PDA

View Full Version : Search & destroy problem



buddysmokey
2008-11-22, 21:44
I receive the following message after scanning with Search & Destroy:

Microsoft windows security center disabled and underneath it has:

(SBI$2EE20C9A9)Settings
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wscsv Registry change

Note I have Norton Internet Security

What do I have to do?

md usa spybot fan
2008-11-22, 23:06
If the actual detection was for:


HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wscsvc
Not:


HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wscsv

In other words if the detection was for "...\Services\wscsvc" vs. "...\Services\wscsv", then the detection is because Norton disables the starting of the Windows Security Center Service and attempts to handle the monitoring of all essential security programs on it own.

You have three options:
Leave everything as is and just ignore the detections when you get them during a Spybot "Check for problems".
Restore the functionality of Windows Security Center as follows:
Open Norton Protection Center.
Click Options.
Check "Show messages from Windows Security Center", then click OK.
Permanently ignore the detection within Spybot so that a "Check for problems" does not check for disabled Windows Security Center features. To exclude these items from future detections:
Run another scan.
Expand the detection if necessary (+ to the left of the detection).
Select the item (entry) that you want to exclude by left clicking on it to highlight it.
Then right click on highlighted detection.
Select either of the following from the list of options in the menu.
Exclude this detection from further searches
Exclude this product from further searches
In other words left click to select then right click to display options. If you don't select (highlight) the item first the options menu is for the entire detection list.

Since the Windows Security Center detections have been separated into individual "Products" to facilitate exclusion, you can also go into Spybot > Mode > Advanced mode > settings > Ignore products > in either the All products or Security.sbi tab and check the following Windows Security Center detection:
Microsoft.WindowsSecurityCenter_disabled
Note: If you can't see the full name of the product, expand the Product column of the screen by placing the cursor in the column title bar between the Product and Detail columns until the column separator move symbol appears (cross with arrow heads pointing left and right), press and hold the left mouse button and drag the column separator to the right.