31 replies to this topic

[greyowl]

If I turn my Windows Firewall off, I do not get a security alert from the Windows Security Center. So, I think it is not working properly. In fact, it has been ages since I got any alert from the Security Center, and I have had my AV turned off at times. I have the Security Center set to alert me.

Please help me investigate this problem.

Thank you.

[mountaintree16]

Is it possible that your AV is set to monitor itself, etc...?

[greyowl]

Thanks for the response.

I use AviraFree which has features to protect the program from being terminated by viruses, but I can terminate the realtime service.
However, I don't think this would affect Windows Firewall so I still should get a notice from the Security Center if Windows Firewall is turned off. Is this right?

[greyowl]

Could someone help me with this problem?

[exile360]

Have you scanned with Malwarebytes Anti-Malware? If not, I'd recommend doing so as one of the things it detects is non-default Security Center settings. Just make certain that within Scanner Settings located under the Settings tab that you have it set to Show in results list and check for removal. next to Action for potentially unwanted modifications (PUM) before you run your scan.

Also make certain that you don't have any such items in your Ignore List, otherwise they will not be detected (anything like 'Hijack.SecurityCenter' etc.).

[DarkSnakeKobra]

You can also do it manually by going into Control Panel/Security Center and click the link on the right that reads something like "Change how Security Center Alerts Me".

[greyowl]

Hi Samuel,

Thank you for the instructions.

I ran the MBAM Quick Scan, and it did not identify any problem with the Security Center.

[greyowl]

Buttons, on 02 April 2012 - 08:06 PM, said:

You can also do it manually by going into Control Panel/Security Center and click the link on the right that reads something like "Change how Security Center Alerts Me".

Thank you for the information.

I have checked all the options for alerts in the Securtiy Center.

[exile360]

OK, thanks .

When you open Security Center, I assume it shows the status of your firewall, AV etc. as green, correct?

If so, what happens if you turn off your firewall or antivirus? Does the status change to red?

If so, does the red shield icon with an 'X' appear in your tray menu near your clock on the lower right-hand side of your screen?

[DarkSnakeKobra]

greyowl, on 02 April 2012 - 08:29 PM, said:

Thank you for the information.

I have checked all the options for alerts in the Securtiy Center.

You're welcome.

In addition to what exile said if it's yellow and says something like "Currently not monitored" or "You have chosen not to monitor this setting" and does not list any products as registered for antivirus or firewall then it's likely the alert settings caused this.

[greyowl]

exile360, on 02 April 2012 - 08:31 PM, said:

OK, thanks .

When you open Security Center, I assume it shows the status of your firewall, AV etc. as green, correct? Yes

If so, what happens if you turn off your firewall or antivirus? Does the status change to red? Yes

If so, does the red shield icon with an 'X' appear in your tray menu near your clock on the lower right-hand side of your screen? No

Answers:
Yes
Yes
No

[greyowl]

Buttons, on 02 April 2012 - 08:38 PM, said:

You're welcome.

In addition to what exile said if it's yellow and says something like "Currently not monitored" or "You have chosen not to monitor this setting" and does not list any products as registered for antivirus or firewall then it's likely the alert settings caused this.

No, it does not say "not monitored".

[exile360]

OK, thanks.

Please do the following:

• Temporarily turn off automatic updates for Windows Update, setting it to never check for updates and make certain that Security Center is set to alert you about it (it should turn red in Security Center)
  
• Open task manager by pressing Ctrl+Shift+Esc on your keyboard
  
• Click on the Processes tab and make certain that Show processes from all users is checked
  
• Sort the list by name by clicking on the Image Name column header
  
• Look for a process called wscntfy.exe and let me know if it exists or not

[greyowl]

No, wscntfy.exe does not exist in the process list.

[exile360]

Excellent, now we're getting somewhere. wscntfy.exe is the process for the Windows Security Center tray notifications.

You may now set your automatic updates back to the way you had them previously.

Now do the following:

• Click on START then click Run
  
• In the Run box type services.msc and press Enter or click on OK
  
• Once it opens, scroll down the list of services and let me know if it says Started for the Security Center service

[greyowl]

Yes, Security Center says Started. It is set as Automatic

[exile360]

Excellent.

Next, please do the following:

Run Dial-a-fix to fix permissions:

• Please download Dial-a-fix
  
• Unzip it and run Dial-a-fix.exe.
  
• Click on the Policies button on the bottom of the window, and when the second window opens up there should be a list of restrictions,
  
• make sure there is a check mark next to each one (there should be by default) and click the Remove button on the lower left.

Once complete, if anything was repaired, restart your computer and then check to see if disabling automatic updates for Windows Updates now causes the Security Center tray notification to show up.

Please let me know how it goes.

Thanks

[greyowl]

BTW, the link for dial-a-fix doesn't work, but I got it from Softpedia.

On the policies window, do I uncheck the "hide disabled polices"?

[exile360]

No, you don't need to uncheck 'hide disabled policies'.

[greyowl]

exile360, on 02 April 2012 - 10:57 PM, said:

No, you don't need to uncheck 'hide disabled policies'.

Then, there are no restrictive policies listed with that box checked.

When I uncheck "hide disabled polices" it lists three items: Disable Registry Tools for Current User and Machine; and Disable CMD for Current User.