none
Windows Security Center will not turn on and seems to be missing.

    Question

  • My brother in law's laptop had some malware which I have gotten rid of. After I cleaned it up I went to start his Security Center since the Action Center (windows 7) said that Windows Security Center Service is turned off. When I click "turn on now" it says it cannot be started. I tried doing it manually by going into services and clicking on Security Center, but it isn't there. My laptop is also Win7 and I confirmed that it is normally there but on his it is missing. Is there a way to install it or fix the problem? Any help or advice would be much appreciated. Thank you.
    Tuesday, March 15, 2011 9:08 AM

Answers

  • Search the Disks, backup his personal data to an external drive and install Windows again. The malware has damaged too much.

    "A programmer is just a tool which converts caffeine into code"

    Want to install RSAT on Windows 7 Sp1? Check my HowTo: http://www.msfn.org/board/index.php?showtopic=150221
    • Marked as answer by Sabrina Shen Wednesday, March 23, 2011 9:20 AM
    Friday, March 18, 2011 3:02 PM

All replies

  • Please start the command prompt (cmd.exe) with admin rights [1] and run sfc [2]:

    sfc.exe /scannow

    Is it able to find and repair broken files (create the txt file shown under [2] and look if all files are restored)?

    Are you now able to start the Security center? The best option is to backup all data and install the Windows again, because you don't know which changes the malware made.

    best regards
    André

    [1] http://windows.microsoft.com/en-US/windows7/How-do-I-run-an-application-once-with-a-full-administrator-access-token
    [2] http://support.microsoft.com/kb/929833
    "A programmer is just a tool which converts caffeine into code"

    Want to install RSAT on Windows 7 Sp1? Check my HowTo: http://www.msfn.org/board/index.php?showtopic=150221
    Tuesday, March 15, 2011 2:11 PM
  • "verification 100% complete" "Windows Resource Protection did not find any integrity violation."

    Still can't start Security Center. Unfortunately I can't re-install windows as he can't find the backup discs that came with the computer.

    I've got plenty of protection on it now, hopefully this time around he'll listen when I tell him to update and scan regularly. What are his chances with malware/virus/spyware protection but no security center?

    Thank you for your help.

    Merydeth

    Wednesday, March 16, 2011 8:08 AM
  • "verification 100% complete" "Windows Resource Protection did not find any integrity violation."

    Still can't start Security Center.

    What happens when you run net start wscsvc from a command prompt with admin rights?

    André

    "A programmer is just a tool which converts caffeine into code"

    Want to install RSAT on Windows 7 Sp1? Check my HowTo: http://www.msfn.org/board/index.php?showtopic=150221
    • Proposed as answer by Sabrina Shen Thursday, March 17, 2011 8:03 AM
    Wednesday, March 16, 2011 4:08 PM
  • Hi,

    Actually, the officially recommended method is still to format and re-install the compromised computer from a known good build (i.e. operating system CD + all security patches while disconnected from the network). For more information on hacking, please see these links:

    Help: I Got Hacked. Now What Do I Do?

    http://www.microsoft.com/technet/community/columns/secmgmt/sm0504.mspx

    Help: I Got Hacked. Now What Do I Do? Part II

    http://www.microsoft.com/technet/community/columns/secmgmt/sm0704.mspx

    How A Criminal Might Infiltrate Your Network

    http://www.microsoft.com/technet/technetmag/issues/2005/01/AnatomyofaHack/default.aspx

    Malicious Software Removal Tool

    http://www.microsoft.com/security/malwareremove/default.mspx

    The Day After: Your First Reponse To A Security Breach

    http://www.microsoft.com/technet/technetmag/issues/2005/01/IncidentResponse

    4. You can also contact your antivirus vendor for assistance with identifying or removing virus or worm infections. If you need more help with virus-related issues, contact Microsoft Product Support Services.

    For information about Security updates, visit the Microsoft Virus Solution and Security Center for resources and tools to keep your PC safe and healthy. If you are having issues with installing the update itself, visit Support for Microsoft Update for resources and tools to keep your PC updated with the latest updates.

    I hope this helps. Thank you for your time and cooperation!

    (Please note that the newsgroups are staffed weekdays by Microsoft Support professionals to answer your non-urgent, break/fix systems and applications questions. Our goal is to provide 24 hour response to all questions. If this response time does not meet your needs, please contact Customer Service and Support (CSS) for more immediate assistance. For more information on available CSS services, please click here: http://support.microsoft.com/default.aspx?scid=fh;EN-US;OfferProPhone#faq607.)

    Regards,

    Sabrina


    This posting is provided "AS IS" with no warranties or guarantees, and confers no rights. |Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    Thursday, March 17, 2011 8:05 AM
  • It just says "the service name is invalid" "more help is available by typing net helpmsg 2185." but that doesn't do anything either
    Friday, March 18, 2011 5:35 AM
  • Search the Disks, backup his personal data to an external drive and install Windows again. The malware has damaged too much.

    "A programmer is just a tool which converts caffeine into code"

    Want to install RSAT on Windows 7 Sp1? Check my HowTo: http://www.msfn.org/board/index.php?showtopic=150221
    • Marked as answer by Sabrina Shen Wednesday, March 23, 2011 9:20 AM
    Friday, March 18, 2011 3:02 PM
  • I realize this topic is a bit old, but the following solution worked for my Win7 client experiencing this issue after being infected with a fake AV.  Essentially the virus/malware blows out the wscsvc registry entry.  If you export it from a working W7 machine and import/merge it to your registry, you should get the Security Center service back upon restart.  

    Start-->Run...

    Type: regedit  and hit enter

    Navigate to Computer\HKEY_LoCAL_MACHINE\SYSTEM\CurrentControlSet\services\wscsvc

    If you don't see that key, then you have a similar issue to mine.  Just import the wscsvc registry entry as described below.

     

    This person hosts a version both x64 and x86:  http://cid-9fb18a384ebfc662.office.live.com/self.aspx/.Documents/wscsvc%5E564%5E6.zip?sa=59322391#resId/9FB18A384EBFC662!139

     

    The solution was originally posted by Niki Han at: http://social.technet.microsoft.com/Forums/en-US/w7itprosecurity/thread/084209d7-81c7-47f5-85e4-1eb532bac8ba

     

    I realize this is probably too late for the OP, but it may help someone down the road.

    • Proposed as answer by Joxerbw Tuesday, June 07, 2011 8:19 PM
    Thursday, May 12, 2011 9:40 PM
  • Thanks nizbot - this registry add worked a charm.

    My scenario;

    - My Security Centre service was missing

    - An admin-level cmd prompt 'net start wscsvc' would get error 2185.

    - The registry had a blank entry for the wscsvc entry

    - All AV / malware scans revealed nothing (was a day-old laptop)

    Tuesday, June 07, 2011 8:28 PM
  • thanks you

    this soultion work for my condation

    the problem was windows security center dose not apper in windows services.msc

    Sunday, July 17, 2011 9:37 PM
  • NIZBOT YOU LEGEND!!!

     

    save me pal its took me a month to find a souloution to that

     

    cheers mate :D

    Sunday, July 17, 2011 10:16 PM
  • I realize this topic is a bit old, but the following solution worked for my Win7 client experiencing this issue after being infected with a fake AV.  Essentially the virus/malware blows out the wscsvc registry entry.  If you export it from a working W7 machine and import/merge it to your registry, you should get the Security Center service back upon restart.  

    Start-->Run...

    Type: regedit  and hit enter

    Navigate to Computer\HKEY_LoCAL_MACHINE\SYSTEM\CurrentControlSet\services\wscsvc

    If you don't see that key, then you have a similar issue to mine.  Just import the wscsvc registry entry as described below.

     

    This person hosts a version both x64 and x86:  http://cid-9fb18a384ebfc662.office.live.com/self.aspx/.Documents/wscsvc%5E564%5E6.zip?sa=59322391#resId/9FB18A384EBFC662!139

     

    The solution was originally posted by Niki Han at: http://social.technet.microsoft.com/Forums/en-US/w7itprosecurity/thread/084209d7-81c7-47f5-85e4-1eb532bac8ba

     

    I realize this is probably too late for the OP, but it may help someone down the road.

    Could you (or someone) reupload that registry key zip? I can't access it from that link. Also - thanks for the solution!
    Tuesday, July 26, 2011 1:50 PM
  • HI

    please any body help me here

    i have the same problem and my security center is missing i try to open command prompt but it does not let me open it.

    i can not even open my computer properties.

    i wanted to solve the problem after reading all the solutions above

     but it is not working.

    please help me how can i open my cmd promt so i can go to wscsvc .?

    please help me where i can download wscsvc or security center again.?

    thank you so much

    I will really appreciate your help.

    thank you


    • Proposed as answer by brandonsh Sunday, June 03, 2012 7:58 PM
    Tuesday, August 16, 2011 7:41 AM
  • when I have run this, it says some of the corrupt files were fixed. pls suggest what should I do now?
    Thursday, November 10, 2011 11:38 AM
  • A friend of mine brought his laptop in to work because it was infected with this fake AV and I  want to do a clean install for him. Unfortunatly he did not heed my advice when he bought it and has no full copy of windows on CD . There is a key on the back of the computer. Can I use a disk I own and then use his key or can I download an ISO from microsoft with this key?

    Also he did not do backups. Can I transfer his files to a disk or removable drive and then put them back on the machine after reinstallation without risk or is this particular virus (windows 7 recovery) to tough for microsoft security essentials to kill or block. His machine was running MSE but I doubt that it was up to date and it had real time protection turned off, By the virus I assume.

    Cheers

    Sunday, December 04, 2011 3:10 AM
  • Awesome. This is the only solution after hours of searching online, that worked. I just took the registry branch from another Windows 7 PC since the link is no longer working, but pretty straight forward. Thanks!
    • Edited by cabaa99 Thursday, December 08, 2011 6:10 AM
    Thursday, December 08, 2011 6:10 AM
  • This finally did it!! Thank you. The "Win 7 Antivirus 2012" trojan virus had delited that file and the BFE file in the same register.
    Sunday, December 18, 2011 8:07 AM
  • Thanks a million Kyle, this worked great. Two thumbs up to you!!
    • Edited by henry1957 Saturday, December 24, 2011 2:35 PM
    Saturday, December 24, 2011 2:32 PM
  • Nizbot i want to thank you very much for the info to rectify my problem with my registry. It was not to late but just in time because if i had not seen your post i would have reformatted and reloaded windows.. this has saved me hours of reloading... thanks again .
    Sunday, January 22, 2012 6:33 PM
  • nizbot you nailed it - exactly the fix need on a Win7 Pro x64 PC while going through post infection remediation

    Dale Unroe

    Tuesday, March 13, 2012 7:24 PM
  • Hey.

    I tried the solution mentioned: I downloaded and imported the registry, but security center item in my Service window still is not there. So I still can't start Windows Security Center (and in turn reinstall Microsoft Security Essential).

    I don't know if the fact I have Windows XP instead of Windows 7 makes a difference or not.

    Can anybody help me with this?


    • Edited by LiveWindows Saturday, May 05, 2012 12:06 PM
    Saturday, May 05, 2012 12:01 PM
  • Hey.

    I tried the solution mentioned: I downloaded and imported the registry, but security center item in my Service window still is not there. So I still can't start Windows Security Center (and in turn reinstall Microsoft Security Essential).

    I don't know if the fact I have Windows XP instead of Windows 7 makes a difference or not.

    Can anybody help me with this?

     I fixed it.  Since I have windows XP, I needed to use this.

    http://www.winhelponline.com/articles/33/1/How-to-restore-the-missing-Security-Center-service-in-Windows-XP-SP2.html

    Thanks anyway.

    Sunday, May 06, 2012 8:58 AM
  • Yes, Windows XP and Windows 7 are very different.  This thread covered a problem reported in Windows 7.  The solution you discovered applied the same methodology but used the appropriate registry changes for XP.

    I'd caution anyone who might stumble upon this thread now following your post to use extreme discretion at downloading and then importing a .reg file off the internet.  Registry changes are potentially catastrophic to your functional OS.  In other words, you are one malformed .reg file import away from potentially having to rebuild your PC.  The malware infection is a small example of a registry change with adverse consequences as its change disabled the Windows Security Center.  Think about the possibilities of someone who has provided a .reg file not to fix your PC but to damage it.

    Social Engineering is largely at work in malware attacks much like the Windows Security Center compromise at the root of this discussion.  Don't be a futher victim and compound the problem.  The safest way to import a registry change is to take the time to find out what that exported registry key should be and create it yourself.  Of course its convenient to let someone else do that for you and you just download it.  But think about what trust you are extending and don't just blindly click a download when you can go to another PC and export that key yourself.  My 2 cents ...be safe.


    Dale Unroe


    • Edited by Dale DU-IT Sunday, May 06, 2012 11:33 AM
    Sunday, May 06, 2012 11:33 AM
  • I picked this link up from the Microsoft forums. It uploads a zip file which installs the necessary registry information to restore the wscsvc entry for you: http://www.winhelponline.com/temp/w7-wscsvc.zip

    Download and reboot comp. Worked for me, hope it helps you too. Good luck!

    Saturday, June 16, 2012 8:04 PM
  • There is other post related the same problem. i tried all but no one worked. only this one worked and its so simple solution for that. its superb.
    Sunday, June 17, 2012 10:10 PM
  • I've got the same problem as OP, only I'm running XP rather than Vista (and I can't find a forum thread dealing with the same problem for XP). Doing as Nizbot's suggested, I don't have the wscsvc file in my registry. Is that because that's not suppposed to be there in XP, or because of the problem, and ifn I can find an XP version of the registry entry I should be home and dry.

    Takk.

    Tuesday, July 24, 2012 4:47 PM
  • I've got the same problem as OP, only I'm running XP rather than Vista (and I can't find a forum thread dealing with the same problem for XP). Doing as Nizbot's suggested, I don't have the wscsvc file in my registry. Is that because that's not suppposed to be there in XP, or because of the problem, and ifn I can find an XP version of the registry entry I should be home and dry.

    Takk.

    I've now managed to find another computer with XP and copy the registry entry on, which means Security Center is running, but the firewall and autoupdates aren't working. Does anyone know where I'd find them in the registry?

    Thanks

    Thursday, July 26, 2012 7:38 PM
  • thank you so much this did help someone down the road I appreciate it
    Saturday, July 13, 2013 11:32 AM
  • nizbot,

    Thanks for the solution... I was looking for it since months... really appreciate...

    Friday, August 02, 2013 9:46 PM
  • Brilliant for posting this one! Ran into this issue on a networked desktop and this post saved me from having to reinstall! Kudos!

    Saturday, August 10, 2013 8:02 PM
  • You do realize how dangerous that advice is?  Blindly trusting to download and run something that modifies your registry is not a good practice.  Albeit the intent is very good there needs to be a validation process to protect everyone and ensure that any such offering is not compromised or malicious.  This blind clicking behavior may have something to do with how the infection was obtained in the onset.  The truer fix involves altering the root user behavior as well as the physical OS resolution.

    Dale Unroe

    Monday, August 12, 2013 1:58 PM
  • Hello anyone,

    Windows OS 7, cant download anything because a box pops up claiming everything is a virus (

    Adobe, etc.). Can't start Windows Security center (doesn't appear in when searched for under Accessories)

    Ran cmd.exe as admin

    Ran sfc.exe/scannow===result--got through 58% of verification phase---states Window Resource Protection could not perform the requested operation.

    Someone below says to import something form someones computer---How do I do that?

    Any solutions??

    Thanks

    Tuesday, September 03, 2013 1:52 AM
  • Thank you so much Nizbot.   You are a life saver. 
    Monday, September 30, 2013 9:37 AM
  • Might be an old topic but judging from other replies still a good hint years later...

    And same for me - this worked perfectly. Why re-install if the virus scanner cleaned everything up nicely and just this service is missing?

    Many thanks

    Friday, November 01, 2013 2:30 PM
  • This is awesome, thanks nizbot!
    Saturday, January 04, 2014 11:24 PM
  • Thanks, it worked on W7 x64 (6.1) using the reg entries supplied. I quickly checked content opening with  Notepad++ to compare visually with what I could see on other W7 install, and it seemed ok (to avoid risk of infecting from internet download). Otherwise, I would have had to export them from an other W7 x64 PC. But I agree it is a somewhat hasardous practice (at worse, one must always be ready to restore C: with a reasonably not too old backup (hopefully healthy hence importance of periodic versions), which is often quicker than to spend time repairing when not immediate as here).

    I found out by accident going in control panel / system maintenance and just wondering why I had a red box there.

    Judging from forums threads on internet, the problem occurs frequently. Why did these entries disappear on a PC with good AV always working on this machine is a mistery thus it is a security issue to investigate & try to close. A fix from MS would be welcomed to avoid hasardous downloads.

    cf also MS kb 2519899 fixing the startup of the service but not the missing keys issue.

     
    Sunday, February 02, 2014 6:21 PM