none
Security Center service for Windows 7 cannot start & Security Essentials not working

    Question

  • I am running windows 7 home and using security essential. but yesterday i found my security essentials not working and showing red alarm. When i take the pointer to show it ............ the program close and the security center service disabled........ and i went to see the security center service to run it and make it automatically run this message appear to me " Windows could not start the security center service on local computer. Error 1058: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it"

    And i removed security Essentials and tried to run the security center service ......but the problem still exists the service runs only 2 minutes and disabled again.

    Please help QUICKLY ................ because i am working without ANTI-VIRUS      

    Saturday, April 23, 2011 12:04 AM

Answers

  • Hi,

     

    The Security Center service cannot be started due to virus destruction.

     

    Have you tried the repair for Windows? If not, you can go to following SkyDrive to load the registry and import it to check the result.

     

    http://cid-9fb18a384ebfc662.office.live.com/self.aspx/.Documents/wscsvc%5E564%5E6.zip

     

    Before importing it, please back up the following registry key first. Just find the key and right click it, choose export and save to desktop.

     

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\wscsvc]

     

    After importing the correct registry, please go to services Windows to check if Security Center starts properly.

     

    Best Regards,

    Niki


    Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    • Proposed as answer by nizbot Thursday, May 12, 2011 9:40 PM
    • Marked as answer by Miya YaoModerator Monday, June 06, 2011 7:54 AM
    Tuesday, April 26, 2011 3:12 AM
    Moderator
  • Sadly the only way out is to format the disk and hope your backups are clean. The germs of late have been very aggressive.

    I can recover files from the disk, using my shop tools, but that not practical due to cost.

     


    My MVP is for the Windows Desktop Experience, i.e. Windows XP, Vista and Windows 7 IT

    Remote Assistance is available for a fee.

    I am best with C++ and I am learning C# using Visual Studio 2010

    Developer | Windows IT | Chess | Economics | Hardcore Games | Vegan Advocate | PC Reviews

    • Marked as answer by Omar Hannoura Sunday, April 24, 2011 2:37 PM
    Sunday, April 24, 2011 2:32 PM

All replies

  • Insert the Windows DVD and boot from it and select repair when prompted. The install MSE again.

     

     


    My MVP is for the Windows Desktop Experience, i.e. Windows XP, Vista and Windows 7 IT

    Remote Assistance is available for a fee.

    I am best with C++ and I am learning C# using Visual Studio 2010

    Developer | Windows IT | Chess | Economics | Hardcore Games | Vegan Advocate | PC Reviews

    Saturday, April 23, 2011 1:58 PM
  • thanks for answer....... and i did that and selected repair ..... but i didn't find MSE....... maybe i understood u wrong ...... please be specific because i found start up repair only.......
    Saturday, April 23, 2011 9:03 PM
  • Try uninstalling MSE and then install it fresh

     


    My MVP is for the Windows Desktop Experience, i.e. Windows XP, Vista and Windows 7 IT

    Remote Assistance is available for a fee.

    I am best with C++ and I am learning C# using Visual Studio 2010

    Developer | Windows IT | Chess | Economics | Hardcore Games | Vegan Advocate | PC Reviews

    Saturday, April 23, 2011 9:11 PM
  • i tried but problem still exist.
     security center service unable to start.
    Saturday, April 23, 2011 10:48 PM
  • Go to my IT site and run the Malicious software removal tool and report back

     

    May as well see if there is a germ on you machine

     


    My MVP is for the Windows Desktop Experience, i.e. Windows XP, Vista and Windows 7 IT

    Remote Assistance is available for a fee.

    I am best with C++ and I am learning C# using Visual Studio 2010

    Developer | Windows IT | Chess | Economics | Hardcore Games | Vegan Advocate | PC Reviews

    Saturday, April 23, 2011 11:03 PM
  • I am running windows 7 home 64-bit. and when i run the Malicious software removal tool nothing appear. and i went to  debug folder i found mrt.txt and this is the txt

     

     


    ---------------------------------------------------------------------------------------

    Microsoft Windows Malicious Software Removal Tool v3.17, March 2011
    Started On Fri Mar 25 15:01:44 2011
    ->Scan ERROR: resource process://pid:1776 (code 0x00000490 (1168))
    ->Scan ERROR: resource process://pid:1896 (code 0x00000005 (5))
    ->Scan ERROR: resource process://pid:5588 (code 0x00000490 (1168))

    Results Summary:
    ----------------
    No infection found.
    Microsoft Windows Malicious Software Removal Tool Finished On Fri Mar 25 15:04:17 2011


    Return code: 0 (0x0)

    ---------------------------------------------------------------------------------------

    Microsoft Windows Malicious Software Removal Tool v3.18, April 2011
    Started On Fri Apr 15 03:05:03 2011
    ->Scan ERROR: resource process://pid:484 (code 0x00000490 (1168))

    Results Summary:
    ----------------
    No infection found.
    Microsoft Windows Malicious Software Removal Tool Finished On Fri Apr 15 03:07:06 2011


    Return code: 0 (0x0)

    ---------------------------------------------------------------------------------------

    Microsoft Windows Malicious Software Removal Tool v3.18, April 2011
    Started On Sun Apr 24 01:39:42 2011

    ---------------------------------------------------------------------------------------

    Microsoft Windows Malicious Software Removal Tool v3.18, April 2011
    Started On Sun Apr 24 01:40:00 2011

     

    and i read the ABOUT your download and i found note: " Note that x64 version of this tool will only run on Vista x64, Windows XP x64 and Windows 2003 x64 computers"

    i don't know if it works in windows 7 64-bit. and thanks very much for ur answer

    Saturday, April 23, 2011 11:48 PM
  • Are you using the 32 bit edition?

     


    My MVP is for the Windows Desktop Experience, i.e. Windows XP, Vista and Windows 7 IT

    Remote Assistance is available for a fee.

    I am best with C++ and I am learning C# using Visual Studio 2010

    Developer | Windows IT | Chess | Economics | Hardcore Games | Vegan Advocate | PC Reviews

    Saturday, April 23, 2011 11:52 PM
  • no i downloaded  Microsoft Windows Malicious Software Removal Tool 64-bit edition and run it ...... but no thing appears
    Sunday, April 24, 2011 12:04 AM
  • I assume you also tried the repair from the DVD as well

     


    My MVP is for the Windows Desktop Experience, i.e. Windows XP, Vista and Windows 7 IT

    Remote Assistance is available for a fee.

    I am best with C++ and I am learning C# using Visual Studio 2010

    Developer | Windows IT | Chess | Economics | Hardcore Games | Vegan Advocate | PC Reviews

    Sunday, April 24, 2011 1:32 AM
  • in dvd i found start up repair only ..... i don't know if there is other way?????
    Sunday, April 24, 2011 11:47 AM
  • the same problem happened with 4 friends . they were using MSE. i think this is a virus. please help.
    Sunday, April 24, 2011 1:58 PM
  • I have identified several malware programs that all of the major tools cannot identify let alone clean.

     

    I recently identifed a fakeware Total Security ruse ripping people off and bombarding them with spam galore. It is all fraudulent.

     

    See my IT site forum where I posted some comments on it.


    My MVP is for the Windows Desktop Experience, i.e. Windows XP, Vista and Windows 7 IT

    Remote Assistance is available for a fee.

    I am best with C++ and I am learning C# using Visual Studio 2010

    Developer | Windows IT | Chess | Economics | Hardcore Games | Vegan Advocate | PC Reviews

    Sunday, April 24, 2011 2:05 PM
  • i saw ur comments in forum. but i don't know how to stop this This malware.
    please help
    Sunday, April 24, 2011 2:19 PM
  • Sadly the only way out is to format the disk and hope your backups are clean. The germs of late have been very aggressive.

    I can recover files from the disk, using my shop tools, but that not practical due to cost.

     


    My MVP is for the Windows Desktop Experience, i.e. Windows XP, Vista and Windows 7 IT

    Remote Assistance is available for a fee.

    I am best with C++ and I am learning C# using Visual Studio 2010

    Developer | Windows IT | Chess | Economics | Hardcore Games | Vegan Advocate | PC Reviews

    • Marked as answer by Omar Hannoura Sunday, April 24, 2011 2:37 PM
    Sunday, April 24, 2011 2:32 PM
  • OK. thanks very much.
    Sunday, April 24, 2011 2:37 PM
  • Hi,

     

    The Security Center service cannot be started due to virus destruction.

     

    Have you tried the repair for Windows? If not, you can go to following SkyDrive to load the registry and import it to check the result.

     

    http://cid-9fb18a384ebfc662.office.live.com/self.aspx/.Documents/wscsvc%5E564%5E6.zip

     

    Before importing it, please back up the following registry key first. Just find the key and right click it, choose export and save to desktop.

     

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\wscsvc]

     

    After importing the correct registry, please go to services Windows to check if Security Center starts properly.

     

    Best Regards,

    Niki


    Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    • Proposed as answer by nizbot Thursday, May 12, 2011 9:40 PM
    • Marked as answer by Miya YaoModerator Monday, June 06, 2011 7:54 AM
    Tuesday, April 26, 2011 3:12 AM
    Moderator
  • Niki, you obviously not had any of the current crapware to deal with like I do every week.

    At least I am eating better of late thanks to it

     

    These crap scareware type programs have attracted the DoJ etc due to the fraud angle.

    I am disappointed that MSE et al do not see them or clean them

     

     


    My MVP is for the Windows Desktop Experience, i.e. Windows XP, Vista and Windows 7 IT

    Remote Assistance is available for a fee.

    I am best with C++ and I am learning C# using Visual Studio 2010

    Developer | Windows IT | Chess | Economics | Hardcore Games | Vegan Advocate | PC Reviews

    Tuesday, April 26, 2011 3:19 AM
  • Finally I found your registry link that seems to have sorted my problem. Thankyou Niki Han.

    I shall run through the problems I have had for the last few days since some of my observations may help others...

    My laptop got infected by the Win32/FakeRean virus. This virus throws up several alerts that look incredibly like official Windows warnings suggesting your computer is absolutely infested with viruses. Actually it's only FakeRean. On my machine it was calling itself Win 7 Home Security 2011 but apparently it can change its name to appear appropriate to your particular operating system.

    The virus blocked all access to the internet and also disabled / removed Windows Security Essentials. It seems to block any .exe file from running.

    My first thought was to return to an earlier Restore Point but the virus had deleted them all.

    I rebooted in Safe Mode (F8) but the virus pop-ups still appeared.

    I then ran the Microsoft Malicious Software Removal Tool (by typing mrt into the "Search programs and files" box on the Start button) but the scan didn't find anything.

    After searching for information using an uninfected computer, I found a post which stated that FakeRean only runs for one User profile. After creating another User Account (Administrator), I swiched user and right enough, the new account did not throw up the fake virus alerts. It was then possible in this new account to connect to the internet, download Microsoft Security Essentials and run a scan which found and removed FakeRean. The original User Profile then started up properly.

    However, the Security Alert flagged up that Windows Security Center was turned off and it wouldn't allow me to turn it on. Hence my visit to this forum.

    Uninstalling Security Essentails and reinstalling didn't make a difference. Running the Windows DVD and choosing "Repair" didn't find anything. So then I tried the above method and it seems to have worked...

    I looked for the key [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\wscsvc]  using regedit but it no longer existed on my machine; the virus must have wiped it. The link to http://cid-9fb18a384ebfc662.office.live.com/self.aspx/.Documents/wscsvc%5E564%5E6.zip took me to a zip file containing new registry information which I downloaded and installed, then rebooted the machine.

    The Windows Security Center now seems to be running correctly.

    Alan

     

    • Proposed as answer by Headcase1972 Thursday, October 27, 2011 9:49 AM
    Saturday, April 30, 2011 3:14 PM
  • Thank you Niki Han and Alan Joy everything work correctly now.
    Tuesday, May 03, 2011 6:28 PM
  • I dont know the kind of virus you have or not, even I faced the same issue.

     

    Solve PC Issues showed - 1 Issue requires alert, Windows Security Center is not "ON" Tried to switch it on didnt allow me to.

    Windows Defender - The virus didnt allow me to switch is "ON" The screen will pop up and disappear.

    Windows Essentials - The virus didnt allow me to switch it "On" either, The screen will just disappear.

    Tried even services center, to start the service manually, didnt work from there either.

    Logged in safe mode with networking, updated the Microsoft Essentials.

    Restarted

    Logged in safe mode without networking, started the Microsoft Essentials did a full scan, removed the viruses, and restarted.

    As of now everything works.

     

    -Vimal

    Tuesday, May 10, 2011 4:56 PM
  • Boom!  Nice work Niki.  Don't let egos get in the way guys, this is the correct answer as far as getting the wscsvc service started again after a fake AV blows out the registry entry.

     

    And to the initial replies: Suggesting to format, run a repair install is lazy and sloppy IT work.  Although a fresh install will typically solve the problem when all is said and done, it's just plain rude to suggest it unless all else has failed.  Most viral infections these days can be cleaned with a few tools and common sense in my experience:

    -Malwarebytes (full scan x2)

    -Kappersky TDSKiller (for rootkits)

    -Sysinternals ProcessExplorer

    -Microsoft Security Essentials (Install, quick scan, reboot, full scan)

    -And get your self copies of the .exe file association registry fix for each OS version.  Just google ".exe file association fix" or...

    XP: http://www.dougknox.com/xp/file_assoc.htm

    Vista: http://www.winhelponline.com/articles/105/1/File-association-fixes-for-Windows-Vista.html

    W7: http://www.winhelponline.com/blog/file-asso-fixes-for-windows-7/

     

    Good luck!

    Thursday, May 12, 2011 9:59 PM
  • Make sure you check you system carefully as some of the crap I have seen of late replace so many system files that Windows becomes unusable except to display the perps ads etc

     


    My MVP is for the Windows Desktop Experience, i.e. Windows XP, Vista and Windows 7 IT

    Remote Assistance is available for a fee.

    I am best with C++ and I am learning C# using Visual Studio 2010

    Developer | Windows IT | Chess | Economics | Hardcore Games | Vegan Advocate | PC Reviews

    Thursday, May 12, 2011 10:45 PM
  • Thanks a lot Alan..

    This is the only best solution that I can found in the internet for my problem..

    cheers

     

    Friday, May 13, 2011 8:41 PM
  • Nice solution Niki..Thanks a lot
    Friday, May 13, 2011 8:43 PM
  • i have try all of this - but the problem stiil exist.

     

    my pc system

    win 7 64 bit

    error 1058

     

    please, could you give some new directions ?

     

    thanks



    Monday, May 16, 2011 11:13 AM
  • http://support.microsoft.com/kb/241584

     


    My MVP is for the Windows Desktop Experience, i.e. Windows XP, Vista and Windows 7 IT

    Remote Assistance is available for a fee.

    I am best with C++ and I am learning C# using Visual Studio 2010

    Developer | Windows IT | Chess | Economics | Hardcore Games | Vegan Advocate | PC Reviews

    Monday, May 16, 2011 5:54 PM
  • Niki your a legend!

    This has been driving me mad!!! I had exactly the same issues as Alan, I tried everything I could think of but nothing would fix it until I found your post. Now my laptop is working properly again.

     

    Thank you so much

     

    Lynsay :o)

    Tuesday, May 31, 2011 2:10 AM
  • Hi,

     

    The Security Center service cannot be started due to virus destruction.

     

    Have you tried the repair for Windows? If not, you can go to following SkyDrive to load the registry and import it to check the result.

     

    http://cid-9fb18a384ebfc662.office.live.com/self.aspx/.Documents/wscsvc%5E564%5E6.zip

     

    Before importing it, please back up the following registry key first. Just find the key and right click it, choose export and save to desktop.

     

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\wscsvc]

     

    After importing the correct registry, please go to services Windows to check if Security Center starts properly.

     

    Best Regards,

    Niki


    Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

    Hi, just wanted to say Thank You for this information, I encounter such a FAKEAD virus, and it did damaged the Action Center on my Win7 64bit. All function is now fully resorted
    Wednesday, June 29, 2011 6:27 AM
  • Thank you. Had a similar problem and this worked great.
    Thursday, June 30, 2011 3:12 PM
  • awesome!  worked!  thanks.

    and by the way, to the responders that just say "delete everything and start all over," that's kind of extreme for missing registry entries.  what we look for is more pinpoint, less disruptive problem-solving.

    thanks, niki!

    Sunday, July 17, 2011 3:58 AM
  • Another thing that worked for me was running Combofix. Once I ran it, it did its thing, I uninstalled MSE, rebooted, Combofix populated a log file of what it did, Restarted again, reinstalled MSE, went services and set it to automatic  with delay and started the service.
    Friday, July 29, 2011 6:25 PM
  • Great, thanks so much Niki, worked a treat :)
    Tuesday, September 06, 2011 4:12 PM
  • Thank you very much...It finally worked by importing that registry key :)
    Stephane Elaheebaccus
    Monday, October 17, 2011 11:03 PM
  • Great Job, Niki and Alan. Exactly what was required!

    All this should be included in the Microsoft Support Centre answer http://support.microsoft.com/kb/2519899 , which falls sadly short of indicating the registry damage.

     

    Thanks again guys.

     

     

     

     

    Thursday, October 27, 2011 9:55 AM
  • I installed the registry file and while MSE seems to be working, I can't even find the Windows Security Center, and neither Windows Defender or my Windows Firewall want to turn on.

    Are these related issues?

    Monday, December 05, 2011 9:41 AM
  • I ended up here after a particularly virulent rootkit version of the Win7 Security 2012 bug blew past a stable install of Avira AntiVirus Premium 2012 without so much as a by your leave.  Nice touch deleting the wscsvc key and replacing it.  Thanks DoJ and HBGary for all your wild PC infections.

     

    I followed the instructions on Bleeping Computer:

    http://www.bleepingcomputer.com/virus-removal/remove-win-7-security-2012

    After running FixReg.reg, rkill.com, the Kaspersky TDSS rootkit remover, and finally MalwareBytes, I finally had control of my machine back and could reinstall my AV.  Unfortunately, without this service running, a person is left quite uninformed.

     

    Niki, you are the best.  After exporting the HKLM\SYSTEM\CurrentControlSet\services\wscsvc key from another working box on my network, running the resulting .reg on the cleaned box, followed by a reboot, everything is back to normal. 

     

    Veggie, I can understand the reason for your long term unemployed mvp status.  Format C reinstall is for chumps that cannot read the internet.  I spent less than an hour online figuring out how to clean my laptop back to its prior state and less than 8 hours actually implementing the solution.   Returning my lappie to yesterday's state with a complete drive wipe would have taken a week.

     

    Thanks again, Niki,

    Love,

    Icy

     

    Monday, December 19, 2011 7:13 AM
  • I've run into the same problem but I am not sure how to implement your solution of importing the registry. I went to back up the registry key but was not able to locate it. This is what I see

    Friday, August 10, 2012 8:50 PM
  • Thankyou very much Niki fixed my problem too.. got it from a ransomware attack.  Security service had been deleted and is now back and  is working like new!  ;)

    Wednesday, January 16, 2013 11:13 PM
  • I am buying a new hard disk soon and I will be doing yet another clean install

    this disk i have now has been wiped and reinstalled a lot over its 10,000 POH

    my game collection is now exceeding my available free space


    Windows MVP, XP, Vista, 7 and 8. More people have climbed Everest than having 3 MVP's on the wall.

    Hardcore Games, Legendary is the only Way to Play

    Developer | Windows IT | Chess | Economics | Vegan Advocate | PC Reviews

    Wednesday, January 16, 2013 11:19 PM
  • I had a problem with my son's sony laptop running windows 8 and windows defender.

    The windows defender had been stopped and would not re-start.

    I went to restore and there was just one restore point visible, I half thought it could be a setup but it wasn't.  It did seem to take an inordinate time to restore but it did come back up and the services were all started and running ok.

    I guess there must either be variants of this virus or variants in its attack dpending on operating system.

    WOULD BE REALLY GOOD IF MICROSOFT GOT A GRIP ON THIS OBVIOUS SYSTEM VULNERABILITY otherwise what is the point of the Defender software?  I may as well go back to a commercial AV.

    A second point. I really like the interface for the downloadable security essentials especially the configurability.  So what on earth happened to it in windows 8?  I can't download it because it errors and says the defender installed is up to the game. But I can't seem to find anything to configure it's a real backward step.

    Thursday, February 21, 2013 10:34 PM
  • definitely a security problem, in my IT site I link to the Malicious Software Removal tool which might be able to fix it.

    if that does not work, backup and install windows clean and leave your files backup for a a while until security updates get it cleaned up


    Windows MVP, XP, Vista, 7 and 8. More people have climbed Everest than having 3 MVP's on the wall.

    Hardcore Games, Legendary is the only Way to Play

    Developer | Windows IT | Chess | Economics | Vegan Advocate | PC Reviews

    Thursday, February 21, 2013 10:39 PM
  • I realize this is an old post, but it seems to describe my current problem.  Unfortunately, I cannot download the registry fix because everything I try to download gets an "infected by a virus" message and the downloaded file is deleted. Other options?
    Wednesday, September 11, 2013 2:03 AM
  • Hello Niki

    Thank you so much for your instruction it solved my issue

    Alex

    • Proposed as answer by Alex_0s Monday, January 20, 2014 4:54 PM
    Monday, January 20, 2014 4:54 PM