PDA

View Full Version : Windows Defender bypasses LnS Application Filter?


whistlebird
April 21st, 2008, 08:02 PM
Hi,

I have been using LnS v2.06 with the Phantom ruleset. Today I decided to install Microsoft Windows Defender to supplement my PC Malware arsenal.

After I downloaded and installed WD, WD automatically updated itself without LnS asking me to accept or deny the application permission.

Five minutes later, Lns gave me a pop-up to allow MWD commandline utility internet access but this was AFTER the fact.

Is LnS pre-configured with a whitelist entry in Application Filtering for all Microsoft products? I am concerned that if WD could "phone home" other programs may slip by LnS's Application Filter and do the same.

Please advise. Thanks.

Frederic
April 22nd, 2008, 05:42 AM
Hi,

There is no white list in Look 'n' Stop Application filtering.

Probably the update is done through another allowed application, like svchost.exe which is the detected process for wuauserv service (in charge of Windows updates).

Regards,

Frederic