Windows Defender

Is anyone still running it? I added it back to my setup today to run again. Its working rather good, I tested some Malware Panda and WD both caught it but Panda removed it before I got to accept the WD alert.

 

Whenever I had it installed I always left it on

 

Does Windows Defender use Microsoft Dynamic Signature Service?

 

WD is used with in IE8 to scan downloads. i believe.

 

WD is a lesser version of MSE, and in my testing MSE sucks, so I don't have much faith in WD. Disabling it is one of the first things I do after a windows install.

 

believe or not WD will detect some malware your antimalware missed it's not perfect but when you see it's pop up for sure it's nasty

 

Hello,

Please, do yourself a favor and leave Windows Defender alone on whatever OS you are running right now [be it XP, Vista or 7].

In our company, our employer [ its IT Dept.] run McAfee VirusScan Enterprise 8.7 with the Anti-Spyware module [ the AV was recently upgraded to patch 3] and even when McAfee Corporate prompts to remove WD upon installation it looks like our employer chose to keep WD running alongside with McAfee.

Guess what? Today, one co-worker got two infections and neither were detected by McAfee. However, WD saved his day because it detected and prompted him to remove a variant of Alureon-rootkit [ a.k.a. TDSS] and another threat named KillAV while he was browsing a reputable web-page.

So, WD does what it's supposed to do and thus, should not be removed.


Regards,


Carlos

 

Does anyone know if Windows Defender has a email support address? I notice they have phone support (for 59$) but I rather rather email in mu questions (and not have to pay 59$).

 

Haha that's a great price.....NOT
$59 Per call or per minute?

 

Per call, yeah I just wanted to ask a few questions but since I figure the Windows Defender team and MSE team should be working together I could always submit a support ticket (for free) via the MSE website.

 

Yea that should work

 

I will submit a Dynamic Signature Service question later, however SpyNet is already doing it's job on one machine. I was doing some system updates on my one machine and Windows Defender detecting some changes to some IE registry keys. WD automaticlly reported the behavior so SpyNet and I have not gotten any reports of it like that since then

 

Windows Defender is doing well

 

How so? Are you testing malware against it?

 

From what I have seen in day to day use it's behavior detection via SpyNet is good when key Windows area's are being modified.

 

by word of mouth i listen to people and some people testify about it but you are giving and idea i should test it

 

Yeah if you test it please report back with results.

Also make sure you test it with SpyNet membership in advance and all setting at maximum

 

ofcourse man i will

 

I leave it in it's default state, remove it from start-up so that the tray icon won't appear....the service still runs in the background silent and non-intrusive at all. It once picked up something that Avira missed.

 

It picked up eicar test files which OA++ did not.. weird.. lol..

 

windows defender picking up stuff faster... great improvement

 

AFAIK OA++ doesn't offer realtime AV protection...

 

hmm according to them yes..

Security Center recognises it as an Antivirus but not Antispyware.. So i turned Windows Defender on.. To my surprise when I tested the Eicar test file.. Windows Defender warned me lol..

Back to using PCAV Free

 

Hello,


Windows Defender catches the Eicar files regardless they are zipped or un-zipped.

I know some anti-virus engines do not scan .zip/.rar files by default only upon extraction. Kaspersky, Avast!, McAfee, are among those that do not scan inside archives unless instructed to do so [ by modifying their default settings ].

Windows Defender on the other hand does indeed scan inside archives and that's why it detects Eicar whether zipped or not.

Thus, if you downloaded the zipped versions of the Eicar files and your AV did not catch them is because it's not set to scan inside archives by default [to avoid PC performance degradation mainly].


Hope this helps,


Carlos

 

Also OA++ is on-execution only so you must launch the test file to have it detect it