Re: Spyware From Microsoft?



Spybot apparently is the culprit. I was unaware of how it began treating
Windows Security Center. I remember the scan made a week or two ago.
Trusting Spybot, I accepted the fix. That's when I started getting that
System32 folder popping up at startup.



Am I better served with Windows Security Center activated or turned off and
McAfee handling the tasks? If McAfee should handle, how do I give control
back to that program? The fact that my McAfee window tells me the antivirus
protection is running is a possible indicator that whatever needs to be
turned on is, in fact, turned on. Right?



"Nepatsfan" <nepatsfan@xxxxxxxxxxx> wrote in message
news:memdnQnI_KtrjsXeRVn-pw@xxxxxxxxxxxxxx
> John Gregory wrote:
>> I've been using Windows XP for about two years. In the past
>> few days, I've begun getting an occasional window after
>> startup labeled "System32". Inside are numerous folders and
>> files. They've never been touched by me; I simply close the
>> window and move on.
>> Today I ran Spybot. It returned two items in registries;
>> both identified as being something from Microsoft.
>>
>> The first is:
>> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SecurityCenter\AntiVirusDisableNotify!=dword:0
>>
>> The second is the same through "SecurityCenter" then:
>> \FirewallDisableNotify!=dword:0
>>
>> I didn't mark Spyboth to fix the "problem" it sees. Should
>> I? If not, why would this be showing up just now after all
>> this time. It may not be relayed to that "System32" window
>> that popped up by it sure is a coincidence.
>
> They're probably unrelated issues. That said, it wouldn't hurt
> to run a scan with your antivirus program. Make sure it's been
> updated.
>
> When was the last time you ran Spybot? Over a month ago the
> makers of Spybot S & D decided to include a feature which would
> report if alerts that are generated by the Windows Security
> Center have been disabled. A number of antivirus programs
> (McAfee, Norton, etc.) disable the antivirus alert during
> installation. Unfortunately, some spyware does this as well so
> an up-to-date version of Spybot will report this behavior.
>
> If you want to test this, do the following: run Spybot and have
> it fix those two problems. Now restart your computer. At some
> point during the startup process you may receive a message from
> your AV program asking if you want it to stop Windows Security
> center from monitoring your AV protection. Answer yes. Run
> Spybot and you're going to see those errors showing up again.
> If you right click on the errors in Spybot you can choose to
> exclude them from future scans.
>
> From the Spybot web site:
>
> Why does Spybot-S&D flag changes in the Windows Security
> Center?
> http://www.safer-networking.org/en/faq/46.html
>
> Here are a few threads from the Spybot forum which
> discuss this issue:
>
> Antivirus Is Off Alert, after the latest defs update
> http://forums.net-integration.net/index.php?showtopic=32300
>
> Spybot Search And Destroy 1.4, Possible Problem or false
> positive
> http://forums.net-integration.net/index.php?showtopic=32260
>
> Security Risks, Is this a false positive?
> http://forums.net-integration.net/index.php?showtopic=32257
>
> As for the System32 folder opening, take a look at this
> article:
>
> System32 Folder Opens When Logging on to Windows XP
> http://support.microsoft.com/kb/q170086/
>
> Good luck
>
> Nepatsfan
>
>
>
>
>


.



Relevant Pages

  • Re: Trojan horse BackDoor.Generic3.EKW
    ... | I discovered the problem when I used Spybot S&D to scan my machine. ... There are changes made in the antivirus, firewall, and SP2update settings ... | Windows Security Center.AntiVirusDisableNotify: Settings (Registry change, ...
    (microsoft.public.security.virus)
  • RE: Memory Full Problem
    ... I ran Spybot Search and Destroy after updating and imunizing my computer. ... Product: Windows Security Center ... I ran HIjackThis and I posted the log at ... I think you make it difficult for yourself, by not following their advice ...
    (microsoft.public.windowsxp.newusers)
  • Re: Spybott security risk
    ... Hello Sandra from Team Spybot. ... > Windows Security Center: Settings ... > Since the download of the Detection Update from July 25, 2005, Spybot ...
    (microsoft.public.windowsxp.general)
  • Re: Win XP registry entry "...Security CenterAntiVirusDisableNotify!"
    ... > Windows Security Center.AntiVirusDisableNotify: Settings ... > (Registry change, nothing done) ... Recently the makers of Spybot S & D decided to ...
    (microsoft.public.windowsxp.security_admin)
  • Re: registry keys
    ... Setings (registry change, ... > run spybot. ... I have XP and Norton's edition antivirus and I ... Why does Spybot-S&D flag changes in the Windows Security ...
    (microsoft.public.windowsxp.security_admin)

Loading