Question

Q: Spybot - Search and Destroy gives a warning “Mcrosoft.WindowsSecurityCenter.FirewallOverride” on every scan

Original title:  (SBI $OC94D702) settings__HKEY_LOCAL_MACHINE\SOFTWARE\microsoft\sec

I have spybot search and destroy and i get this everytime i run it for spyware the full warning is

Mcrosoft.WindowsSecurityCenter.FirewallOverride

i assume the hotkey above is the one causing the problems because when it is restricted and removed by spybot and i try to then connect to internet i have difficulties and i have windows security center telling me that i don't have an active firewall. so i open it up ask for recomendations and it tell me it cannot open windows firewall.

My worry is this a virus that is there just taking infomation from me or is it legitimate hotkey that should be there

i have done all available updates i'm running windows xp

i run windows onecare safety scanner every month and still get it appearing in my spybot search

any help or advise would be greatly appriciated thank you

Answer

A:

Hi pfcDix,

 

·         What is the version of Spybot you are using?

·         What is the complete registry key error that is detected?

·         What type of difficuties do you’ve with your Internet once you’re done with the scan?

·         What is the exact message that is given by Windows Security Center?

 

I would suggest you to try the steps mentioned below.

 

Method 1: Use “exclude this detection from future scans” in your Spybot

 

The reason why you receive this error “Mcrosoft.WindowsSecurityCenter.FirewallOverride” everytime you scan is due to the fact that the option to “exclude this detection from future scans” in your spybot is not enabled.

a.    You’ve to right click on each detection entry and then click “exclude this detection from future scans”.

b.    If it is greyed out, highlight the item you want to exclude by left clicking on the item first, then right click on the item and choose to “exclude this detection from future scans”.

Now perform the scan to see if the message withers away.

 

On the other hand, when you try to remove some registry entry, you should be very careful. You need tobackup the registry before you remove it. The registry key that you’ve provided is a valid windows registry key and upon removing, it has an adverse effect on Windows Security Center and other programs on your computer. Most of the anti-virus software will disable the Windows Security Center in order to take care of things themselves. Windows Security Center fails to monitor the status of any firewall installed on your computer.

 

Method 2: Check the registry settings

Make sure the following registry keys (Anti-virus Override and Firewall Override) have the value data set to 0.

 

Registry Disclaimer: The steps mentioned below include system registry modification. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs.

How to back up and restore the registry in Windows

322756    

a.    Click on Start and then click on Run.

b.    Type regedit and hit Enter.

c.    Go to the following location

HKEY_LOCAL_MACHINE\Software\Microsoft\Security Center

d.    Check the data value set for Anti-virus Override and Firewall Override.

e.    They both should have value data set to 0x00000000 (0)

f.     If not, set it to the above value and save the changes.

 

Exit the registry editor and then perform the scan.

 

I would also suggest you to check with Spybot forums to see if they have any suggestions on this issue.

 

Spybot Forums

http://forums.spybot.info/

 

Hope this information is helpful and let me know if you need any further assistance.

Mouneshwar R – Microsoft Support

-------------------------------------------------------------------------------------------------------------------------

Visit our  Microsoft Answers Feedback Forum and let us know what you think

Did this solve your problem?

Sorry this didn't help.



 
Question Info

Views: 5,312 Last updated: March 26, 2018 Applies to: