PDA

View Full Version : Windows Security Center. AntiVirusDisableNotify?



Oppressed
2006-01-06, 20:30
Hello :o

I am not sure where to post this? I don't believe it is a False positive as this entry did not appear on a Spybot Scan completed on Jan 02 but showed up in scans done yesterday before the definitions update and again today afterwards.

I don't know if it is something to do with SpyAxe or not so I did not want to add it to my previous topic.

If it is please advise?

Also I am running Resident TeaTimer which I thought would notify me of registry changes?

Thanks,
O

p.s. Similar Windows Security Center.AntiVirus ''Able'' and ''Disable'' Notify (Registry change) results showed on my Mom's computer yesterday when I installed and ran Spybot on it.

===

--- Report generated: 2006-01-05 18:41 ---

Windows Security Center.AntiVirusDisableNotify: Settings (Registry change, fixed)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify!=dword:0


--- Spybot - Search & Destroy version: 1.4 (build: 20050523) ---

2005-05-31 blindman.exe (1.0.0.1)
2005-11-03 S&D14 GUI PATCH.exe
2005-05-31 SpybotSD.exe (1.4.0.3)
2006-01-03 TeaTimer.exe (1.4.0.2)
2006-01-02 unins000.exe (51.41.0.0)
2005-05-31 Update.exe (1.4.0.0)
2005-05-31 advcheck.dll (1.0.2.0)
2005-05-31 aports.dll (2.1.0.0)
2005-05-31 borlndmm.dll (7.0.4.453)
2005-05-31 delphimm.dll (7.0.4.453)
2005-05-31 SDHelper.dll (1.4.0.0)
2005-05-31 Tools.dll (2.0.0.2)
2005-05-31 UnzDll.dll (1.73.1.1)
2005-05-31 ZipDll.dll (1.73.2.0)
2005-12-30 Includes\Cookies.sbi (*)
2005-12-30 Includes\Dialer.sbi (*)
2005-12-30 Includes\Hijackers.sbi (*)
2005-12-30 Includes\Keyloggers.sbi (*)
2005-12-30 Includes\Malware.sbi (*)
2005-12-30 Includes\PUPS.sbi (*)
2005-12-30 Includes\Revision.sbi (*)
2005-12-30 Includes\Security.sbi (*)
2005-12-30 Includes\Spybots.sbi (*)
2005-02-17 Includes\Tracks.uti
2005-12-30 Includes\Trojans.sbi (*)

===


--- Report generated: 2006-01-06 11:06 ---

Windows Security Center.AntiVirusDisableNotify: Settings (Registry change, fixed)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify!=dword:0


--- Spybot - Search & Destroy version: 1.4 (build: 20050523) ---

2005-05-31 blindman.exe (1.0.0.1)
2005-11-03 S&D14 GUI PATCH.exe
2005-05-31 SpybotSD.exe (1.4.0.3)
2006-01-03 TeaTimer.exe (1.4.0.2)
2006-01-02 unins000.exe (51.41.0.0)
2005-05-31 Update.exe (1.4.0.0)
2005-05-31 advcheck.dll (1.0.2.0)
2005-05-31 aports.dll (2.1.0.0)
2005-05-31 borlndmm.dll (7.0.4.453)
2005-05-31 delphimm.dll (7.0.4.453)
2005-05-31 SDHelper.dll (1.4.0.0)
2005-05-31 Tools.dll (2.0.0.2)
2005-05-31 UnzDll.dll (1.73.1.1)
2005-05-31 ZipDll.dll (1.73.2.0)
2006-01-06 Includes\Cookies.sbi (*)
2006-01-06 Includes\Dialer.sbi (*)
2006-01-06 Includes\Hijackers.sbi (*)
2006-01-06 Includes\Keyloggers.sbi (*)
2006-01-06 Includes\Malware.sbi (*)
2006-01-06 Includes\PUPS.sbi (*)
2006-01-06 Includes\Revision.sbi (*)
2006-01-06 Includes\Security.sbi (*)
2006-01-06 Includes\Spybots.sbi (*)
2005-02-17 Includes\Tracks.uti
2006-01-06 Includes\Trojans.sbi (*)

===

Oppressed
2006-01-07, 02:57
I found a partial answer by doing a Google search which brought me back here to the Safer Networking Forums.

http://forums.spybot.info/archive/index.php/t-167.html

http://forums.spybot.info/showpost.php?p=216&postcount=2

As indictated in the first link I did look at the Windows Security Center Alert Settings and I guess that the Spybot Fix Reset them to "On" position.

But since I KNOW I did not change them that means that what spybotsandra states in the second link "The reason why the changes are flagged by Spybot-S&D is that there are also malware programs that disable the notifications so the user doesn't take note of his security tools not being effective." could be an appropriate conclusion to make?