• Welcome Guest, to the Spybot Forums! It's 2025, and we just upgraded our forum software.

    Today is Safer Internet Day, and with our new forum, you can finally use passkeys to login. That was about time!

    Of course, you could ask if a forum is still useful, with so many social media networks out there where you might already have an account, and met a lot of users. You can now use your login from some of those networks to log in here. And by posting here, your question and data is stored on our servers and not automatically shared with a whole social media network.

    We'll also start using the forum for small bits of information, announcements and more again.

Search & destroy problem

B

buddysmokey

New member
I receive the following message after scanning with Search & Destroy:

Microsoft windows security center disabled and underneath it has:

(SBI$2EE20C9A9)Settings
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wscsv Registry change

Note I have Norton Internet Security

What do I have to do?
 
If the actual detection was for:

Code: 
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\[B]wscsvc[/b]
Not:

Code: 
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\[B]wscsv[/B]

In other words if the detection was for "...\Services\wscsvc" vs. "...\Services\wscsv", then the detection is because Norton disables the starting of the Windows Security Center Service and attempts to handle the monitoring of all essential security programs on it own.

You have three options:
  1. Leave everything as is and just ignore the detections when you get them during a Spybot "Check for problems".
  2. Restore the functionality of Windows Security Center as follows:
    • Open Norton Protection Center.
    • Click Options.
    • Check "Show messages from Windows Security Center", then click OK.
  3. Permanently ignore the detection within Spybot so that a "Check for problems" does not check for disabled Windows Security Center features. To exclude these items from future detections:
    • Run another scan.
    • Expand the detection if necessary (+ to the left of the detection).
    • Select the item (entry) that you want to exclude by left clicking on it to highlight it.
    • Then right click on highlighted detection.
    • Select either of the following from the list of options in the menu.
      • Exclude this detection from further searches
      • Exclude this product from further searches
    In other words left click to select then right click to display options. If you don't select (highlight) the item first the options menu is for the entire detection list.

    Since the Windows Security Center detections have been separated into individual "Products" to facilitate exclusion, you can also go into Spybot > Mode > Advanced mode > settings > Ignore products > in either the All products or Security.sbi tab and check the following Windows Security Center detection:
    • Microsoft.WindowsSecurityCenter_disabled
    Note: If you can't see the full name of the product, expand the Product column of the screen by placing the cursor in the column title bar between the Product and Detail columns until the column separator move symbol appears (cross with arrow heads pointing left and right), press and hold the left mouse button and drag the column separator to the right.
 
You must log in or register to reply here.
Back
Top