Windows Security Center being DISABLED!

[Guest]

I have spyware and/or viruses disabling my Windows Security Center! It keeps
going into my registry and doing stuff in there that disables and overrides a
few things including but not limited to disabling and overriding Windows
Firewall and Antivirus. I have MSAS installed, and it does not pick this up.
Out of Ad-Aware, MSAS beta1, Spybot-S&D, & Spyware Dr, the only one that
detects this is Spybot S&D. It catches this problem, but the problem is
re-instituted immediately after being fixed. I have searched and searched and
cannot find a solution...
This seems like the Ebola of compy viruses/spyware! Please Help me find a
cure!

 

[Guest]

Can you tell us exactly what file or registry value Spybot detects?

 

[Bill Sanderson]

I agree with Mike Ellis--let us know the exact message you are getting from
Spybot Search & Destroy.

Additionally - what antivirus product are you running? Do you recall
responding to a prompt from that antivirus product to let <antivirus vendor>
manage your security, rather than Microsoft?

 

[Guest]

I do not remember such a prompt to let Symantec override Microsoft for
security. I only use Symantec for anti-virus, no more than that (to my
recollection.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security
Center\FirewallOverride!=dword:0

This is one of the examples of where the changes seem to have been hit.
I have since run SpyBot S&D, (along with all my other spyware programs) and
SB S&D no longer finds these files modified...HOWEVER, when I go into Window
Security Center and into Windows Firewall, I am told that "due to an
unexpected error, Firewall Settings can not be displayed." (or something very
similar if not exactly that.) Then, in the General Tab of Windows Firewall,
everything is "greyed out", so I don't have access to it, and it is turned
into OFF mode. (which I did not set it to, mind you--last time I had access
to it, I had it on.)
I appreciate your help greatly!

Also, can you tell me how to get into my registry editor to check on these
folders again? I can't seem to find that again.

 

[plun]

Hi EG

FAQ from Spybot

www.safer-networking.org/en/faq/46.html

and this thread about it

forums.spybot.info/showthread.php?t=109

Maybe a "Njorton" problem for Symantecs support..........

regards
plun

EG wrote :

 

[Guest]

If you allowed Spybot to remove that registry key it would probably explain
your Windows Firewall problems.You can use the recovery function in Spybot to
restore it.Also Symantec recommend turning off Windows Firewall if you are
using their products.Personally I use ZoneAlarm for my firewall protection.