Solved Windows Security Center turning off, Looks like Bidvertiser

[shawn77]

Please download Rkill by Grinler and save it to your desktop.

• Link 1 Link 2

• Double-click on the Rkill desktop icon to run the tool.
• If using Vista, right-click on it and Run As Administrator.
• A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.
• The log should be saved on the desktop
• Post it here

 

[Grimskul25]

Here's the log I got from the Rkill program I ran:

View attachment Rkill.txt

Thanks a bunch!

 

[shawn77]

You are missing registry keys

http://download.bleepingcomputer.com/win-services/7/wscsvc.reg
http://download.bleepingcomputer.com/win-services/7/WinDefend.reg

A restart is needed for them to work

 

[Grimskul25]

Woot! Thank goodness for tech wizzes like you for making our lives that much easier

Thank you so much! Have a good one!

 

[shawn77]

welcome

 

[Rabusek]

Hey shawn!

I've run in a similiar problem, but I can't find files found in pervious OTL logs. Here is my OTL log, hopefully you can help me too!

 

[Barefoot South]

Windows Security Center Service

Shawn77, I am having a similar issue with Windows Security Center Service wont start.

 

[lammified]

Hi Shawn 77, I am also having a similar issue to the original poster, with malware (bts.scour.com redirect) and windows security centre and windows defender unable to start. mcafee security center also showing as disabled. have tried mbam, combofix, rkill and tdss to no avail. OTL.txt file attached. hope you can help. thanks

 

[shawn77]

Sorry for late response

@Rabusek

Copy and Paste the following code into the

textbox.

:OTL
:Files
C:\Windows\System32\wmiprop8.dll
C:\Windows\System32\procinst2.dll
C:\Windows\System32\mswstr10C.dll
ipconfig /flushdns /c
:Commands
[PURITY]
[emptyjava]
[EMPTYFLASH]

Then click the Run Fix button at the top.

• Click
  
  .
• OTL may ask to reboot the machine. Please do so if asked.
  On reboot,you should be able to start security center service

 

[shawn77]

Barefoot & Iammified

Please download Rkill by Grinler and save it to your desktop.

• Link 1 Link 2

• Double-click on the Rkill desktop icon to run the tool.
• If using Vista, right-click on it and Run As Administrator.
• A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.
• The log should be saved on the desktop
• Post it here

 

[lammified]

Hi Shawn77, rkill log is attached. Thanks. BTW, i've tried start both through Services. defender refuses to start, and security center starts then stops no matter how many times I try.

 

[digger31]

Hi Shawn77,

I have the same problem and would be grateful for any help.The OTL file is attached.

Many Thanks in Advance for any help

 

[interxoft]

Although I was not part of the original thread, I did follow the steps provided by shawn77, since I had the same problem with Google redirects.

The only difference was that the line C:\windows\SysWow64\ir50_qc8.dll did not work for me, since that file was not in my PC. I opened the OTL text file and analyzed why that dll file was chosen to be removed, and figured out that the reason was the RHS flags asociated with it. What I did is to analyze my own OTL text file (as a result of Run Scan) in the same section where that dll was (Files created - No Company Name) and found two files with the same flags.

So what I did is I wrote those two files under the :Files section, and then clicked on the Run Fix button.

Then rebooted the PC and checked if Google searches took me to the web addresses shown by Google, and YES, they worked correctly. Shawn77 is a genious. Thanks for the help, and I hope someone else with the same problem can get the same result by applying this fix.

 

[bauer1818]

hi i need help as well.. i'm having the same issue...
i will post my otl.txt result and i hope that someone can help me..