Page 1 of 1

Annoying Antivirus Message Removal Walkthrough on how to delete the message Rate Topic: -----

#1 Wizzy  Icon User is offline

  • D.I.C Regular
  • member icon

Reputation: 6
  • View blog
  • Posts: 408
  • Joined: 20-November 05

Posted 03 December 2005 - 08:22 AM

This article goes out to all Windows XP users with SP2, but no antivirus software...You might be saving for one and all you ever see is this image (in the taskbar):

Posted Image

I will instruct you on how to remove message and icon.

Firstly we need to know what process causes the annoying spam on our desktop. So open task manager (CTRL+ALT+DELETE or Start > Run > taskmgr).

Now look for the process, named wscntfy.exe

Posted Image

Even try and end it.

However it automatically starts again.

Try deleting the file through explorer.exe or cmd.exe, but its also permission denied.

Posted Image

Now go to Start > Run > C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools

Open Services in that directory and look for Security Center.

Posted Image

Now stop the service.

Posted Image

Take a look in task manager, it's gone! Take a look in our task bar, it's gone! But that is not the end.

Delete the wscntfy.exe from system32.

At this current time the only way to hide the message, is to keep the security center stopped.

Hope this helped someone.

Is This A Good Question/Topic? 0
  • +

Replies To: Annoying Antivirus Message Removal

#2 snoj  Icon User is offline

  • Married Life
  • member icon

Reputation: 84
  • View blog
  • Posts: 3,564
  • Joined: 31-March 03

Posted 06 January 2006 - 03:13 PM

Or you could just go to the "Security Center" located in the Control Panel. Then after clicking on "Change the way Security Center alerts me" uncheck all the check boxes and then click "Ok".


Faster. Simpler. Less mess then screwing with Window's internal guts.

This post has been edited by hotsnoj: 06 January 2006 - 03:14 PM

Was This Post Helpful? 0
  • +
  • -

#3 nirvanarupali  Icon User is offline

  • D.I.C Stomach
  • member icon

Reputation: 13
  • View blog
  • Posts: 1,119
  • Joined: 01-August 07

Posted 12 June 2008 - 08:45 PM

Every virus has a value in the registry. All you have to do is delete it first in the registry, before you delete the virus file to where it is located. Virus makers and destroyers know this location in the registry.

It is to avoid to run the virus after boot. I've been doing this with my own virus as my test since new viruses can never be detected by any anti-virus software out there.
Was This Post Helpful? 0
  • +
  • -

#4 PlasticineGuy  Icon User is offline

  • mov dword[esp+eax],0
  • member icon

Reputation: 281
  • View blog
  • Posts: 1,436
  • Joined: 03-January 10

Posted 13 February 2010 - 01:21 AM

I was under the assumption that a virus can take the form of assembly attached to an EXE and thus does not need a registry value?
Was This Post Helpful? 0
  • +
  • -

#5 no2pencil  Icon User is offline

  • Admiral Fancy Pants
  • member icon

Reputation: 5388
  • View blog
  • Posts: 27,384
  • Joined: 10-May 07

Posted 08 March 2010 - 10:52 PM

Assembly is code, & would need to be assembled.

Once a program is an binary executable, it is no longer code. Could be Visual Basic, C, C++, Assembly, doesn't matter. The language is irrelevant once it's made into a binary executable. I have written applications in assembler that do, or do not use the Windows Registry. The registry is a tool, & is independent of any language. It has it's own purpose & usage with the Windows OS.
Was This Post Helpful? 0
  • +
  • -

#6 PlasticineGuy  Icon User is offline

  • mov dword[esp+eax],0
  • member icon

Reputation: 281
  • View blog
  • Posts: 1,436
  • Joined: 03-January 10

Posted 10 March 2010 - 10:19 PM

Sorry; I meant assembled assembly.
Was This Post Helpful? 0
  • +
  • -

Page 1 of 1