Re: Win XP registry entry "\...\Security Center\AntiVirusDisableNotify!"

From: Nepatsfan (nepatsfan_at_SBXXXIX.com)
Date: 08/05/05 

Date: Fri, 5 Aug 2005 16:47:27 -0400

Stephen Anders wrote:
> Spybot Search and Destroy found these registry entries:-
>
> Windows Security Center.AntiVirusDisableNotify: Settings
> (Registry change, nothing done)
> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security
> Center\AntiVirusDisableNotify!=dword:0
>
> Windows Security Center.AntiVirusOverride: Settings
> (Registry change, nothing done)
> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security
> Center\AntiVirusOverride!=dword:0
>
> Is this good, or do I need to do something?
>
> Steve.

It depends. Recently the makers of Spybot S & D decided to
include a feature which would report if alerts that are
generated by the Windows Security center have been disabled. A
number of antivirus programs (McAfee, Norton, etc.) disable the
antivirus alert during installation. Unfortunately, some
spyware does that as well so an up-to-date version of Spybot
will report this behavior.

If you want to test this, do the following: run Spybot and have
it fix those two problems. Now restart your computer. At some
point during the startup process you may receive a message from
your AV program asking if you want it to stop Windows Security
center from monitoring your AV protection. Answer yes. Run
Spybot and you're going to see those errors showing up again.
If you right click on the errors in Spybot you can choose to
exclude them from future scans.

Here are a couple of threads from the Spybot forum which
discuss this issue:

Antivirus Is Off Alert, after the latest defs update
http://forums.net-integration.net/index.php?showtopic=32300

Spybot Search And Destroy 1.4, Possible Problem or false
postivie
http://forums.net-integration.net/index.php?showtopic=32260

Security Risks, Is this a false positive?
http://forums.net-integration.net/index.php?showtopic=32257

Relevant Pages

  • Re: Trojan horse BackDoor.Generic3.EKW
    ... | I discovered the problem when I used Spybot S&D to scan my machine. ... There are changes made in the antivirus, firewall, and SP2update settings ... | Windows Security Center.AntiVirusDisableNotify: Settings (Registry change, ...
    (microsoft.public.security.virus)
  • Trojan horse BackDoor.Generic3.EKW
    ... My daughter clicked on a link and I got infected with this virus. ... There are changes made in the antivirus, firewall, and SP2update settings ... Windows Security Center.AntiVirusDisableNotify: Settings (Registry change, ...
    (microsoft.public.security.virus)
  • Re: group policy disables firewall - virus result
    ... > What happens is when I try and chance the firewall or Windows Security ... > settings it says it is being controlled by Group Policy. ... That still is ON but no Firewall. ... > Windows Security Center.FirewallOverride: Settings (Registry change, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Spyware From Microsoft?
    ... Trusting Spybot, I accepted the fix. ... Am I better served with Windows Security Center activated or turned off and ... The fact that my McAfee window tells me the antivirus ... > to run a scan with your antivirus program. ...
    (microsoft.public.windowsxp.configuration_manage)
  • RE: Memory Full Problem
    ... I ran Spybot Search and Destroy after updating and imunizing my computer. ... Product: Windows Security Center ... I ran HIjackThis and I posted the log at ... I think you make it difficult for yourself, by not following their advice ...
    (microsoft.public.windowsxp.newusers)
Loading