Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Confused? Is "Action Center" part of the Microsoft Security Essentials?


  • Please log in to reply
123 replies to this topic

#1 viking22

viking22

  • Members
  • 198 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:New York
  • Local time:09:05 PM

Posted 28 April 2011 - 10:42 AM

Posted Image

Is this part of the MSE? :blink:

I can't turn it back on, first trying to figure out what this is?

BC AdBot (Login to Remove)

 


#2 keyboardNinja

keyboardNinja

    Bleepin' Ninja


  • Members
  • 4,815 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:teh interwebz
  • Local time:07:05 PM

Posted 28 April 2011 - 02:48 PM

Action Center is baked into Windows 7. It replaces XP's "Security Center" (and whatever Vista had...I don't remember).

Microsoft Security Essentials is an anti-virus program made by Microsoft. Is is a separate entity from the Action Center, but the two interact to provide you with information about your computer (specifically whether or not MSE is up to date).

http://windows.microsoft.com/en-US/windows7/What-is-Action-Center

What exactly are you trying to turn back on?
PICNIC - Problem In Chair, Not In Computer

Posted Image Posted Image

20 Things I Learned About Browsers and the Web

#3 viking22

viking22
  • Topic Starter

  • Members
  • 198 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:New York
  • Local time:09:05 PM

Posted 28 April 2011 - 03:59 PM

I can't turn on my Windows Security Center. I just get message that it can't be started. How do I turn it on?

Posted Image

#4 viking22

viking22
  • Topic Starter

  • Members
  • 198 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:New York
  • Local time:09:05 PM

Posted 28 April 2011 - 04:06 PM

I was infected, see this log,

http://www.bleepingcomputer.com/forums/topic392365.html/page__gopid__2225173#entry2225173

But now I am clean except for this problem
I guess..

Edited by viking22, 28 April 2011 - 04:06 PM.


#5 keyboardNinja

keyboardNinja

    Bleepin' Ninja


  • Members
  • 4,815 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:teh interwebz
  • Local time:07:05 PM

Posted 28 April 2011 - 04:20 PM

The service might have been disabled by the malware.

At the Start Menu, type services.msc and hit Enter. Scroll down until you see Security Center. Double-click it and take note of the Startup type. It should be set to Automatic: (Delayed Start). If it is not, change it to that and try to Start the service.
PICNIC - Problem In Chair, Not In Computer

Posted Image Posted Image

20 Things I Learned About Browsers and the Web

#6 viking22

viking22
  • Topic Starter

  • Members
  • 198 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:New York
  • Local time:09:05 PM

Posted 28 April 2011 - 07:03 PM

Sorry, when I type services.msc I only get "services". See screen shot, and then I don't see anything that says Security Center.

Posted Image

Edited by viking22, 28 April 2011 - 07:18 PM.


#7 keyboardNinja

keyboardNinja

    Bleepin' Ninja


  • Members
  • 4,815 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:teh interwebz
  • Local time:07:05 PM

Posted 28 April 2011 - 08:25 PM

Hmm...looks like the infections completely removed the Security Center service.

Let's try to add it back.

First, we'll run the System File Checker. In an elevated command prompt, type sfc /scannow and hit Enter.

After that completes, copy the following code and paste it into the same elevated command prompt:

sc create wscsvc type= share start= delayed-auto error= normal binPath= "C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted" depend= RpcSc/WinMgmt obj= "NT AUTHORITY\LocalService" DisplayName= "Security Center"

NOTE: there are supposed to be spaces between the equals signs and the values.

You might have to reboot for this to take effect. Let me know what you get.
PICNIC - Problem In Chair, Not In Computer

Posted Image Posted Image

20 Things I Learned About Browsers and the Web

#8 viking22

viking22
  • Topic Starter

  • Members
  • 198 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:New York
  • Local time:09:05 PM

Posted 28 April 2011 - 09:28 PM

Getting closer!!!

The sfc /scannow said it "not find any integrity violations" I then copied and pasted the command, it said "create service SUCCESS". I then rebooted. Low and behold the "security center" is back in the services.

However, It was set to a automatic-delayed start, so I switched it to automatic, apply, then rebooted. It doesn't start. When I open it, it says the service is "stopped" and when I click "start"

It gives me the following message:

"Windows could not start the Security Center Service on Local Computer. Error 1075: The dependency services does not exist or has been marked for deletion"

I checked the dependency tab, it has the following:
For "This service depends on the following instrumentation"
It has "Windows Management Instrumentation"

For "The following components depend on this service"
It has "no Dependencies"

Something is missing there isn't it?

#9 keyboardNinja

keyboardNinja

    Bleepin' Ninja


  • Members
  • 4,815 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:teh interwebz
  • Local time:07:05 PM

Posted 28 April 2011 - 09:51 PM

Yes, it appears something is still borked. But we will get to the bottom of it. :)

Copy and paste the following into an elevated command prompt: sc qc winmgmt>%userprofile%/desktop/output.txt

Look for a text file on your Desktop called output.txt. Copy all of the text inside it and paste into your next reply.
PICNIC - Problem In Chair, Not In Computer

Posted Image Posted Image

20 Things I Learned About Browsers and the Web

#10 viking22

viking22
  • Topic Starter

  • Members
  • 198 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:New York
  • Local time:09:05 PM

Posted 28 April 2011 - 09:58 PM

I hope this is what you asked for:


[SC] QueryServiceConfig SUCCESS

SERVICE_NAME: winmgmt
TYPE : 20 WIN32_SHARE_PROCESS
START_TYPE : 2 AUTO_START
ERROR_CONTROL : 0 IGNORE
BINARY_PATH_NAME : C:\windows\system32\svchost.exe -k netsvcs
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : Windows Management Instrumentation
DEPENDENCIES : RPCSS
SERVICE_START_NAME : localSystem

#11 keyboardNinja

keyboardNinja

    Bleepin' Ninja


  • Members
  • 4,815 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:teh interwebz
  • Local time:07:05 PM

Posted 28 April 2011 - 10:18 PM

Good job. :)

Okay, back in Services, make sure both Windows Management Instrumentation and Remote Procedure Call (RPC) are started and set to Automatic.

Something isn't quite lining up properly...it might take some sleuthing to figure out what it is.
PICNIC - Problem In Chair, Not In Computer

Posted Image Posted Image

20 Things I Learned About Browsers and the Web

#12 viking22

viking22
  • Topic Starter

  • Members
  • 198 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:New York
  • Local time:09:05 PM

Posted 28 April 2011 - 10:32 PM

Both Windows Management Instrumentation and Remote Procedure Call (RPC) are set to "automatic", and both say "started". There is also a Remote Procedure Call (RPC) Locator that is set to manual.

#13 keyboardNinja

keyboardNinja

    Bleepin' Ninja


  • Members
  • 4,815 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:teh interwebz
  • Local time:07:05 PM

Posted 28 April 2011 - 10:34 PM

What happens when you Restart the Windows Management Instrumentation service? Can you start the Security Center service after that?
PICNIC - Problem In Chair, Not In Computer

Posted Image Posted Image

20 Things I Learned About Browsers and the Web

#14 viking22

viking22
  • Topic Starter

  • Members
  • 198 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:New York
  • Local time:09:05 PM

Posted 28 April 2011 - 10:40 PM

If you mean "stop" the service, and then turn it back on, okay I did that. and then tried to start the security center, and it still gave the same error.

#15 viking22

viking22
  • Topic Starter

  • Members
  • 198 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:New York
  • Local time:09:05 PM

Posted 28 April 2011 - 10:42 PM

Question?? Shouldn't the RPC be listed on the Dependencies tab of the security center?




1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users