Windows Security Center.SP2Update

B

bazangare

New member
On my last scan Spybot picked up the following potential problem: [highlight]Windows Security Center.SP2Update[/highlight].

Should I be ingoring this or should I allow Spybot to fix it? What I have read on the internet is a little ambiguous and doesn't give me a solution.

Sincerely,

Basil Zangare
 
It doesn't matter what you do. I would just fix it and forget it or delete the registry entry itself.

The registry entry and value that is being detected by Spybot is no longer meaningful. It was originally used to block the download of XP SP2, but that blocking has expired and is no longer recognized by Windows update.

I hope that was less ambiguous.

Background (ambiguous as it may be):

The detection:
  • Windows Security Center.SP2Update: Settings
    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\DoNotAllowXPSP2!=dword:0
Indicates that the following registry entry is not equal ("!=") to dword:00000000 ("dword:0").
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\DoNotAllowXPSP2]
From the following Microsoft articles I gather that you had (it expired) the installation of XP SP2 blocked:Since the blocking only occurred when the registry entry was present and had a value dword:00000001, the registry entry can be deleted if is causing trouble.

From:
Q. What is the key value name and what are the value options?
A. The key value name is “DoNotAllowXPSP2”

If the value is ‘1’ delivery of Windows XP SP2 via WU and AU is disabled. If the value is not ‘1’ or if the key doesn’t exist, the system will be able to get Windows XP SP2 if the Windows Update site is accessible or if AU is configured to get updates from Windows Update.
Click to expand...
 
Last edited:
Windows Security Center.Antivirus0 verride

I found that by entering the registry then going to edit, then to find. I typed in the words exactly as shown in the subject. I then deleted the entry. The value of this was 000. It seems to have worked because I nolonger get the balloons coming up every time I log on.
 
jms57:

The title of your posts indicates that you may have receive the following detection:

Code: 
Windows Security Center.AntiVirusOverride: Settings
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusOverride!=dword:0
This thread was discussing this detection:

Code: 
Windows Security Center.SP2Update: Settings
 HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\DoNotAllowXPSP2!=dword:0
Those detections are different!

Deleting the following registry it may adversely affect Window Security Center:

Code: 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusOverride
If you backed up the registry prior to deleting the entry, I suggest that you restore it.
 
AngGoldstein:

See:
When just editing the registry as jms57 apparently did, the easiest way to back up the registry is to just export that particular registry key so that if anything happens during the editing you can use the exported copy to restore.
 
like md usa spybot fan said. Always backup your registry before editing. Even if you are just modifying any random software registry key. The dependencies of the edited key could potentially cause your system to act abnormally. Not too mention taking extra precautions with core windows system related registry edits such as "security center". Good luck with the bk and restore. Take your time with it and google anything you are not certain about or post on the forum any questions.
 
You must log in or register to reply here.
Back
Top