I have a Win XP home 2.6GHz computer using prodigy, yahoo internet
dial up. Spybot on a scan gave the following problem:

"microsoftwindowssecurity center_disabled"
"Settings"
HKEY_LOCAL MACHINE\SYSTEM\CurrentControlSet\Services\wscsvc|Start=W=2

"Registry Change"

I have seen a report that spybott since its July 25 download has been giving this
warning and it could be caused by such programs as Norton Anti Virus that want
to do the security center task itself.

Bleepingcomputer com reports that the wscsvd.exe is trouble. I have scanned my
computer with avast anti virus, spy bot, ad aware, and system mechanic 5 and did
not find any virus like this.

I don't know if I have a problem or not. If I do how do I remove the wscsvc.exe.
Is this a trojan? Please post an answer as to do I have a serious problem and how
to handle it.

Thanks, Jerry

I'm a little puzzled by the part of the message that says the security center itself is disabled. Go to Control panel, Click on Security Center and see if the sections under it are working and have current information about your system.

Please check that spellings of the files are correct: in one place you have written and in another you have written , and the Spybot message uses this spelling: . Subtle differences in spelling can produce a misidentification as bad programs often are very similar in spelling to good ones. It's like the diifferences between some edible mushrooms and poisonous mushrooms: an eye for detail and accuracy is essential. Also, make sure whether the file is in your startup programs or not. If it is not in the startup programs, it could be an entirely different file from the one you, I think, found in BC's Startup Programs Database.


Orange Blossom

HKEY_LOCAL MACHINE\SYSTEM\CurrentControlSet\Services\wscsvc|Start=W=2

Is pasted directly from spybot. The wscsvd was a typo.
The problem is at a different computer I cannot at right now.

I am trying to find out if I have a problem. Will not be at the other
computer until the weekend.

Thanks, Jerry

Hello jerryh

Did you follow the instructions you were given here and here?

tg1911 and a moderator from the other site have both requested you to post a hijackthis log.

After posting a log please do NOT make further changes to your computer (install/uninstall programs, use special fix tools, delete files on your own, etc.) unless advised by that helper. Doing so can result in system changes which may not show it the log you already posted. Further, any modification you make may complicate the malware removal process and could adversely affect your system.

Please confine your posts at BC to the topic thread you already started to avoid confusion.

Thanks for your cooperation.

This topic is closed.