Printable View
On my last scan Spybot picked up the following potential problem: Windows Security Center.SP2Update.
Should I be ingoring this or should I allow Spybot to fix it? What I have read on the internet is a little ambiguous and doesn't give me a solution.
Sincerely,
Basil Zangare
It doesn't matter what you do. I would just fix it and forget it or delete the registry entry itself.
The registry entry and value that is being detected by Spybot is no longer meaningful. It was originally used to block the download of XP SP2, but that blocking has expired and is no longer recognized by Windows update.
I hope that was less ambiguous.
Background (ambiguous as it may be):
The detection:Indicates that the following registry entry is not equal ("!=") to dword:00000000 ("dword:0").
- Windows Security Center.SP2Update: Settings
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\DoNotAllowXPSP2!=dword:0From the following Microsoft articles I gather that you had (it expired) the installation of XP SP2 blocked:
- [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\DoNotAllowXPSP2]
Since the blocking only occurred when the registry entry was present and had a value dword:00000001, the registry entry can be deleted if is causing trouble.
- FAQ – Temporarily Blocking Windows XP SP2 delivery through Windows Update and Automatic Updates
http://www.microsoft.com/technet/pro.../sp2aumng.mspx
Temporarily Disabling Delivery of Windows XP Service Pack 2 Through Windows Update and Automatic Updates has Expired
http://www.microsoft.com/technet/pro.../sp2aumng.mspx
From:
- FAQ – Temporarily Blocking Windows XP SP2 delivery through Windows Update and Automatic Updates
http://www.microsoft.com/technet/pro.../sp2aumng.mspxQuote:
Q. What is the key value name and what are the value options?
A. The key value name is “DoNotAllowXPSP2”
If the value is ‘1’ delivery of Windows XP SP2 via WU and AU is disabled. If the value is not ‘1’ or if the key doesn’t exist, the system will be able to get Windows XP SP2 if the Windows Update site is accessible or if AU is configured to get updates from Windows Update.
I found that by entering the registry then going to edit, then to find. I typed in the words exactly as shown in the subject. I then deleted the entry. The value of this was 000. It seems to have worked because I nolonger get the balloons coming up every time I log on.
jms57:
The title of your posts indicates that you may have receive the following detection:
This thread was discussing this detection:Code:Windows Security Center.AntiVirusOverride: Settings
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusOverride!=dword:0
Those detections are different!Code:Windows Security Center.SP2Update: Settings
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\DoNotAllowXPSP2!=dword:0
Deleting the following registry it may adversely affect Window Security Center:
If you backed up the registry prior to deleting the entry, I suggest that you restore it.Code:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusOverride
How do you make backup and restore registry?Quote:
Originally Posted by md usa spybot fan
tnx
AngGoldstein:
See:
- How to back up and restore the registry in Windows
http://support.microsoft.com/kb/322756
When just editing the registry as jms57 apparently did, the easiest way to back up the registry is to just export that particular registry key so that if anything happens during the editing you can use the exported copy to restore.
like md usa spybot fan said. Always backup your registry before editing. Even if you are just modifying any random software registry key. The dependencies of the edited key could potentially cause your system to act abnormally. Not too mention taking extra precautions with core windows system related registry edits such as "security center". Good luck with the bk and restore. Take your time with it and google anything you are not certain about or post on the forum any questions.