Security Center Error Message

On Sun, 12 Apr 2009 14:25:01 -0700, me too
<metoo@discussions.microsoft.com> wrote:


>> >I have just made the service "Windows Management Instrumentation" start, i
>> >did as you said i used the local system account. (sorry about my last post).
>> >now when i still try to start the security center i get the same error 1079.
>> >the accoutn is local service, the circle is filled in "Use this account". any
>> >ideaS?
>> Security Center should be set to Auto (delayed start), and to log on
>> as Local Service - have you checked the password? (it should be
>> removed - although the blobs will still show)
>> HTH
>> --
>> Noel Paton
>> www.crashfixpc.co.uk
>>
>> Nil Carborundum Illegitemi
>>
>
>ok, done everything you have said so far... still not working same error
>:S
>thanks

OK then.... check that the 'Path to executable' in the General tab
says
'C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted'
(assuming your Windows is on on the C: drive?)
check that your copy of svchost.exe is present in that location, and
that its version number is 6.01.6001.18000, and that (In the security
tab) SYSTEM, Administrators, and Users have onlyRead and
Readd&Execute permissions, and that TrustedInstaller has Full
Control.There should be no other entries in teh 'Groups or Username'
box (but don't deletew others if they exist - yet! - just report back
with details).

This seems to be a permissions error, which may mean that some other
program has taken over the file's permissions - if so, then it's
usually a security suite which has been installed (and possibly later
uninstalled, perhaps improperly), or malware.
You say that you've never had Norton installed - what security
software do you have running now, and what has been run in the past
(even briefly)?
Have you ever had a significant infection from malware of any kind?
when did you last run a full scan of the system with your security
software?

--
Noel Paton
www.crashfixpc.co.uk

Nil Carborundum Illegitemi

"Noel Paton" wrote:

> On Sun, 12 Apr 2009 14:25:01 -0700, me too
> <metoo@discussions.microsoft.com> wrote:
>
>
> >> >I have just made the service "Windows Management Instrumentation" start, i
> >> >did as you said i used the local system account. (sorry about my last post).
> >> >now when i still try to start the security center i get the same error 1079.
> >> >the accoutn is local service, the circle is filled in "Use this account". any
> >> >ideaS?
> >> Security Center should be set to Auto (delayed start), and to log on
> >> as Local Service - have you checked the password? (it should be
> >> removed - although the blobs will still show)
> >> HTH
> >> --
> >> Noel Paton
> >> www.crashfixpc.co.uk
> >>
> >> Nil Carborundum Illegitemi
> >>
> >
> >ok, done everything you have said so far... still not working same error
> >:S
> >thanks
>
> OK then.... check that the 'Path to executable' in the General tab
> says
> 'C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted'
> (assuming your Windows is on on the C: drive?)
> check that your copy of svchost.exe is present in that location, and
> that its version number is 6.01.6001.18000, and that (In the security
> tab) SYSTEM, Administrators, and Users have onlyRead and
> Readd&Execute permissions, and that TrustedInstaller has Full
> Control.There should be no other entries in teh 'Groups or Username'
> box (but don't deletew others if they exist - yet! - just report back
> with details).
>
> This seems to be a permissions error, which may mean that some other
> program has taken over the file's permissions - if so, then it's
> usually a security suite which has been installed (and possibly later
> uninstalled, perhaps improperly), or malware.
> You say that you've never had Norton installed - what security
> software do you have running now, and what has been run in the past
> (even briefly)?
> Have you ever had a significant infection from malware of any kind?
> when did you last run a full scan of the system with your security
> software?
>
> --
> Noel Paton
> www.crashfixpc.co.uk
>
> Nil Carborundum Illegitemi
>

hi, i did what you said:

svchost.exe is file version "6.0.6001.18000" not "6.01.6001.18000".
The groups and usernames permissions is all set how you said, and no extras
that shouldnt be there.
i havent had any malware/virus at all. now you said it, i did install:
NOD32, ZoneAlarm, Ad-Aware and Avast Anti-virus, which are all running now
at the same time. I did this because i wanted a very secure computer. So i
think this may be the cause. I have scanned recently, and as always, im
always clean.
thanks

On Sun, 12 Apr 2009 17:11:23 -0700, me too
<metoo@discussions.microsoft.com> wrote:

>
>
>"Noel Paton" wrote:
>
>> On Sun, 12 Apr 2009 14:25:01 -0700, me too
>> <metoo@discussions.microsoft.com> wrote:
>>
>>
>> >> >I have just made the service "Windows Management Instrumentation" start, i
>> >> >did as you said i used the local system account. (sorry about my last post).
>> >> >now when i still try to start the security center i get the same error 1079.
>> >> >the accoutn is local service, the circle is filled in "Use this account". any
>> >> >ideaS?
>> >> Security Center should be set to Auto (delayed start), and to log on
>> >> as Local Service - have you checked the password? (it should be
>> >> removed - although the blobs will still show)
>> >> HTH
>> >> --
>> >> Noel Paton
>> >> www.crashfixpc.co.uk
>> >>
>> >> Nil Carborundum Illegitemi
>> >>
>> >
>> >ok, done everything you have said so far... still not working same error
>> >:S
>> >thanks
>>
>> OK then.... check that the 'Path to executable' in the General tab
>> says
>> 'C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted'
>> (assuming your Windows is on on the C: drive?)
>> check that your copy of svchost.exe is present in that location, and
>> that its version number is 6.01.6001.18000, and that (In the security
>> tab) SYSTEM, Administrators, and Users have onlyRead and
>> Readd&Execute permissions, and that TrustedInstaller has Full
>> Control.There should be no other entries in teh 'Groups or Username'
>> box (but don't deletew others if they exist - yet! - just report back
>> with details).
>>
>> This seems to be a permissions error, which may mean that some other
>> program has taken over the file's permissions - if so, then it's
>> usually a security suite which has been installed (and possibly later
>> uninstalled, perhaps improperly), or malware.
>> You say that you've never had Norton installed - what security
>> software do you have running now, and what has been run in the past
>> (even briefly)?
>> Have you ever had a significant infection from malware of any kind?
>> when did you last run a full scan of the system with your security
>> software?
>>
>> --
>> Noel Paton
>> www.crashfixpc.co.uk
>>
>> Nil Carborundum Illegitemi
>>
>
>hi, i did what you said:
>
>svchost.exe is file version "6.0.6001.18000" not "6.01.6001.18000".
>The groups and usernames permissions is all set how you said, and no extras
>that shouldnt be there.
>i havent had any malware/virus at all. now you said it, i did install:
>NOD32, ZoneAlarm, Ad-Aware and Avast Anti-virus, which are all running now
>at the same time. I did this because i wanted a very secure computer. So i
>think this may be the cause. I have scanned recently, and as always, im
>always clean.
>thanks
NOD32 _AND_Avast????
running at the same time?
If that's the case, then I'm surprised the machine runs at all! NEVER
run two anti-viruses at the same time on any machine - they WILL
interfere with each other!
If you insist on having two installed, then make sure that one is
completely disabled, and use that one only as a backup scanner. In the
case of your pairing, I'd remove Avast, since NOD32 is far superior as
protection..
As far as I'm concerned, Zone Alarm is not required in Vista, since
Vista's own firewall is perfectly good enough for most purposes, and
is two-way. ZA is also known to have its problems (removal being one
of them!) in at least some versions.

svchost.... my bad (typo/brainf$rt?) you have the same version as me
Can you list the disabled services for me? - there appear to be some
reports that other disabled services can affect the situation here,
despite not being directly involved.

Try running the following command from an Admin CMD prompt....

winmgmt /verifyrepository

what does it report?
--
Noel Paton
www.crashfixpc.co.uk

Nil Carborundum Illegitemi

"me too" <metoo@discussions.microsoft.com> wrote in message
news:19E79CCB-F6B2-4FC7-A873-0CF7D3E9E419@microsoft.com...
>
> i havent had any malware/virus at all. now you said it, i did install:
> NOD32, ZoneAlarm, Ad-Aware and Avast Anti-virus, which are all running now
> at the same time.

I used ZoneAlarm many years ago before they released their commercial
version. Years after I had removed it, I had problems with IE; the major
symptom was that I rarely was able to get large files downloaded using IE. I
finally discovered there was one ZoneAlarm file remaining in my system, and
based on searches of the internet, it was spyware. I am surprised that
Ad-Aware did not catch it. I removed the one ZoneAlarm file and my download
problems went away. Probably none of this affects you, and I assume that
ZoneAlarm does not install spyware such as that anymore, but I think it is
an additional reason to consider abandoning it, removing it, and ensuring it
is totally gone from your system.

To be effective, anti-virus programs must use undocumented and technically
advanced and complex techniques. It is highly likely that they are not
compatible. ZoneAlarm and Ad-Aware are not anti-virus programs, except you
might have purchased an anti-virus program with ZoneAlarm. As already
stated, use only one anti-virus program at a time. Note that simply
disabling an anti-virus program might not be enough to remove possible
incompatibility program, but other people are more experienced and
knowledgeable about that.

I am having the same problem with, This service (Security Center)
Network, Windows Defender, and Server Services as well.

Skrappy
Mr. Arnold;531908 Wrote:
> "jobella" <jobella@xxxxxx> wrote in message
> news:4AB4DE7D-B16B-4E4C-B61B-3DB796D45F2C@xxxxxx> > >
> > > Hello,
> > > For the past month I've been getting an error message from Security
> > > Center,
> > > saying it is turned off however I am unable to open it.
> > > I had Norton trial and have just installed Bitdefender. Normally I
> > should
> > > be
> > > able to click in security center that I have my own software but am
> > unable
> > > to
> > > do so
> > > I went into Security Center Properties and got the following message:
> > > "configuration manager: the specific device instance handle does not
> > > correspond to a present device"
> > > I then noticed that the Security Center was STOPPED. I got the
> > following
> > > message when I tried to start it: "Windows would not start Security
> > Center
> > > Sevice on Local Computer. Error 1079: The account specified for this
> > > service
> > > is different from the account specified for other services running in
> > the
> > > same process." Can anyone help me..... > >
>
>
> To keep it short, go to the Services off of the Start Button, Control
> Panel/Admin Tool and find the Security Center Service. You
> right-click the
> line and go to Properties to the Logon tab. You go to Use this
> Account and
> enter Local Service and leave password blank click OK. Then you Start
> the
> service.
>
> I don't what is causing the problem, but I suspect the uninstalling
> and
> installing of security software has caused the password to become
> corrupted.
> You might get the same message after the service starts successfully
> when
> you try to view the service's dependencies, but the service will
> start.


--
Skrappy

"Sam Hobbs" wrote:

> "me too" <metoo@discussions.microsoft.com> wrote in message
> news:19E79CCB-F6B2-4FC7-A873-0CF7D3E9E419@microsoft.com...
> >
> > i havent had any malware/virus at all. now you said it, i did install:
> > NOD32, ZoneAlarm, Ad-Aware and Avast Anti-virus, which are all running now
> > at the same time.

the command that i was told to type in the prompt displayed this message:

WMI repository is consistent

i have removed Zone Alarm and Avast. i now just have Ad-Aware and NOD32.

ill report about the services later.

thanks
>
> I used ZoneAlarm many years ago before they released their commercial
> version. Years after I had removed it, I had problems with IE; the major
> symptom was that I rarely was able to get large files downloaded using IE. I
> finally discovered there was one ZoneAlarm file remaining in my system, and
> based on searches of the internet, it was spyware. I am surprised that
> Ad-Aware did not catch it. I removed the one ZoneAlarm file and my download
> problems went away. Probably none of this affects you, and I assume that
> ZoneAlarm does not install spyware such as that anymore, but I think it is
> an additional reason to consider abandoning it, removing it, and ensuring it
> is totally gone from your system.
>
> To be effective, anti-virus programs must use undocumented and technically
> advanced and complex techniques. It is highly likely that they are not
> compatible. ZoneAlarm and Ad-Aware are not anti-virus programs, except you
> might have purchased an anti-virus program with ZoneAlarm. As already
> stated, use only one anti-virus program at a time. Note that simply
> disabling an anti-virus program might not be enough to remove possible
> incompatibility program, but other people are more experienced and
> knowledgeable about that.
>

I still cant get the Security Center services started. I think the
trojan has made changes to my Administrative Account and Passord as
well. I tried to do an recovery through the system recovery console and
the Aministrative Password has changed. I cannot get into it. I think
that this might be the main problem.

Does anyone know how to reset or change the administrative password?


Skrappy
Mr. Arnold;531908 Wrote:
> "jobella" <jobella@xxxxxx> wrote in message
> news:4AB4DE7D-B16B-4E4C-B61B-3DB796D45F2C@xxxxxx> > >
> > > Hello,
> > > For the past month I've been getting an error message from Security
> > > Center,
> > > saying it is turned off however I am unable to open it.
> > > I had Norton trial and have just installed Bitdefender. Normally I
> > should
> > > be
> > > able to click in security center that I have my own software but am
> > unable
> > > to
> > > do so
> > > I went into Security Center Properties and got the following message:
> > > "configuration manager: the specific device instance handle does not
> > > correspond to a present device"
> > > I then noticed that the Security Center was STOPPED. I got the
> > following
> > > message when I tried to start it: "Windows would not start Security
> > Center
> > > Sevice on Local Computer. Error 1079: The account specified for this
> > > service
> > > is different from the account specified for other services running in
> > the
> > > same process." Can anyone help me..... > >
>
>
> To keep it short, go to the Services off of the Start Button, Control
> Panel/Admin Tool and find the Security Center Service. You
> right-click the
> line and go to Properties to the Logon tab. You go to Use this
> Account and
> enter Local Service and leave password blank click OK. Then you Start
> the
> service.
>
> I don't what is causing the problem, but I suspect the uninstalling
> and
> installing of security software has caused the password to become
> corrupted.
> You might get the same message after the service starts successfully
> when
> you try to view the service's dependencies, but the service will
> start.


--
Skrappy