MSE 4

[Kerodo]

Originally Posted by Daveski17

I've been running MSE on three computers for over 18 months, let me think ... *scratches chin & stares into middle distance* ... how many infections have I had?

Oh! I know: None!

That probably has more to do with YOU than MSE.

[kupo]

Originally Posted by Macstorm

This is a very unlikely scenario for most people.

Unlikely? lol. There are many cases that a bad signature update will cause weird things in the OS.

Originally Posted by Macstorm

Even so, I would WAY prefer to take that risk than getting easily infected.

Okay, but similar to Daveski17, I haven't been infected even once in my time running MSE.

Originally Posted by xxJackxx

I have seen it miss too many things.

And so is other AV's.

[Hungry Man]

Originally Posted by xxJackxx

True, but do they know malware and viruses better than anyone else? A valid question for anyone concerned about detection and removal vs. compatibility, myself included. I'd like to like it as much as some do, the price is right. I have seen it miss too many things.

I think they do.

On the one hand there are multibillion dollar corporations like Sophos that are entirely dedicated to security research. That's their entire business, so you could definitely make the argument based on that that AV companies are more equipped to deal with security.

But... Microsoft has the source code. They know the inner mechanism of the software. All of that encapsulated code that AVs can only access through documented APIs are free to be seen by the MSE team (or at least I assume.) That's a big advantage but it's more theoretical.

I'd say that:
1) Microsoft is the only company that can truly secure its OS.
2) Microsoft is not doing a good job and they should have developed a security model that works before implementing Patch Guard.

[marc57]

MSE seems to be holding its own.

http://www.westcoastlabs.com/realTim...e/?articleID=1

[Hungry Man]

I assume the AVs are kept entirely up to date there?

[toxinon12345]

Originally Posted by Hungry Man

3) Generic signature - compare new code to known bad code

In fact, Generic signatures are "enhanced signatures" because of the wildcard support, which tell the scanner to ignore some sequence of bytes not common to all the family's members.

“Generic detection” is a term applied when
the scanner looks for a number of known
variants, using a search string or pattern that can detect all of the variants. While it may detect a
currently unknown variant in which the same search string can be found, it’s only a heuristic
detection if it involves the use of a scoring mechanism(like heuristic calculation). Otherwise it’s really a special case
of virus-specic detection. Some systems use a hybrid approach, where a scoring system
is added to the generic detection capabilities to give a probability of the variance or family
membership with difering degrees of certainty. For instance, if the similarity is close enough,
the scanner may report “a variant of x,” or if less sure, it may report “probably a variant of x”.

[Hungry Man]

All it means is that instead of looking for an exact match heuristics looks for a close match.

Generic detection = heuristics. It's just problem solving with "best guesses" instead of exact answers.

So if you have a generic signature for the Vundo family and it drops a vundo.exe in /appdata/ your "generic signature" will go nuts when uvndo.exe gets dropped in /appdata/ (oversimplification.)

[Daveski17]

Originally Posted by Kerodo

That probably has more to do with YOU than MSE.

Maybe, either way, I have faith in MSE. Otherwise I would use something else. There are viable alternatives.

[Daveski17]

Originally Posted by marc57

MSE seems to be holding its own.

http://www.westcoastlabs.com/realTim...e/?articleID=1

98% ain't bad in my book.

[Macstorm]

Originally Posted by Daveski17

I've been running MSE on three computers for over 18 months, let me think ... *scratches chin & stares into middle distance* ... how many infections have I had?

Oh! I know: None!

Lucky you, congrats.

[Kerodo]

Originally Posted by Daveski17

Maybe, either way, I have faith in MSE. Otherwise I would use something else. There are viable alternatives.

I use it too. MSE and Panda Cloud are the only free ones I'll touch nowadays. I have friends who say MSE has missed things now and then, but I have had good luck with it.

[Daveski17]

Originally Posted by Macstorm

Lucky you, congrats.

It's probably not luck. I'm just not that lucky. What was that percentage of detection rates did MSE have now? Do I hear 98%?

[Daveski17]

Originally Posted by Kerodo

I use it too. MSE and Panda Cloud are the only free ones I'll touch nowadays. I have friends who say MSE has missed things now and then, but I have had good luck with it.

I've used the Panda Cloud (freeware) & I thought it was very good, apart from the false positives. That's another thing I like about MSE, very few f-ps.

[Kerodo]

Originally Posted by Daveski17

I've used the Panda Cloud (freeware) & I thought it was very good, apart from the false positives. That's another thing I like about MSE, very few f-ps.

That's true. MSE has very few FP's. I haven't had any probs with Panda either. For me, both have been good.

[Daveski17]

Originally Posted by Kerodo

That's true. MSE has very few FP's. I haven't had any probs with Panda either. For me, both have been good.

I haven't used Panda for about 18 months, no doubt they've improved it. Which is good to know. It was the lightest AV I have ever used.

[Macstorm]

Originally Posted by Daveski17

It's probably not luck. I'm just not that lucky. What was that percentage of detection rates did MSE have now? Do I hear 98%?

Westcoastlabs? gimme a break! 98% above Avira 95% ..rotfl. Then I'm from Mars, sorry. Case closed.

[RejZoR]

Originally Posted by xxJackxx

True, but do they know malware and viruses better than anyone else? A valid question for anyone concerned about detection and removal vs. compatibility, myself included. I'd like to like it as much as some do, the price is right. I have seen it miss too many things.

This would be even more valid for behavior blocker. I mean, they made the OS, they know whats normal and what's not. Where others have to use almost trial and error to make one...

[Daveski17]

Originally Posted by Macstorm

Westcoastlabs? gimme a break! 98% above Avira 95% ..rotfl. Then I'm from Mars, sorry. Case closed.

MSE has done consistently well on more than a couple of tests. Why would these guys lie?

~Image removed. See http://www.wilderssecurity.com/showthread.php?t=19950 ~

I hear the weather's nice this time of the year on Mars. Your retro rockets are obviously not firing. Case closed.

[toxinon12345]

Well, MSE is not intended for patching vulnerabilities in the OS, but it can detect exploits

[izi]

Originally Posted by tpro

I think it should update at least 2 times a day, why don't they change it?

Hello!

Here’s how to change the update interval with a registry: http://www.lifehacker.com.au/2011/01...ate-frequency/.

This is for experience users!

[Baserk]

^ Or you can use Task Scheduler.
On the right panel click 'Create Basic Task', enter a description (MSE update); 'Trigger' ; Daily; 'Action'; Start a program; in 'Program/Script' enter: ...Program Files\Microsoft Security Essentials\MpCmdRun.exe; in 'Add arguments' enter: -SignatureUpdate.
Click Finish. Wala.

[zip]

I'm not comfortable with MSE updating once a day or less, so I teamed MSE with Immunet.

[william1955]

You can easily change signature update interval of MSE.

1. Open up the Registry Editor
2. Go to HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Microsoft
Antimalware/Signature Updates.
3. Right click on Signature Updates, click Permissions, then Advanced.
4. Go to the Owner tab, click on the Administrators group and click OK.
5. Go back at the Permissions window, check the box labelled “Full Control”
while the Administrator’s group is selected.
6. Double click on the SignatureUpdateInterval key, and change the number
to something between 1 and 24.
This will be the number of hours it waits to check for a new update
(the default being 24).
7. Once you’ve done so, you can change the permissions back
(where SYSTEM owns the key and Administrators do not have full
control).
Above procedure is for Windows 7.
Procedure for Windows XP is easier, because you need not change
ownership and/or control of registry node.

Best regards.
William

[Mops21]

Hi all

A new prerelease is out

Microsoft Security Essentials 4.0.1542.0 Prerelease

http://www.microsoft.com/en-us/downl....aspx?id=29942

[PnP]

Originally Posted by Mops21

Hi all

A new prerelease is out

Microsoft Security Essentials 4.0.1542.0 Prerelease

http://www.microsoft.com/en-us/downl....aspx?id=29942

any changelog?