help with usmt migwiz_a.exe, and dep

[placou 1968]

mse caught..... usmt migwiz_a.exe before i trust what i have read from random pesons across the web, i thought i might seek the advice of someone with a working knowledge of whatever this is.

i have taken the computer off line as whatever this is also turned m.s.e. amber color then gave message mse was fake version will expire in 30 days.

i have used some of the verification tools and all say the a/v mse i have is real
so i can only corrolate the "migwiz issue" and the message of having fake mse as one of the problem contributing to the other. (maybe?)

emachine, gateway 2 wire connected to computer then phone jack, xp home 2002 version, purchased legit.
mse, mbam, defender. all updated, virus scans daily, no social networking, xcept topix twice. havent opened an email in 3yrs, i just sign in delete everything without opening.
i am the sole user.

data execution prevention how do you set it? should it be on/off i almost always find combo fix repairing d.e.p. i dont use combo fix or any registry software but maybe 4 times a yr, but data execution prevention alwayse shows up as "being fixed. this would be the same above mentioned computer.

thanks in advance,

[Anupam]

Its a kind request, please clearly write about the errors, or other things in exactly the same way as you see them on your computer. This will help others in helping you better... otherwise, if you write randomly, many people won't be able to understand what you are talking about.

I think by usmt migwiz_a.exe .... you meant the whole path to the file?

C:\WINDOWS\system32\usmt\migwiz.exe

According to what I found on Google search, migwiz is a legitimate file, and associated with "Files and Settings Transfer Wizard" of Windows itself.

So, MSE should not have caught the file, since both are from Microsoft.

I am confused by the error that its a fake version.

Where had you download MSE from? Did you install it yourself?

Since you have MBAM, did you run a full scan with it? If not, please do, and see if it says MSE to be malware, or if it finds any other malware on the PC. Do update MBAM before scanning.

And you should not be too much paranoid about safety. I am saying this because you say you just delete emails without opening them. That's just being paranoid. You can always read the emails, just don't open the ones which seem suspicious, or are from unknown users, or ones which are obvious spam.

I hope you are not deleting important mails of yours.

[placou 1968]

i was able to capture the result using print screen, not smart enough to post the photos in paint to show ya, getting rid of email for me is just a formality, now days you have to have an email acct. to buy anything, i just dont corrospond with anyone i care about via email, still to "impersonal" to me.

the mse issue...upon mse catching system32\usmt\migwiz_a.exe, i recieved a small amber colored box that gave the above mentioned comment. i have been using it for about 2 yrs,
and i may have ocd when it comes to updates and clean up, thats an everyday thing for me, as updates go i probably excell in that area. nothing else caught it. i will try to post small photos of the captured error message. i think after i ask a few more "seemingly simple to you guys" questions i will be past the intimidation factor. thanks again

heres the wording in error message:

windows did not pass genuine validation.
security essentials will become disabled in 30 days if you do not resolve this issue.
to continue using security essentials click, GO ONLINE AND RESOLVE NOW, GET GENUINE WINDOWS.

CLICK HERE TO RESOLVE NOW

[Anupam]

Well, if you did capture the screen, then no need to post pics, just the exact error message should do.

Are you sure its migwiz_a.exe ? Because, if its that, then it might be a malware. Because, the original file is just migwiz.exe ... no "_a" along with it. So, maybe you should run some scans to confirm.

And no need to be intimidated by anyone here, all are friendly people . And if we did come across as intimidating, then sorry, we didn't mean to .

[placou 1968]

it is migwiz_a.exe, i dont even know how to fight it back., nothing but mse catches it.

i keep reading contradictary things about the migwiz_a.exe problem so i have quit searching random internet sites about it, maybe someone has dealt with it here and can provide some info.

im sorry, i meant intimidated by the computer, you guys are awesome. i cant speak highly enough about the help ive found in here, and i have yet to find anyone be-littling someone for lack of, or thirst for knowledge, im trying not to use you guys as a crutch, but when i search something and read it, it just frustrates me, and someone here probably gets a clear meaning and can explain in terms i can comprehend, thank again.

[Anupam]

Well, can't seem to find any substantial information on migwiz_a.exe. But, if MSE is catching it, then it sounds suspicious file. You should quarantine it, and see if everything works OK.

[Anupam]

Originally Posted by placou 1968

heres the wording in error message:

windows did not pass genuine validation.
security essentials will become disabled in 30 days if you do not resolve this issue.
to continue using security essentials click, GO ONLINE AND RESOLVE NOW, GET GENUINE WINDOWS.

CLICK HERE TO RESOLVE NOW

This does not say that MSE is fake. It says that Windows has not passed validation. Since you say its genuine original Windows, had you registered it?

Follow instructions here :

http://answers.microsoft.com/en-us/p...e-835910633110

[placou 1968]

your correct, hence i find you to be very correct in my posting, it should read exactly what is said,
i did register it, still have the key # and box/disc. would it be worth calling the manufacturer, and explaining to them, maybe even remote access from them to check it out? i hate to just look at a computer lay in floor afraid to put it online, seems like format would be extreme, i have seen very little that cant be fixed,.....if you possess the ability/knowledge and i dont, but this could be a good learning tool/expierience for me.

im going to the link you gave me to see if i can figure something out,
thanks again.

[placou 1968]

anupam, take a frosty cold beverage of your choice outa petty cash, that link cured my mse problem, thank you from the bottom of my e machine.

this problem "for me" has a direct connection to data execution prevention/ im still lost about that, but until it surfaces in a negative conotation im going to forget about it, .....unless you think theres info i should be aware of

[Anupam]

Originally Posted by placou 1968

anupam, take a frosty cold beverage of your choice outa petty cash, that link cured my mse problem, thank you from the bottom of my e machine.

Oh great !! Good to know , and glad to be of help.