Pum.Disabled.SecurityCenter

[alicez]

I was updating MalwareBytes today and it downloaded a new version = 1.60.0.1800.

After the download, I coulnd't start MB. I tried to uninstall it and couldn't do that either. I finally found a MB program that cleans MB off the computer, which worked, thankfully.

Then I ran a scan and it came up with one "threat." I didn't get a picture of it because I closed the program, before I clicked on the "Fix It" tab.

Does anyone know what this might be? I googled and there seem to be many mentions of the Pum..., but nothing that I could understand.

Can anyone help?

Vendor: Pum.Disabled.SecurityCenter

Category: Registry Data

Item: HKLM\SOFTWARE\Microsoft\Security\Security CenterDisabledNotify

Other: Bad: [1] Good: [0]

[exile360]

Greetings

This setting indicates that one of the monitoring functions of the Security Center has been disabled. Infections will sometimes do this, but some antivirus software and firewalls will do this as well since they monitor their own status (for such AV's/firewalls, this prevents you from receiving duplicate alerts when your AV is out of date or your antivirus or firewall is disabled).

If you would, please run another Quick Scan with Malwarebytes Anti-Malware and post the log in your next reply, once I see the entire detection, I can tell you which Security Center function was disabled and exactly what it means.

Also, please let me know what antivirus and firewall software you use.

Thanks

[alicez]

Greetings

This setting indicates that one of the monitoring functions of the Security Center has been disabled. Infections will sometimes do this, but some antivirus software and firewalls will do this as well since they monitor their own status (for such AV's/firewalls, this prevents you from receiving duplicate alerts when your AV is out of date or your antivirus or firewall is disabled).

If you would, please run another Quick Scan with Malwarebytes Anti-Malware and post the log in your next reply, once I see the entire detection, I can tell you which Security Center function was disabled and exactly what it means.

Also, please let me know what antivirus and firewall software you use.

Thanks

I will run the scan now. BUT, just wanted you to know - on my other XP computer the new version was automatically downloaded and I could not run MB. Same as my other computer. Rather than go through any more trouble, I deleted the NEW version of MB and installed my previous version and now it is working! Something appears to be 'wrong' with the new MB version any WinXP.

[alicez]

I will run the scan now. BUT, just wanted you to know - on my other XP computer the new version was automatically downloaded and I could not run MB. Same as my other computer. Rather than go through any more trouble, I deleted the NEW version of MB and installed my previous version and now it is working! Something appears to be 'wrong' with the new MB version any WinXP.

Malwarebytes Anti-Malware 1.60.0.1800

www.malwarebytes.org

Database version: v2011.12.29.03

Windows XP Service Pack 3 x86 NTFS

Internet Explorer 8.0.6001.18702

Owner :: GOTARO234 [administrator]

12/29/2011 10:49:08 AM

mbam-log-2011-12-29 (11-15-05).txt

Scan type: Quick scan

Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM

Scan options disabled: P2P

Objects scanned: 175413

Time elapsed: 2 minute(s), 42 second(s)

Memory Processes Detected: 0

(No malicious items detected)

Memory Modules Detected: 0

(No malicious items detected)

Registry Keys Detected: 0

(No malicious items detected)

Registry Values Detected: 0

(No malicious items detected)

Registry Data Items Detected: 1

HKLM\SOFTWARE\Microsoft\Security Center|UpdatesDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.

Folders Detected: 0

(No malicious items detected)

Files Detected: 0

(No malicious items detected)

(end)

[exile360]

That detection indicates that the function in Security Center that notifies you about Automatic Updates being disabled has been turned off. If you made that change yourself, then you can safely have Malwarebytes ignore that detection, otherwise you can allow MBAM to fix it.

As for your issues with 1.60, please try the following, it should correct the issue:

• Download and run mbam-clean.exe from here
  
• It will ask to restart your computer, please allow it to do so very important
  
• After the computer restarts, temporarily disable your Anti-Virus and install the latest version of Malwarebytes' Anti-Malware from here
  
  • Note: You will need to reactivate the program using the license you were sent via email if using the Pro version
    
  • Launch the program and set the Protection and Registration. Then go to the UPDATE tab if not done during installation and check for updates.
    Restart the computer again and verify that MBAM is in the task tray if using the Pro version. Now setup any file exclusions as may be required in your Anti-Virus/Internet-Security/Firewall applications and restart your Anti-Virus/Internet-Security applications. You may use the guides posted in the FAQ's here or ask and we'll explain how to do it.
    

[alicez]

That detection indicates that the function in Security Center that notifies you about Automatic Updates being disabled has been turned off. If you made that change yourself, then you can safely have Malwarebytes ignore that detection, otherwise you can allow MBAM to fix it.

As for your issues with 1.60, please try the following, it should correct the issue:

• Download and run mbam-clean.exe from here
  
• It will ask to restart your computer, please allow it to do so very important
  
• After the computer restarts, temporarily disable your Anti-Virus and install the latest version of Malwarebytes' Anti-Malware from here
  
  • Note: You will need to reactivate the program using the license you were sent via email if using the Pro version
    
  • Launch the program and set the Protection and Registration. Then go to the UPDATE tab if not done during installation and check for updates.
    Restart the computer again and verify that MBAM is in the task tray if using the Pro version. Now setup any file exclusions as may be required in your Anti-Virus/Internet-Security/Firewall applications and restart your Anti-Virus/Internet-Security applications. You may use the guides posted in the FAQ's here or ask and we'll explain how to do it.
    

In Windows Security Center I have Automatic Updates turned OFF. Is that what you are referring to? I can then put that PUM "threat" in the MB "Ignore" section? Please advise.

(Regarding my netbook and not being able to run the new version of MB... I will wait a while before I do any more uninstalling and installing. I am content just to have the previous version working.)

[exile360]

In Windows Security Center I have Automatic Updates turned OFF. Is that what you are referring to? I can then put that PUM "threat" in the MB "Ignore" section? Please advise.

To do this, perform a Quick scan and once complete, click on Show Results and then highlight the detection by clicking on it once and then click on the Ignore button. Once that is complete there should be no items remaining in the detections list, click on Remove Selected to complete the process. The item will remain as you have set it (to disable updates) and the item should no longer be detected by Malwarebytes.

[alicez]

To do this, perform a Quick scan and once complete, click on Show Results and then highlight the detection by clicking on it once and then click on the Ignore button. Once that is complete there should be no items remaining in the detections list, click on Remove Selected to complete the process. The item will remain as you have set it (to disable updates) and the item should no longer be detected by Malwarebytes.

I am confused.

You say "click on Remove Selected to complete the process."

When I looked at the report of threat, it listed the PUM file. I highlighted it and then clicked on the "Ignore." It then went into the "Ignore List" section. I don't know what you mean by the "click on Remove Selected to complete the process." I don't remember doing that! I only clicked on the "Ignore." Did I do something wrong?

I just ran a scan and it no longer showed the PUM file.

[exile360]

I am confused.

You say "click on Remove Selected to complete the process."

When I looked at the report of threat, it listed the PUM file. I highlighted it and then clicked on the "Ignore." It then went into the "Ignore List" section. I don't know what you mean by the "click on Remove Selected to complete the process." I don't remember doing that! I only clicked on the "Ignore." Did I do something wrong?

I just ran a scan and it no longer showed the PUM file.

Nope, you did nothing wrong, but normally if you don't click on Remove Selected at the end of a scan where an item has been detected (even if all items detected were ignored), it prompts you saying that Your scan results will be lost. Are you sure you wish to continue?.

[alicez]

Nope, you did nothing wrong, but normally if you don't click on Remove Selected at the end of a scan where an item has been detected (even if all items detected were ignored), it prompts you saying that Your scan results will be lost. Are you sure you wish to continue?.

I just ran another full scan and the scan results, once again, show that PUM Disabled "Threat," even though I put it in IGNORE.

Why is this happening?

(I've alreay uninstalled and installed new version, etc. I hope I don't have to uninstall again and reinstall, etc. The same thing is happening on my other WinXP computer - show the PUM again as a "Threat," even though it is in "Ignore!")

Have really spent a lot of time on this "PUM" problem and new version of MB not running. Uninstalling and reinstalling, etc.

[exile360]

I just ran another full scan and the scan results, once again, show that PUM Disabled "Threat," even though I put it in IGNORE.

Why is this happening?

(I've alreay uninstalled and installed new version, etc. I hope I don't have to uninstall again and reinstall, etc. The same thing is happening on my other WinXP computer - show the PUM again as a "Threat," even though it is in "Ignore!")

Have really spent a lot of time on this "PUM" problem and new version of MB not running. Uninstalling and reinstalling, etc.

Please zip and attach your exclusions.dat file located in C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware folder. I need to have the developers take a look at this to determine why it isn't retaining your ignore list properly.

Thanks

[alicez]

Please zip and attach your exclusions.dat file located in C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware folder. I need to have the developers take a look at this to determine why it isn't retaining your ignore list properly.

Thanks

I am sorry. I am new at this and do not know what you mean by "Please zip and attach your exclusions.dat file located in C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware folder."

[exile360]

Open the folder C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware. Within that folder you'll find a file called exclusions. Right-click on the file and select Copy. Close the folder and then right-click on your desktop and choose Paste.

Once that is done, right-click on the exclusions file now located on your destkop and hover your mouse over Send to and choose Compressed (zipped) Folder.

Attach the file to your next post by using the Add Reply button. You'll see a Browse... button below where it says Attachments. Browse to your desktop and double-click on the exclusions zip folder you created in the previous step and click the blue Attach This File button. Once you're done, click Add Reply and the file will be attached to your post.

[alicez]

Open the folder C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware. Within that folder you'll find a file called exclusions. Right-click on the file and select Copy. Close the folder and then right-click on your desktop and choose Paste.

Once that is done, right-click on the exclusions file now located on your destkop and hover your mouse over Send to and choose Compressed (zipped) Folder.

Attach the file to your next post by using the Add Reply button. You'll see a Browse... button below where it says Attachments. Browse to your desktop and double-click on the exclusions zip folder you created in the previous step and click the blue Attach This File button. Once you're done, click Add Reply and the file will be attached to your post.

I've gotten to the part where the file/folder is on my desktop. When I right click on Send To, I get a pop-upo that reads: "For Compressed (zipped) Folders to handle ZIP files correctly, the application associated with them must be Compressed (Zipped) Folders. Currently this is not the case.

Do you wasnt to designate Compress (zipped) Folders as the application for handling ZIP files?"

Do I click on YES or NO?

This isn't going to harm my machine or make it malfunction, is it?

[exile360]

You can click YES if you don't have another program, such as WinRAR handling zip/compressed files, if you do have such a program, then use that program to create the zip file instead.

This isn't going to harm my machine or make it malfunction, is it?

No this won't harm your machine or cause it to malfunction.

[alicez]

You can click YES if you don't have another program, such as WinRAR handling zip/compressed files, if you do have such a program, then use that program to create the zip file instead.

No this won't harm your machine or cause it to malfunction.

Did that. Now where is that file?

Is this (attached) it?

P.S.

This is what shows after scan.

http://imageshack.us/photo/my-images/839/mbthreat.gif/

I already clicked on "Ignore" and it does show in the Ignore section.

[exile360]

No, it didn't attach the exclusions.dat file. The only item attached to your post is an image of MBAM.

[alicez]

I wonder if this exclusion.zip attached is what you wanted?

If not, how do I attach. I clicked on the "Attach."

[alicez]

I browsed and found exclusions.zip on my desktop and went to "Attach Thyis File" in lower part of this thread and went to the desktop and attached the file "exclusion.zip."

Are you receiving it now?

exclusions.zip

[exile360]

That's it, thanks

[exile360]

I was able to partially replicate your results using the exclusions.dat file you provided. I found that if I updated the database and then immediately performed a scan, the item in your Ignore List was detected even though it should not have been.

If I closed the scanner after the update and re-opened it and then did my scan, the item was not detected any longer, meaning it was then ignored as it should be.

Has this been your experience as well? What I mean is, after you perform an update, if you close and then re-open the scanner and then do your scan, is the item still detected even though it is in your Ignore List?

[alicez]

That's it, thanks

Would you let me know the outcome/results?

The same thing is happening on my other WinXP computer. We also cannot procede with the scan after it shows this PUM "threat," and therefore we have to click on EXIT. And then, the scan is not saved in the LOGS section.

A lot of time spent on this matter, as I hope you can understand!

(Never had these problems before this new edition!!)

[obo123]

I had two "Pum.Disabled.SecurityCenter" warnings: Ending with "|UpdatesDisableNotify"; and "|AntiVirusDisableNotify".

Although both were selected-automatically after a "quick scan", pressing "Ignore" did not work.

However, by un-ticking both of them manually; followed-by ticking one of the "problems"; then pressing "Ignore"; it was moved-successfully to the "Ignore List".

Ticking the other "problem"; then pressing "Ignore"; similarly-moved the other "problem" to the "Ignore List".

When both "problems" had been moved to the "Ignore List"; and the results-list was blank; it was then necessary to press "Remove Selected"; where a pop-up stated that there was nothing-left to remove; I pressed "ok"; was taken-back to the main "Scanner" tab; where I could now click on the "Ignore List" tab; which-showed that both of the items had been successfully-added.

Upon exiting and re-starting the program, the items were still on the "Ignore List"; and were not found to be "problems" upon re-scanning.

I've laboured the point; used too many semi-colons; but I hope that that helps!

Since I'll probably never post here again; thanks very much for the program, and thanks for everyone's great work!

dmt

[alicez]

I had two "Pum.Disabled.SecurityCenter" warnings: Ending with "|UpdatesDisableNotify"; and "|AntiVirusDisableNotify".

Although both were selected-automatically after a "quick scan", pressing "Ignore" did not work.

However, by un-ticking both of them manually; followed-by ticking one of the "problems"; then pressing "Ignore"; it was moved-successfully to the "Ignore List".

Ticking the other "problem"; then pressing "Ignore"; similarly-moved the other "problem" to the "Ignore List".

When both "problems" had been moved to the "Ignore List"; and the results-list was blank; it was then necessary to press "Remove Selected"; where a pop-up stated that there was nothing-left to remove; I pressed "ok"; was taken-back to the main "Scanner" tab; where I could now click on the "Ignore List" tab; which-showed that both of the items had been successfully-added.

Upon exiting and re-starting the program, the items were still on the "Ignore List"; and were not found to be "problems" upon re-scanning.

I've laboured the point; used too many semi-colons; but I hope that that helps!

Since I'll probably never post here again; thanks very much for the program, and thanks for everyone's great work!

dmt

I believe you should really create your own post. Attaching it to mine means I will get all your posts/answers.

[obo123]

Un-tick; tick; ignore; remove selected; ok; exit.