Vista Security Center Cannot Start After Infection Removal

clrblue · Dec 2, 2007

I caught the nasties, Virtumone and New.NET last week and I removed them... but every since, Security Center won't start and I get Security-related errors all the time... sometimes even when just trying to start Task Manager. I have looked all over the Web for a solution and can find none. Has anyne else experienced this problem or can provide any insight?

My HiJackThis Log (it seems clean to me):

TimW · Dec 4, 2007

Sorry for the delay ...we are scratching our heads over this....let me quote Chas

I'm really wondering if it is somehow related to the Security Center Service that Spybot is installing. I'm not sure what the real fix is. This may be something to get help on in the Software Forum. You need input from people actually running Vista. I remember reading some references to doing something with the Service and login on as LocalService with the admin account and password (or the user account & password ..... ) I don't remember all the particulars right now. I also don't remember anything that seemed like it worked reliably.
Click to expand...

In the meantime:
Run HJT and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
Click to expand...

NOTE: HJT may popup an error about the AppInit_DLLs line. Ignore it and click OK to continue.

After clicking Fix, exit HJT.

clrblue · Dec 4, 2007

Well, that's a bummer. I did do as you suggested, though, and I've attached my new log here.

TimW · Dec 5, 2007

How did you do the cleaning? Did we assist you with it and if not what did you do to remove the malware?

It is suggested that you uninstall threatfire ...then go to services and see if the security center service has been stopped (possible that spybot did that).

clrblue · Dec 8, 2007

Nope; I'm an IT geek and after years of cleaning this crap and asking for help, I learned to do it myself. Every now and then I run into something I can't figure out and that's when I turn to the malware removal communities, like this one.

Why should I stop using ThreatFire? I just started the eval and was giving it a spin.

As for Spybot disabling Security Center... yes the service is disabled, but even when Spybot is uninstalled, it will not start again. SO if that was the problem, it perma-screwed the service.

TimW · Dec 9, 2007

Few of us are running Vista at the moment so we have to rely on one or two of our knowledgeable users to trouble shoot this ...will get back with you.

TimW · Dec 9, 2007

From our resident Vista guru (Halo) :
Your other security programs may be messing with the service...however:

But as well as the security service, (needed to be on startup type Automatic - delayed Start ) the Security Accounts service as well set on Automatic

Check on the LOG ON tab of the Security Center what it is set to... as I have read in some cases deleting the passwords and rebooting has helped, but I personally wonder if you can re add the Local Service ( especially if this has been changed to the User ) passwords by clicking on the Log On tab browse > Advanced > Find > choosing local Service from the users list and Ok > Ok > Apply.
Click to expand...

I would start a thread in the software section were more can post to the problem.

Log in or Sign up

Vista Security Center Cannot Start After Infection Removal

clrblue Private E-2

Attached Files:

HJT Log.txt

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

clrblue Private E-2

Attached Files:

hijackthis.log

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

clrblue Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

Log in or Sign up

Vista Security Center Cannot Start After Infection Removal

clrblue Private E-2

Attached Files:

HJT Log.txt

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

clrblue Private E-2

Attached Files:

hijackthis.log

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

clrblue Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

Useful Searches