot-S&D only wants to bring to your attention that "someone" disabled one or more notifications in the Windows Security Center, e.g. the notifications that your virus protection is not active or not up-to-date. If you changed the settings yourself you can safely tell Spybot-S&D to exclude those detections from further scans.
In order to do so please right-click each in turn, then click "exclude this detection from future scans". That way, should any other part of security center settings change, Spybot-S&D will still detect those.
The same is true if you have another security solution installed (like McAfee Security Center or Norton Internet Security). These programs do also disable the Windows Security Center in order to take care of things themselves.
The reason why the changes are flagged by Spybot-S&D is that there are also malware programs that disable the notifications so the user doesn't take note of his security tools not being effective.

Some more information is also available in our forum:
http://forums.spybot.info/showthread.php?t=87

Best regards
Sandra
Team Spybot

md usa spybot fan
2007-03-13, 17:18
Kaput:

I would like to elaborate a little more.

As spybotsandra (http://forums.spybot.info/member.php?u=5) the names of this type of detection have changed. Is the detection actually:
Microsoft.WindowsSecurityCenter.AntiVirusOverride
As opposed to:
MicrosoftSecurityCenter.AntivirusOverride
See Note #1 below about posting logs of the actual detections you get.

For this detection:


Microsoft.WindowsSecurityCenter.AntiVirusOverride: Settings (Registry change, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusOverride!=dword:0
I suggest that you go into Start > Control Panel > Security Center > look at the right hand side of the window and check the settings under "Virus Protection" (expanding if necessary). I believe that you have overridden the protections and that you will find a button labeled "Recommendations". If you click on the "Recommendations" button I believe that you will get a window that indicates something like:
I have an antivirus program that I'll monitor myself.
Note: Windows won't monitor your virus protection status and won't send you alerts if it is off or out of date.
If you have checked that statement Windows Security Center won't monitor your virus protection status and won't send you alerts if it is off or out of date.

Windows Security Center is capable of monitoring most major anti-virus programs. What anti-virus are you using?

You indicated that the error reoccurs. If you are doing a "Fix selected problems" on this detection after doing a "Check for problem", Spybot should be resetting the Windows Security Center "Virus Protection" and turning it on. Depending on the security package you are running, if "Virus Protection" is being turned off and you or your security packageare not doing it, it could be an indication of a problem or possible infection.

----------------------------------------------------------

Note #1: To post a log of the actual detections you get (the log also contains information about the version of Spybot and update level of detection rules):
When a scan or scan/fix completes, you can right click on the results list and select "Copy results to clipboard".
The log can then be pasted (Ctrl+V) into the forum.

Kaput
2007-03-18, 23:13
HI Guys

Apologies for not responding sooner but circumstances beyond my control prevented my so doing.

Thanks for your input. After carrying out your instructions problem has been resolved and everything is working just fine

Kaput