Re: Spyware From Microsoft?

This is just my opinion, but I'd let McAfee's Security Center
take control from the Windows Security Center.

To see if the McAfee Security Center is in charge, check the
following:

Right click on your Taskbar at the bottom of the screen and
select Task Manager from the menu.
1. In Task Manager, look for an entry named Mcdetect.exe.
2. Go to Start -> Run and enter services.msc in the Open box.
Click OK.
In the right hand pane, look for "McAfee WSC Integration".
Make sure Started is displayed in the Status column and
Automatic in the Startup Type column.
If that's not the case you'll need to right click on it and
select Properties from the menu.
Make the appropriate changes on the General tab.
3. Go to Start -> Control Panel and double click on Security
Center.
In the left hand column, click on "Change the way Security
Center alerts me".
If McAfee's security center is in control you'll see an
empty box next to Virus Protection. The box next to
Firewall will be empty as well if you're using a firewall
program supplied by McAfee or another third party.

Nepatsfan


John Gregory wrote:
> Spybot apparently is the culprit. I was unaware of how it
> began treating Windows Security Center. I remember the scan
> made a week or two ago. Trusting Spybot, I accepted the fix.
> That's when I started getting that System32 folder popping
> up at startup.
>
>
> Am I better served with Windows Security Center activated or
> turned off and McAfee handling the tasks? If McAfee should
> handle, how do I give control back to that program? The fact
> that my McAfee window tells me the antivirus protection is
> running is a possible indicator that whatever needs to be
> turned on is, in fact, turned on. Right?
>
>
> "Nepatsfan" <nepatsfan@xxxxxxxxxxx> wrote in message
> news:memdnQnI_KtrjsXeRVn-pw@xxxxxxxxxxxxxx
>> John Gregory wrote:
>>> I've been using Windows XP for about two years. In the past
>>> few days, I've begun getting an occasional window after
>>> startup labeled "System32". Inside are numerous folders and
>>> files. They've never been touched by me; I simply close the
>>> window and move on.
>>> Today I ran Spybot. It returned two items in registries;
>>> both identified as being something from Microsoft.
>>>
>>> The first is:
>>> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SecurityCenter\AntiVirusDisableNotify!=dword:0
>>>
>>> The second is the same through "SecurityCenter" then:
>>> \FirewallDisableNotify!=dword:0
>>>
>>> I didn't mark Spyboth to fix the "problem" it sees. Should
>>> I? If not, why would this be showing up just now after all
>>> this time. It may not be relayed to that "System32" window
>>> that popped up by it sure is a coincidence.
>>
>> They're probably unrelated issues. That said, it wouldn't
>> hurt to run a scan with your antivirus program. Make sure
>> it's been updated.
>>
>> When was the last time you ran Spybot? Over a month ago the
>> makers of Spybot S & D decided to include a feature which
>> would report if alerts that are generated by the Windows
>> Security Center have been disabled. A number of antivirus
>> programs (McAfee, Norton, etc.) disable the antivirus alert
>> during installation. Unfortunately, some spyware does this
>> as well so an up-to-date version of Spybot will report this
>> behavior. If you want to test this, do the following: run
>> Spybot and
>> have it fix those two problems. Now restart your computer.
>> At some point during the startup process you may receive a
>> message from your AV program asking if you want it to stop
>> Windows Security center from monitoring your AV protection.
>> Answer yes. Run Spybot and you're going to see those errors
>> showing up again. If you right click on the errors in
>> Spybot you can choose to exclude them from future scans.
>>
>> From the Spybot web site:
>>
>> Why does Spybot-S&D flag changes in the Windows Security
>> Center?
>> http://www.safer-networking.org/en/faq/46.html
>>
>> Here are a few threads from the Spybot forum which
>> discuss this issue:
>>
>> Antivirus Is Off Alert, after the latest defs update
>> http://forums.net-integration.net/index.php?showtopic=32300
>>
>> Spybot Search And Destroy 1.4, Possible Problem or false
>> positive
>> http://forums.net-integration.net/index.php?showtopic=32260
>>
>> Security Risks, Is this a false positive?
>> http://forums.net-integration.net/index.php?showtopic=32257
>>
>> As for the System32 folder opening, take a look at this
>> article:
>>
>> System32 Folder Opens When Logging on to Windows XP
>> http://support.microsoft.com/kb/q170086/
>>
>> Good luck
>>
>> Nepatsfan







.

Relevant Pages

  • Re: Asking about anti-virus programs
    ... I believe I have enabled the one that came with McAfee, ... because "Microsoft Windows Update" flagged it. ... than my firewall is enabled. ... There are also security updates for Office at ...
    (microsoft.public.security)
  • Re: cant update XP, Yes I had the vundo
    ... Your McAfee app will NOT be able to clean all of this up. ... Avoid McAfee Internet Security freebie and AVG. ... since expired and/or the machine's not been kept fully-patched at Windows ...
    (microsoft.public.windowsupdate)
  • Re: Asking about anti-virus programs
    ... > McAfee one already on your machine? ... > 3) Keep windows updated via www.microsoft.com/windowsupdate. ... > the security settings in Internet Explorer you'll see how to make IE ... >> did install the Microsoft Security MS03-026 within less ...
    (microsoft.public.security)
  • Asking about anti-virus programs
    ... Any experts out there that can answer security protection ... I purchased the Windows XP, hp pavilion 780n with the 950 ... I figured McAfee was fine and that I ...
    (microsoft.public.security)
  • RE: Windows Security Center Hack
    ... I have AVG Antivirus, Windows Defender, ... Sygate Firewall, Spybot, CWShredder, CCleaner, Ad-Aware, and Spyware Doctor ... "Windows Security Center Firewall Override". ...
    (microsoft.public.security)
Loading