Results 1 to 11 of 11
  1. #1
    3 Star Lounger
    Join Date
    Dec 2009
    Location
    New Brunswick, Canada
    Posts
    290
    Thanks
    46
    Thanked 5 Times in 5 Posts

    Windows Security Center alert -is it real or fake

    I was helping someone with their Pc (XP SP3) and ran Malwarebytes, which found about 6 or 8 virii/trojans/malware. I didn't record which ones, I just had Malwarebytes remove them.

    After the re=boot (requested by Malwarebytes) to do the final cleanup, the "Microsoft Security center" alert shield shows ion the lower right in the tray. It indicates that the Windows updates are turned off, if i right click it. If I go to the security center it indicates that Updates are turned off.

    However if I go to system via control panel it shows that automatic updates are turned on.

    Is the warning a result of Windows being mixed up to the virii removal done by Malwarebytes or is this a sign that the Security Center alert is just a virus trying to get reinstalled. The alert looks real.

    Subsequent scans haven't found anything (Malwarebytes, Kasperskey (done in safe mode), and AVG) scans.

  2. #2
    Administrator
    Join Date
    Mar 2001
    Location
    St Louis, Missouri, USA
    Posts
    23,587
    Thanks
    5
    Thanked 1,059 Times in 928 Posts
    In the control panel applet try toggling Automatic Updates off then back on. See if it shows up in Security Center.

    If that does not work, try running SFC /SCANNOW from a command line.

    Joe

  3. #3
    Super Moderator CLiNT's Avatar
    Join Date
    Dec 2009
    Location
    California & Arizona
    Posts
    6,121
    Thanks
    160
    Thanked 609 Times in 557 Posts
    It's not uncommon to have problems after removing nasties from the operating system, ensure that they really are gone.You may then need to perform a repair, probably a non destruct reinstall type of repair.

  4. The Following User Says Thank You to CLiNT For This Useful Post:

    High Sierra (2012-02-20)

  5. #4
    Super Moderator
    Join Date
    Jun 2011
    Location
    New England
    Posts
    4,749
    Thanks
    171
    Thanked 650 Times in 573 Posts
    Re-registering five windows update .dll files has worked for some people in identical circumstances:

    Security center could not change your automatic updates settings

    Click Start, select Run and type:

    regsvr32 wuapi.dll
    regsvr32 wuaueng.dll
    regsvr32 atl.dll
    regsvr32 wucltui.dll
    regsvr32 wups.dll

    Press enter after each one and wait for the success message


    Bruce
    Last edited by BruceR; 2012-02-17 at 12:46.

  6. The Following 2 Users Say Thank You to BruceR For This Useful Post:

    DavidPierson (2012-02-26),High Sierra (2012-02-20)

  7. #5
    3 Star Lounger
    Join Date
    Dec 2009
    Location
    New Brunswick, Canada
    Posts
    290
    Thanks
    46
    Thanked 5 Times in 5 Posts
    Thanks for the help.

    I'll let you know if it works.

    EDIT: IT WORKED.
    Last edited by High Sierra; 2012-02-20 at 18:23.

  8. #6
    This user has been banned
    Join Date
    Jan 2012
    Location
    UK
    Posts
    23
    Thanks
    4
    Thanked 2 Times in 2 Posts
    Hi, High Sierra,

    It's a fake and I've been caught by this before......visiting the 'Microsoft Security Centre' takes you to a spoof page that scans your computer, detects a 1001 trojans/virii/spyware/, and downloads all sorts of nasties to your PC, when it offers to remove them.

    Check this out :

    http://windowssecrets.com/top-story/...-blow-account/

    ATB

    Dave

    ps: Microsofts security suite is called Microsoft Security Essentials, and if anything is going to scan your PC from Microsoft online, it wont be called anything other than Microsoft Security Essentials. (If you have'nt already got it, GET IT....it's free, regularly updated, and.......well,........ESSENTIAL !!! ).

    http://windows.microsoft.com/en-GB/w...ity-essentials
    Last edited by Hammerhead; 2012-02-24 at 04:20. Reason: I like editing.

  9. #7
    Super Moderator
    Join Date
    Jun 2011
    Location
    New England
    Posts
    4,749
    Thanks
    171
    Thanked 650 Times in 573 Posts
    Quote Originally Posted by Hammerhead View Post
    Hi, High Sierra,

    It's a fake and I've been caught by this before......visiting the 'Microsoft Security Centre' takes you to a spoof page that scans your computer, detects a 1001 trojans/virii/spyware/, and downloads all sorts of nasties to your PC, when it offers to remove them.

    Check this out :

    http://windowssecrets.com/top-story/...-blow-account/

    ATB

    Dave
    But in this case it was a genuine alert from Windows Security Center in the local Control Panel that it could no longer detect that Automatic Updates were enabled.

    There was no fake web page or online scan involved here.


    Quote Originally Posted by Hammerhead View Post
    ps: Microsofts security suite is called Microsoft Security Essentials, and if anything is going to scan your PC from Microsoft online, it wont be called anything other than Microsoft Security Essentials. (If you have'nt already got it, GET IT....it's free, regularly updated, and.......well,........ESSENTIAL !!! ).

    http://windows.microsoft.com/en-GB/w...ity-essentials
    Or Microsoft Safety Scanner. Or Microsoft Windows Malicious Software Removal Tool. Or Microsoft Standalone System Sweeper.

    Microsoft Security Essentials is great, but it's not the only Microsoft name you can trust to scan for malware.


    Bruce

  10. #8
    This user has been banned
    Join Date
    Jan 2012
    Location
    UK
    Posts
    23
    Thanks
    4
    Thanked 2 Times in 2 Posts
    Quote Originally Posted by BruceR View Post
    But in this case it was a genuine alert from Windows Security Center in the local Control Panel that it could no longer detect that Automatic Updates were enabled.

    There was no fake web page or online scan involved here.



    Or Microsoft Safety Scanner. Or Microsoft Windows Malicious Software Removal Tool. Or Microsoft Standalone System Sweeper.

    Microsoft Security Essentials is great, but it's not the only Microsoft name you can trust to scan for malware.


    Bruce
    Does Microsoft Safety Scanner, Malicious Software Removal Tool, and Microsoft Standalone System Sweeper operate as an upfront application? I think you'll find they run discretely, in the background, and never offer to take you to a 3rd party downloading site for definition updates or scans.

    If you read the original post, you'll see that the alert in the System tray is from Microsoft Security Centre..........not Windows Security Centre. There's no such thing as Microsoft Security Centre, and this is a sure-fire way to spot the LizaMoon infection.


    ATB,

    Dave
    Last edited by Hammerhead; 2012-02-24 at 18:32.

  11. #9
    Super Moderator
    Join Date
    Jun 2011
    Location
    New England
    Posts
    4,749
    Thanks
    171
    Thanked 650 Times in 573 Posts
    Quote Originally Posted by Hammerhead View Post
    Does Microsoft Safety Scanner, Malicious Software Removal Tool, and Microsoft Standalone System Sweeper operate as an upfront application? I think you'll find they run discretely, in the background, and never offer to take you to a 3rd party downloading site for definition updates or scans.
    At least the first of those three is an upfront application, which can't even be minimized while it's scanning.

    But my point was that it's not true to say that if Microsoft anything should be scanning your PC, it must be called Microsoft Security Essentials.


    Quote Originally Posted by Hammerhead View Post
    If you read the original post, you'll see that the alert in the System tray is from Microsoft Security Centre..........not Windows Security Centre. There's no such thing as Microsoft Security Centre, and this is a sure-fire way to spot the LizaMoon infection.
    I was believing the thread title, which seemed more logical. But in any case, it has been proven to be a Windows Security Center alert through the resolution which eliminated it.

    There was no 3rd party downloading site for definition updates or scans involved here, nor interaction with any web page. It was the aftermath of an infection, not one occurring.


    Bruce
    Last edited by BruceR; 2012-02-24 at 20:26.

  12. #10
    This user has been banned
    Join Date
    Jan 2012
    Location
    UK
    Posts
    23
    Thanks
    4
    Thanked 2 Times in 2 Posts
    Just as there was no genuine alert in the local Control Panel that it could no longer detect that Automatic Updates were enabled. Only a cheap looking alert box for Microsoft Security Centre in the System tray.

    High Sierra, for what its worth, I'd say it's the LizaMoon infection trying to re-install itself. If you think otherwise, go ahead and follow the on-screen instructions.

    Good luck,

    Dave

  13. #11
    3 Star Lounger
    Join Date
    Dec 2009
    Location
    New Brunswick, Canada
    Posts
    290
    Thanks
    46
    Thanked 5 Times in 5 Posts
    I just noticed all the activity on my thread. Sorry about the confusion caused by using Microsoft Security Center in the body of my post.

    The actual alert is a red shield on the task bar with a white 'X' in it. When you click on the shield it opens 'Windows Security Center'. This is the same window that opens if you go through Control panel. Try it on any un-infected XP system.

    Since applying the suggested solution (registering those dlls) the red shield no longer appears.

    The problem started after removing some nastiness via Malwarebytes.
    Last edited by High Sierra; 2012-02-25 at 09:03.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •