Support Forum Articles File Help Startup DB Tips Service DB Hijack This! Analyzer


HijackThis automated log analyzer! Submit a log and you will receive ALL the information we have in our DB's on everything on your system INSTANTLY!


Click here to scan for wscntfy.exe Related Errors and Optimize PC performance

What is It?
Windows Security Center Notification - wscntfy.exe

What does it do?
wscntfy.exe - This is a part of windows XP's SP2. This is a little notification that will be in your taskbar and continue to nag you about various security settings like your firewall, automatic updates and virus protection.

If you'd like to get rid of this process you'll want to go into your control panel and then go into the security center. Once in there look along the left bar where you'll see quite a bit of text. At the bottom of this list you'll see where it says change the way security center alerts me. Click on this. Uncheck all three of these settings.

Click image for larger version

Name:  alert.png
Views: 0
Size:  8.8 KB

Virus Precaution:
The original wscntfy.exe from Microsoft gets placed at C:WINDOWSSystem32wscntfy.exe . If you find it anywhere else then you should be suspicious for sure.

You'll want to keep an eye on this google search for any known viruses. At this time I have not found ANY viruses that run themselves using this filename. All of the results currently affect this file in some way, but do not actually run as this filename.

Fix wscntfy.exe Errors: Free Scan

Recommended: Run a Free Performance Scan to automatically optimize memory, CPU and Internet Settings

wscntfy.exe is a Windows System File and should be in a system directory. If it is then this application is safe.

Startup DB Entries:
[KAVPersonal90]"Added by the BANKER-FZ TROJAN!" b

Service DB Entries:
Nothing Found


Every attempt has been made to ensure the information about wscntfy.exe is accurate but alot of malware applications try to pose as valid applications. If it is something other than what was posted above please leave some feedback in the forum.
Printer Friendly

User Comments
davidWell, C:\Windows\ServicePackFiles\i386 would probably be the folder where all the uncompressed files for SP2 are kept, so it's possible that it is a valid copy of the file kept in your System32 folder. This way, if any of your SP2 files are corrupted, you could use the backups to restore them. If your antivirus is updated and doesn't detect a virus when you scan that folder, I wouldn't think it was that virus.
johnyes, well you say that wscntfy.exe can only be placed in C:WINDOWSSystem32, but this new virus called PWSTEAL.Rivarts manipulates this file, i have this virus in my computer, and i did a search on wscntfy.exe and i found it in 2 places: C:WINDOWSSystem32 and C:\WINDOWS\ServicePackFiles\i386, now is the second one harmfull or is it normal?
steveAlso a prefetch file at 20Kb
metmandude I cant finish the wscntfy.exe process, so I cant delete the file to replace, what do I do???
datma88the second one is harmful, on my computer wscntfy.exe only exist in sys32
Dr Mike EllistonMany thanks for helping me get rid of that damned wscntfy nagging shield on a PC never connected to the internet!
Kelteel===>> wscntfy.exe
IMHOMost helpful explanation I've found from google(ing) a MS process. Far more helpful than MS's "User Friendly" explanations. Thank you.
Windows Files
lsass.exe | csrss.exe | alg.exe | dwwin.exe | Svchost.exe | Spoolsv.exe | wowexec.exe | cidaemon.exe | wmiprvse.exe | ctfmon.exe | Winlogon.exe | wuauclt.exe | Smss.exe | msmsgs.exe | rundll32.exe | mdm.exe | ntvdm.exe | wscntfy.exe | explorer.exe | ntdll.dll | iexplore.exe | msdxm.ocx | wisptis.exe | wdfmgr.exe | MsiExec.exe | PDVDServ.exe | DLLhost.exe | gcasdtserv.exe | shdoclc.dll | Winmgmt.exe | cisvc.exe | oleaut32.dll | taskmgr.exe | inetinfo.exe | Shell32.dll | mspmspsv.exe | internat.exe | hal.dll | comctl32.dll | mstask.exe |