Solved I need help turning on my Windows Security Center

[raiderscom]

The windows action center says i need to turn on windows sercurity center but when i try to turn it on it say
"The Windows Security Center service can't be started." I even went into services and tried to start it maually, and it starts but for a few seconds then it disables again. Yesterday when i tried to start windows security center maually it gave me erro 1058 but now it doesn't give the error it just automatically disables.
please help!

 

[shawn77]

Download and run OTL

Download http://oldtimer.geekstogo.com/OTL.exe by Old Timer and save it to your Desktop.

• Double click on OTL.exe to run it.
• Under Output, ensure that Minimal Output is selected.
• Under Extra Registry section, select Use SafeList.
• Click the Scan All Users checkbox.
• Click on Run Scan at the top left hand corner.
• When done, two Notepad files will open.
  • OTL.txt <-- Will be opened and the that I need posted back here
  • Extra.txt <-- Will be minimized - save this one on your desktop in case I ask for it later
• Please post the contents of OTL.txt in your next reply.

 

[cottonball]

raiderscom,

From the services angle, the following report may also help...

Please download Farbar Service Scanner

Save to the Desktop

• Make sure the following options are checked:
  • Internet Services
  • Windows Firewall
  • System Restore
  • Security Center
  • Windows Update
  • Windows Defender
• Press: Scan
• FSS creates a log, FSS.txt, on the Desktop.

Please provide the FSS.txt in your reply.

 

[raiderscom]

@ cottonbal here's the fss.txt

 

[raiderscom]

@ shawn77 OTL is still scanning

 

[cottonball]

raiderscom,

The FSS report does not show any Registry key missing, etc.
Not much to work with other than starting the service manually, which you have already attemted.

Do follow shawn77's request for OTL.
There may be something found there.

 

[raiderscom]

@shawn77 heres the OTL.txt

 

[shawn77]

Copy and Paste the following code into the textbox.

:OTL
O20:64bit: - AppInit_DLLs: (C:\PROGRA~3\Wincert\WIN64C~1.DLL C:\PROGRA~2\KEYCRY~1\KE6D28~1.DLL) - C:\ProgramData\Wincert\win64cert.dll ()
O20:64bit: - AppInit_DLLs: (C:\PROGRA~2\IMESHA~1\MediaBar\Datamngr\x64\datamngr.dll C:\PROGRA~2\IMESHA~1\MediaBar\Datamngr\x64\IEBHO.dll) - C:\Program Files (x86)\iMesh Applications\MediaBar\Datamngr\x64\datamngr.dll (iMesh, Inc)
O20 - AppInit_DLLs: (C:\PROGRA~3\Wincert\WIN32C~1.DLL C:\PROGRA~2\KEYCRY~1\KE50FD~1.DLL) - C:\ProgramData\Wincert\win32cert.dll ()
O20 - AppInit_DLLs: (C:\PROGRA~2\IMESHA~1\MediaBar\Datamngr\datamngr.dll C:\PROGRA~2\IMESHA~1\MediaBar\Datamngr\IEBHO.dll) - C:\Program Files (x86)\iMesh Applications\MediaBar\Datamngr\datamngr.dll (iMesh, Inc)
@Alternate Data Stream - 129 bytes -> C:\ProgramData\Temp:64217CD0
@Alternate Data Stream - 1120 bytes -> C:\Users\hamputh\AppData\Local\Temp:XDiI5RmRZwe8uqToc
:Files
C:\Windows\SysWow64\htuiw.dll
C:\Windows\tasks\ZHSWVMW.job
ipconfig /flushdns /c
:Commands
[PURITY]
[emptyjava]
[EMPTYFLASH]

Then click the Run Fix button at the top.

• Click
  
  .
• OTL may ask to reboot the machine. Please do so if asked.
  On reboot,you should be able to start security center service

 

[raiderscom]

im still getting the same results i still cant start windows security center

 

[shawn77]

OTL report should appear in Notepad after the reboot.Copy and Paste that report in your next reply.You can also find it here

C:\_OTL\MovedFiles

It will be named - mmddyyyy_hhmmss.log

 

[raiderscom]

Hi Shawn77 heres the report

========== OTL ==========
64bit-Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls:C:\PROGRA~3\Wincert\WIN64C~1.DLL C:\PROGRA~2\KEYCRY~1\KE6D28~1.DLL deleted successfully.
C:\ProgramData\Wincert\win64cert.dll moved successfully.
64bit-Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls:C:\PROGRA~2\IMESHA~1\MediaBar\Datamngr\x64\datamngr.dll C:\PROGRA~2\IMESHA~1\MediaBar\Datamngr\x64\IEBHO.dll deleted successfully.
C:\Program Files (x86)\iMesh Applications\MediaBar\Datamngr\x64\datamngr.dll moved successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls:C:\PROGRA~3\Wincert\WIN32C~1.DLL C:\PROGRA~2\KEYCRY~1\KE50FD~1.DLL deleted successfully.
C:\ProgramData\Wincert\win32cert.dll moved successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls:C:\PROGRA~2\IMESHA~1\MediaBar\Datamngr\datamngr.dll C:\PROGRA~2\IMESHA~1\MediaBar\Datamngr\IEBHO.dll deleted successfully.
C:\Program Files (x86)\iMesh Applications\MediaBar\Datamngr\datamngr.dll moved successfully.
ADS C:\ProgramData\Temp:64217CD0 deleted successfully.
ADS C:\Users\hamputh\AppData\Local\Temp:XDiI5RmRZwe8uqToc deleted successfully.
========== FILES ==========
C:\Windows\SysWow64\htuiw.dll moved successfully.
C:\Windows\tasks\ZHSWVMW.job moved successfully.
< ipconfig /flushdns /c >
Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
C:\Users\hamputh\Desktop\cmd.bat deleted successfully.
C:\Users\hamputh\Desktop\cmd.txt deleted successfully.
========== COMMANDS ==========

[EMPTYJAVA]

User: All Users

User: AppData

User: Default

User: Default User

User: DogDog

User: hamputh
->Java cache emptied: 25069780 bytes

User: Neckcrow

User: Public

Total Java Files Cleaned = 24.00 mb


[EMPTYFLASH]

User: All Users

User: AppData

User: Default
->Flash cache emptied: 56504 bytes

User: Default User
->Flash cache emptied: 0 bytes

User: DogDog
->Flash cache emptied: 57866 bytes

User: hamputh
->Flash cache emptied: 145016 bytes

User: Neckcrow
->Flash cache emptied: 56579 bytes

User: Public

Total Flash Files Cleaned = 0.00 mb


OTL by OldTimer - Version 3.2.69.0 log created on 03262013_123747

 

[shawn77]

Security center is disabled.Eventhough we have removed malware you have enable the service manually.

Type in services.msc in startmenu

Launch the console ,change the startup type of security center of automatic and start the service.

 

[raiderscom]

Hey it seems to be working fine
what was wrong with it

and thanks for your help

 

[shawn77]

You were infected.

 

[raiderscom]

oh ok thats for your help

 

[shawn77]