microsoft.securitycenter_disabled (except...I don't have security center??? O__O)

C

ChiruPon

New member
I contracted Vundo and Rogue trojans recently, which prevented me from using the computer in normal mode. (A blue "file dump" screen would come up as soon as I'd put in my password and press "enter"). Even in safe mode, a bunch of porno pop ups would come up and all the sites I went to would redirect. I managed to fix it using S&D and Malwarebytes, but now S&D is saying that there's this "microsoft.securitycenter_disabled" thing on my computer- which I've fixed almost everytime I use S&D, but it magically comes up again.

So I went into services to find it and take care of it (I looked through similar posts on the forum), except it's not there. Not only that, when I go to the Control Panel, there is no Security Center, but just something called "Security" (I thought they were the same thing at first, but I am pretty sure now that they are not).

63270504.png
 
By this detection, Spybot is telling you that your Security Center (place where it shows your firewall, automatic update, and anti-virus protection) is disabled. So your machine will not tell you anything if your firewall should be silently disabled. Not a good sign.

I would suggest you visit this post. I just made it recently, another member has a sticky situation like yours.
http://forums.spybot.info/showpost.php?p=356478&postcount=2
-
 
drragostea said:
It appears that you have a rogue AV infection. Usually this type of malware will prompt you with a fake Windows bubble and tell you your machine is infected and go buy their software. Not a good sign.

For the time being, I would suggest you start your own thread in the Malware Removal Forums with a HJT log and wait for a helper. I am saying this because this looks like a bad infection. Please read the post below (just follow the links):
http://forums.spybot.info/showpost.php?p=356308&postcount=2
-
Click to expand...
But nothing prompted me to download their software. O__O And both Malwarebytes and McAfee haven't detected anything. I just can't figure out why I can't find Security Center in my services and why S&D keeps finding the same thing (microsoft.securitycenter_disabled).
 
Oh yeah. I never noticed this until now, but it kind of bothers me:
79997796.png

I cleared the viruses with MBAM and S&D, so the porno pop-ups don't come up any more, but it seems the stuff is still there?? Is there a way to get rid of it?
 
I have never mentioned you have rogue AV software on your machine, merely another situation where the machine appears to be infected.

The whole reason I thought you might want to consider visiting the Malware Removal Forums is because you mentioned you had Vundo and rogue malware problems lately.

If you are running Windows Vista or Windows 7, (not an official explanation) this "Security Center" (they have it in Windows XP) service is integrated into the Control Panel or where you find the System Maintenance settings. In Windows 7 it is in the Action Center.

It is already good news that Spybot-Search&Destroy and MBAM have came back clean with scans and the pop ups are not returning. It appears that Spybot has removed it successfully.

Your screenshot (my guess) is McAfee scanning the registry... scanning the portion of the registry where bad/blocked/blacklisted domains reside. Do you recall Spybot's Immunization (or another form of using the HOSTS file to avoid accidentally stepping onto a malicious domain)? Well, that is what you are seeing. These X rated sites are placed in your HOSTS file, thus if you attempt to visit them your web browser will automatically tell that the domain cannot be reached.
 
drragostea said:

Your screenshot (my guess) is McAfee scanning the registry... scanning the portion of the registry where bad/blocked/blacklisted domains reside. Do you recall Spybot's Immunization (or another form of using the HOSTS file to avoid accidentally stepping onto a malicious domain)? Well, that is what you are seeing. These X rated sites are placed in your HOSTS file, thus if you attempt to visit them your web browser will automatically tell that the domain cannot be reached.
Click to expand...
Oh okay. I thought it was something bad. xD
So that means there's nothing wrong with my computer right?
Thanks for the help then. =D
 
You must log in or register to reply here.
Back
Top