Security Center Notification

[Daave]

I am running Windows XP Home, SP3.

Since I visit Windows Update twice a month, I prefer to have Automatic
Updates turned off.

Lately, what I have noticed is that once a week, an icon for the
Security Center appears in the System Tray, alerting me that Automatic
Updates has been turned off. I never used to get this message; up until
recently, because the box next to "Automatic Updates" in Alert Settings
was unchecked, there would be no alerts. But recently, this happens once
a week!

So even though I uncheck the box, in one week, the check comes back!

I even looked in the registry at:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security
Center\UpdatesDisableNotify

The value should have been 1, but it was 0. (After I unchecked the box,
it did change to 1, but in another week it will go back once more to 0.)

I am not aware of any changes other than Windows Updates. I do have
Spybot Search & Destroy and MBAM installed FWIW (I wonder if a recent
MBAM update is repsonsible). For antivirus, I use ClamWin. I have also
used David Lipman's Multi-AV, and I see no evidence of malware.

Ideas, anyone.

 

[Guest]

Go to the security centre, click the bottom-left link & untick those 3 boxes
which will stop this for antivirus, automatic upodates...

 

[Jose]

I am running Windows XP Home, SP3.

Since I visit Windows Update twice a month, I prefer to have Automatic
Updates turned off.

Lately, what I have noticed is that once a week, an icon for the
Security Center appears in the System Tray, alerting me that Automatic
Updates has been turned off. I never used to get this message; up until
recently, because the box next to "Automatic Updates" in Alert Settings
was unchecked, there would be no alerts. But recently, this happens once
a week!

So even though I uncheck the box, in one week, the check comes back!

I even looked in the registry at:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security
Center\UpdatesDisableNotify

The value should have been 1, but it was 0. (After I unchecked the box,
it did change to 1, but in another week it will go back once more to 0.)

I am not aware of any changes other than Windows Updates. I do have
Spybot Search & Destroy and MBAM installed FWIW (I wonder if a recent
MBAM update is repsonsible). For antivirus, I use ClamWin. I have also
used David Lipman's Multi-AV, and I see no evidence of malware.

Ideas, anyone.

It is MBAM.

If you turn off any of the security alerts, MBAM will detect it and
then you are offered the opportunity to fix it on the next reboot, or
you can add it to the MBAM ignore list and not be bothered again.

MBAM reports registry changes thusly, even though there is no
quarantining or deleting to do:

HKLM\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify
(Disabled.SecurityCenter)
-> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

MBAM can't tell if the perhaps significant change from normal
configuration settings was made by you on purpose or malicious
software but decides it is worth bringing to your attention so you can
decide what to do about it.

That's nice.

Start, Run wscui.cpl to get to the Security Centr stuff with fewer
mouse clicks.

 

[Daave]

It is MBAM.

If you turn off any of the security alerts, MBAM will detect it and
then you are offered the opportunity to fix it on the next reboot, or
you can add it to the MBAM ignore list and not be bothered again.

MBAM reports registry changes thusly, even though there is no
quarantining or deleting to do:

HKLM\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify
(Disabled.SecurityCenter)
-> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

MBAM can't tell if the perhaps significant change from normal
configuration settings was made by you on purpose or malicious
software but decides it is worth bringing to your attention so you can
decide what to do about it.

That's nice.

Start, Run wscui.cpl to get to the Security Centr stuff with fewer
mouse clicks.

Thanks for the helpful explanation, Jose.

 

[Jose]

Thanks for the helpful explanation, Jose.

No problemo.

 

[PA Bear [MS MVP]]

Tip: Enable Automatic Updates but select the Notify Only option so that
you'll be aware of newly-released updates but won't have to install them via
AU (unless you approve the download and the install).

How to configure and use Automatic Updates in WinXP:
http://support.microsoft.com/kb/306525

 

[Guest]

Those registry keys are ok to change but applications like Spybot Search &
Destroy, Symantec Antivirus... pick up that these vales are changed & reset
them. Just be aware of this

--
SPAMCOP User

Thanks for the helpful explanation, Jose.

No problemo.