PDA

View Full Version : Need information on Windows Security Center warnings I'm getting



SteveP555
2006-01-19, 16:43
I have been getting three registry-based Windows Security Center problems flagged for the last couple of months and I'm not sure why. S&D shows the problems in red. I tried removing the problems once, but it caused operation problems with the associated programs. What are these registry items and why are they flagged as problems?

I do have Windows XP's firewall and automatic update disabled. I use a different firewall and I do manual downloads. Are two of these registry problems just related to this? I also use a different antivirus program than one that may be offered by XP.

The keys are:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntivirusDisableNotify!=dword:0

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify!=dword:0

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdateDisableNotify!=dword:0

If these are problems just related to me turning off certain XP features, it sounds like I can have S&D ignore these entries. Correct?

Thanks,
Steve

spybotsandra
2006-01-19, 16:46
Hello,

Since the Detections Update from July 25, 2005, Spybot - Search & Destroy 1.4 has been detecting Security Risks (renamed to "Windows Security Center" on July 30) associated with Microsoft Security Center Registry changes. This is neither a false positive nor a bug. It is just an information.
Spybot-S&D only wants to bring to your attention that "someone" disabled one or more notifications in the Windows Security Center, e.g. the notifications that your virus protection is not active or not up-to-date. If you changed the settings yourself you can safely tell Spybot-S&D to exclude those detections from further scans.
In order to do so please right-click each in turn, then click "exclude this detection from future scans". That way, should any other part of security center settings change, Spybot-S&D will still detect those.
The same is true if you have another security solution installed (like McAfee Security Center or Norton Internet Security). These programs do also disable the Windows Security Center in order to take care of things themselves.
The reason why the changes are flagged by Spybot-S&D is that there are also malware programs that disable the notifications so the user doesn't take note of his security tools not being effective.

Some more information is also available in our forum:
http://forums.spybot.info/showthread.php?t=87

Best regards
Sandra
Team Spybot

SteveP555
2006-01-19, 20:54
Thank you very much.
Steve