Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


Is This A Problem

  • This topic is locked This topic is locked
3 replies to this topic

#1 jerryh


  • Members
  • 6 posts
  • Local time:08:40 AM

Posted 08 August 2006 - 06:52 PM

I have a Win XP home 2.6GHz computer using prodigy, yahoo internet
dial up. Spybot on a scan gave the following problem:

"microsoftwindowssecurity center_disabled"
HKEY_LOCAL MACHINE\SYSTEM\CurrentControlSet\Services\wscsvc|Start=W=2

"Registry Change"

I have seen a report that spybott since its July 25 download has been giving this
warning and it could be caused by such programs as Norton Anti Virus that want
to do the security center task itself.

Bleepingcomputer com reports that the wscsvd.exe is trouble. I have scanned my
computer with avast anti virus, spy bot, ad aware, and system mechanic 5 and did
not find any virus like this.

I don't know if I have a problem or not. If I do how do I remove the wscsvc.exe.
Is this a trojan? Please post an answer as to do I have a serious problem and how
to handle it.

Thanks, Jerry

BC AdBot (Login to Remove)


#2 Orange Blossom

Orange Blossom

    OBleepin Investigator

  • Moderator
  • 37,009 posts
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:09:40 AM

Posted 08 August 2006 - 10:54 PM

I'm a little puzzled by the part of the message that says the security center itself is disabled. Go to Control panel, Click on Security Center and see if the sections under it are working and have current information about your system.

Please check that spellings of the files are correct: in one place you have written


and in another you have written


, and the Spybot message uses this spelling:


. Subtle differences in spelling can produce a misidentification as bad programs often are very similar in spelling to good ones. It's like the diifferences between some edible mushrooms and poisonous mushrooms: an eye for detail and accuracy is essential. Also, make sure whether the file is in your startup programs or not. If it is not in the startup programs, it could be an entirely different file from the one you, I think, found in BC's Startup Programs Database.

Orange Blossom :thumbsup:

Edited by Orange Blossom, 08 August 2006 - 10:55 PM.

Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, WinPatrol Plus, ESET Smart Security, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript

#3 jerryh

  • Topic Starter

  • Members
  • 6 posts
  • Local time:08:40 AM

Posted 08 August 2006 - 11:34 PM

HKEY_LOCAL MACHINE\SYSTEM\CurrentControlSet\Services\wscsvc|Start=W=2

Is pasted directly from spybot. The wscsvd was a typo.
The problem is at a different computer I cannot at right now.

I am trying to find out if I have a problem. Will not be at the other
computer until the weekend.

Thanks, Jerry

#4 quietman7


    Bleepin' Janitor

  • Global Moderator
  • 51,734 posts
  • Gender:Male
  • Location:Virginia, USA
  • Local time:09:40 AM

Posted 10 August 2006 - 07:07 AM

Hello jerryh

Did you follow the instructions you were given here and here?

tg1911 and a moderator from the other site have both requested you to post a hijackthis log.

After posting a log please do NOT make further changes to your computer (install/uninstall programs, use special fix tools, delete files on your own, etc.) unless advised by that helper. Doing so can result in system changes which may not show it the log you already posted. Further, any modification you make may complicate the malware removal process and could adversely affect your system.

Please confine your posts at BC to the topic thread you already started to avoid confusion.

Thanks for your cooperation.

This topic is closed.

Edited by quietman7, 10 August 2006 - 09:34 AM.

Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users