The Security Service Cannot be Started

I am running Vista x64

Several months ago I got a nasty trojan which removed the Security
Center from my computer. I didn't think it as a big deal as I have
several other anti-viruses installed, but I've come to a situation where
I require windows firewall to be on.

I've done an extensive search to find a thread on any forum that could
help, but nothing yet.

When I attempt to start windows security center, I get the error "The
Security Service cannot be started"

Now according to several other hundred threads, I'm supposed to go to
"Services" and change "Security Center" to automatic.

The only problem is, Security Center is not under Services as the
trojan removed it.

To make matters worse, HP programmers thought it would be cool to not
include a vista OS installation disk, but instead add a crappy program
on the computer that would allow you to replace programs, but
unfortunately it cannot repair my security center.

Is there anyway I can get my security center back without needing to
restore to factory settings?

Thanks.


--
Damuffinator

This is the registry settings for Security Center. Also attached as a
regfile.
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\w scsvc]
"DisplayName"="Security Center"
"ErrorControl"=dword:00000001
"ImagePath"=hex(2):25,00,53,00,79,00,73,00,74,00,6 5,00,6d,00,52,00,6f,00,6f,00,\
74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d ,00,33,00,32,00,5c,00,73,\
00,76,00,63,00,68,00,6f,00,73,00,74,00,2e,00,65,00 ,78,00,65,00,20,00,2d,00,\
6b,00,20,00,4c,00,6f,00,63,00,61,00,6c,00,53,00,65 ,00,72,00,76,00,69,00,63,\
00,65,00,4e,00,65,00,74,00,77,00,6f,00,72,00,6b,00 ,52,00,65,00,73,00,74,00,\
72,00,69,00,63,00,74,00,65,00,64,00,00,00
"Start"=dword:00000004
"Type"=dword:00000020
"Description"="@%SystemRoot%\\System32\\wscsvc.dll ,-201"
"DependOnService"=hex(7):52,00,70,00,63,00,53,00,7 3,00,00,00,57,00,69,00,6e,00,\
4d,00,67,00,6d,00,74,00,00,00,00,00
"ObjectName"="NT AUTHORITY\\LocalService"
"ServiceSidType"=dword:00000001
"RequiredPrivileges"=hex(7):53,00,65,00,43,00,68,0 0,61,00,6e,00,67,00,65,00,4e,\
00,6f,00,74,00,69,00,66,00,79,00,50,00,72,00,69,00 ,76,00,69,00,6c,00,65,00,\
67,00,65,00,00,00,53,00,65,00,49,00,6d,00,70,00,65 ,00,72,00,73,00,6f,00,6e,\
00,61,00,74,00,65,00,50,00,72,00,69,00,76,00,69,00 ,6c,00,65,00,67,00,65,00,\
00,00,00,00
"DelayedAutoStart"=dword:00000001
"FailureActions"=hex:80,51,01,00,00,00,00,00,00,00 ,00,00,03,00,00,00,14,00,00,\
00,01,00,00,00,c0,d4,01,00,01,00,00,00,e0,93,04,00 ,00,00,00,00,00,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\w scsvc\Parameters]
"ServiceDllUnloadOnStop"=dword:00000001
"ServiceDll"=hex(2):25,00,53,00,79,00,73,00,74,00, 65,00,6d,00,52,00,6f,00,6f,\
00,74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00 ,6d,00,33,00,32,00,5c,00,\
77,00,73,00,63,00,73,00,76,00,63,00,2e,00,64,00,6c ,00,6c,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\w scsvc\Security]
"Security"=hex:01,00,14,80,c8,00,00,00,d4,00,00,00 ,14,00,00,00,30,00,00,00,02,\
00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01 ,00,00,00,00,00,01,00,00,\
00,00,02,00,98,00,06,00,00,00,00,00,14,00,fd,01,02 ,00,01,01,00,00,00,00,00,\
05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00 ,00,00,00,05,20,00,00,00,\
20,02,00,00,00,00,14,00,9d,01,02,00,01,01,00,00,00 ,00,00,05,04,00,00,00,00,\
00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,06,00 ,00,00,00,00,14,00,00,01,\
00,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,00,28 ,00,15,00,00,00,01,06,00,\
00,00,00,00,05,50,00,00,00,49,59,9d,77,91,56,e5,55 ,dc,f4,e2,0e,a7,8b,eb,ca,\
7b,42,13,56,01,01,00,00,00,00,00,05,12,00,00,00,01 ,01,00,00,00,00,00,05,12,\
00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\w scsvc\Enum]
"0"="Root\\LEGACY_WSCSVC\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001



--
..
--
"Damuffinator" <> wrote in message
news:...
>
> I am running Vista x64
>
> Several months ago I got a nasty trojan which removed the Security
> Center from my computer. I didn't think it as a big deal as I have
> several other anti-viruses installed, but I've come to a situation where
> I require windows firewall to be on.
>
> I've done an extensive search to find a thread on any forum that could
> help, but nothing yet.
>
> When I attempt to start windows security center, I get the error "The
> Security Service cannot be started"
>
> Now according to several other hundred threads, I'm supposed to go to
> "Services" and change "Security Center" to automatic.
>
> The only problem is, Security Center is not under Services as the
> trojan removed it.
>
> To make matters worse, HP programmers thought it would be cool to not
> include a vista OS installation disk, but instead add a crappy program
> on the computer that would allow you to replace programs, but
> unfortunately it cannot repair my security center.
>
> Is there anyway I can get my security center back without needing to
> restore to factory settings?
>
> Thanks.
>
>
> --
> Damuffinator

CrucialHoax;1150983 Wrote:
>
>
> In services, try enabling: *Remote Procedure Call (RPC) *and *DCOM
> Server Process Launcher
>
> *Then enable *Security Center
>
> *Hope this helps

Both of these are already enabled and are set to automatic Still no
Security Center

;1151015 Wrote:
> This is the registry settings for Security Center. Also attached as a
> regfile.
> Windows Registry Editor Version 5.00
>
> [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\w scsvc]
> "DisplayName"="Security Center"
> "ErrorControl"=dword:00000001
> "ImagePath"=hex(2):25,00,53,00,79,00,73,00,74,00,6 5,00,6d,00,52,00,6f,00,6f,00,\
> 74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d ,00,33,00,32,00,5c,00,73,\
> 00,76,00,63,00,68,00,6f,00,73,00,74,00,2e,00,65,00 ,78,00,65,00,20,00,2d,00,\
> 6b,00,20,00,4c,00,6f,00,63,00,61,00,6c,00,53,00,65 ,00,72,00,76,00,69,00,63,\
> 00,65,00,4e,00,65,00,74,00,77,00,6f,00,72,00,6b,00 ,52,00,65,00,73,00,74,00,\
> 72,00,69,00,63,00,74,00,65,00,64,00,00,00
> "Start"=dword:00000004
> "Type"=dword:00000020
> "Description"="@%SystemRoot%\\System32\\wscsvc.dll ,-201"
> "DependOnService"=hex(7):52,00,70,00,63,00,53,00,7 3,00,00,00,57,00,69,00,6e,00,\
> 4d,00,67,00,6d,00,74,00,00,00,00,00
> "ObjectName"="NT AUTHORITY\\LocalService"
> "ServiceSidType"=dword:00000001
> "RequiredPrivileges"=hex(7):53,00,65,00,43,00,68,0 0,61,00,6e,00,67,00,65,00,4e,\
> 00,6f,00,74,00,69,00,66,00,79,00,50,00,72,00,69,00 ,76,00,69,00,6c,00,65,00,\
> 67,00,65,00,00,00,53,00,65,00,49,00,6d,00,70,00,65 ,00,72,00,73,00,6f,00,6e,\
> 00,61,00,74,00,65,00,50,00,72,00,69,00,76,00,69,00 ,6c,00,65,00,67,00,65,00,\
> 00,00,00,00
> "DelayedAutoStart"=dword:00000001
> "FailureActions"=hex:80,51,01,00,00,00,00,00,00,00 ,00,00,03,00,00,00,14,00,00,\
> 00,01,00,00,00,c0,d4,01,00,01,00,00,00,e0,93,04,00 ,00,00,00,00,00,00,00,00
>
> [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\w scsvc\Parameters]
> "ServiceDllUnloadOnStop"=dword:00000001
> "ServiceDll"=hex(2):25,00,53,00,79,00,73,00,74,00, 65,00,6d,00,52,00,6f,00,6f,\
> 00,74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00 ,6d,00,33,00,32,00,5c,00,\
> 77,00,73,00,63,00,73,00,76,00,63,00,2e,00,64,00,6c ,00,6c,00,00,00
>
> [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\w scsvc\Security]
> "Security"=hex:01,00,14,80,c8,00,00,00,d4,00,00,00 ,14,00,00,00,30,00,00,00,02,\
> 00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01 ,00,00,00,00,00,01,00,00,\
> 00,00,02,00,98,00,06,00,00,00,00,00,14,00,fd,01,02 ,00,01,01,00,00,00,00,00,\
> 05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00 ,00,00,00,05,20,00,00,00,\
> 20,02,00,00,00,00,14,00,9d,01,02,00,01,01,00,00,00 ,00,00,05,04,00,00,00,00,\
> 00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,06,00 ,00,00,00,00,14,00,00,01,\
> 00,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,00,28 ,00,15,00,00,00,01,06,00,\
> 00,00,00,00,05,50,00,00,00,49,59,9d,77,91,56,e5,55 ,dc,f4,e2,0e,a7,8b,eb,ca,\
> 7b,42,13,56,01,01,00,00,00,00,00,05,12,00,00,00,01 ,01,00,00,00,00,00,05,12,\
> 00,00,00
>
> [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\w scsvc\Enum]
> "0"="Root\\LEGACY_WSCSVC\\0000"
> "Count"=dword:00000001
> "NextInstance"=dword:00000001
>
>

Sorry but I'm not the most experienced person at using the registry and
have no idea how to input those settings into the registry, if that's
what you're saying


--
Damuffinator

I am saying that, but I attached a reg file that you just double click.

--
..
--
"Damuffinator" <> wrote in message
news:...
>
> CrucialHoax;1150983 Wrote:
>>
>>
>> In services, try enabling: *Remote Procedure Call (RPC) *and *DCOM
>> Server Process Launcher
>>
>> *Then enable *Security Center
>>
>> *Hope this helps
>
> Both of these are already enabled and are set to automatic Still no
> Security Center
>
> ;1151015 Wrote:
>> This is the registry settings for Security Center. Also attached as a
>> regfile.
>> Windows Registry Editor Version 5.00
>>
>> [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\w scsvc]
>> "DisplayName"="Security Center"
>> "ErrorControl"=dword:00000001
>> "ImagePath"=hex(2):25,00,53,00,79,00,73,00,74,00,6 5,00,6d,00,52,00,6f,00,6f,00,\
>> 74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d ,00,33,00,32,00,5c,00,73,\
>> 00,76,00,63,00,68,00,6f,00,73,00,74,00,2e,00,65,00 ,78,00,65,00,20,00,2d,00,\
>> 6b,00,20,00,4c,00,6f,00,63,00,61,00,6c,00,53,00,65 ,00,72,00,76,00,69,00,63,\
>> 00,65,00,4e,00,65,00,74,00,77,00,6f,00,72,00,6b,00 ,52,00,65,00,73,00,74,00,\
>> 72,00,69,00,63,00,74,00,65,00,64,00,00,00
>> "Start"=dword:00000004
>> "Type"=dword:00000020
>> "Description"="@%SystemRoot%\\System32\\wscsvc.dll ,-201"
>> "DependOnService"=hex(7):52,00,70,00,63,00,53,00,7 3,00,00,00,57,00,69,00,6e,00,\
>> 4d,00,67,00,6d,00,74,00,00,00,00,00
>> "ObjectName"="NT AUTHORITY\\LocalService"
>> "ServiceSidType"=dword:00000001
>> "RequiredPrivileges"=hex(7):53,00,65,00,43,00,68,0 0,61,00,6e,00,67,00,65,00,4e,\
>> 00,6f,00,74,00,69,00,66,00,79,00,50,00,72,00,69,00 ,76,00,69,00,6c,00,65,00,\
>> 67,00,65,00,00,00,53,00,65,00,49,00,6d,00,70,00,65 ,00,72,00,73,00,6f,00,6e,\
>> 00,61,00,74,00,65,00,50,00,72,00,69,00,76,00,69,00 ,6c,00,65,00,67,00,65,00,\
>> 00,00,00,00
>> "DelayedAutoStart"=dword:00000001
>> "FailureActions"=hex:80,51,01,00,00,00,00,00,00,00 ,00,00,03,00,00,00,14,00,00,\
>> 00,01,00,00,00,c0,d4,01,00,01,00,00,00,e0,93,04,00 ,00,00,00,00,00,00,00,00
>>
>> [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\w scsvc\Parameters]
>> "ServiceDllUnloadOnStop"=dword:00000001
>> "ServiceDll"=hex(2):25,00,53,00,79,00,73,00,74,00, 65,00,6d,00,52,00,6f,00,6f,\
>> 00,74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00 ,6d,00,33,00,32,00,5c,00,\
>> 77,00,73,00,63,00,73,00,76,00,63,00,2e,00,64,00,6c ,00,6c,00,00,00
>>
>> [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\w scsvc\Security]
>> "Security"=hex:01,00,14,80,c8,00,00,00,d4,00,00,00 ,14,00,00,00,30,00,00,00,02,\
>> 00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01 ,00,00,00,00,00,01,00,00,\
>> 00,00,02,00,98,00,06,00,00,00,00,00,14,00,fd,01,02 ,00,01,01,00,00,00,00,00,\
>> 05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00 ,00,00,00,05,20,00,00,00,\
>> 20,02,00,00,00,00,14,00,9d,01,02,00,01,01,00,00,00 ,00,00,05,04,00,00,00,00,\
>> 00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,06,00 ,00,00,00,00,14,00,00,01,\
>> 00,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,00,28 ,00,15,00,00,00,01,06,00,\
>> 00,00,00,00,05,50,00,00,00,49,59,9d,77,91,56,e5,55 ,dc,f4,e2,0e,a7,8b,eb,ca,\
>> 7b,42,13,56,01,01,00,00,00,00,00,05,12,00,00,00,01 ,01,00,00,00,00,00,05,12,\
>> 00,00,00
>>
>> [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\w scsvc\Enum]
>> "0"="Root\\LEGACY_WSCSVC\\0000"
>> "Count"=dword:00000001
>> "NextInstance"=dword:00000001
>>
>>
>
> Sorry but I'm not the most experienced person at using the registry and
> have no idea how to input those settings into the registry, if that's
> what you're saying
>
>
> --
> Damuffinator

;1151456 Wrote:
> I am saying that, but I attached a reg file that you just double click

Not showing anything to click on your post :/ At least not for me.


--
Damuffinator

From Windows Mail's Help

Why can't I view an attachment in Windows Mail
Windows Mail blocks certain types of file attachments that are commonly used
to spread e-mail viruses, such as files with the following file name
extensions: .exe, .pif, and .scr files. If Windows Mail blocks an attachment
in an e-mail, the Information bar will display a message letting you know
that it has done so and list the attachment that has been blocked.

Although it's not recommended, you can enable access to blocked attachments.
This should only be done by advanced users, and only with an up-to-date
virus checker running.

To enable access to blocked attachments
1.. Click to open Windows Mail.

2.. Click the Tools menu, and then click Options.

3.. Click the Security tab, clear the Do not allow attachments to be saved
or opened that could potentially be a virus check box, and then click OK.

Note
a.. Any open messages containing blocked attachments must be closed and
reopened after changing this setting before you'll be allowed to save or
open their attachments.

See also
a.. Open or save an attachment in Windows Mail

--
..
--
"Damuffinator" <> wrote in message
news:...
>
> ;1151456 Wrote:
>> I am saying that, but I attached a reg file that you just double click
>
> Not showing anything to click on your post :/ At least not for me.
>
>
> --
> Damuffinator

Sorry but I have no idea what windows mail is


--
Damuffinator

Did you get this problem resolved

--
CrucialHoax

news://msnews.microsoft.com/e52L098Q...TNGP06.phx.gbl

--
..
--
"Damuffinator" <> wrote in message
news:...
>
> Sorry but I have no idea what windows mail is
>
>
> --
> Damuffinator

news://msnews.microsoft.com/microsof...vista.security

will show you where you are posting

--
..
--

<.> wrote in message news:%...
> news://msnews.microsoft.com/e52L098Q...TNGP06.phx.gbl
>
> --
> .
> --
> "Damuffinator" <> wrote in message
> news:...
>>
>> Sorry but I have no idea what windows mail is
>>
>>
>> --
>> Damuffinator
>