Windows Defender Is Becoming the Powerful Antivirus That Windows 10 Needs

if what you mean is to scan only new and changed files since the last full scan, then the answer is no, it doesn't.

 

see this post of @plat1098's.

 

Thank you so much

 

no problem.

 

Defender Control v1.8 (April 21, 2021)
Website

 

I also noticed this, so I have excluded a couple of folders from scanning. Because I hate it when icons take too long to load because apps are getting scanned. They should really fix this in Win Defender.

 

Microsoft Defender now blocks cryptojacking malware using Intel TDT

https://www.bleepingcomputer.com/ne...blocks-cryptojacking-malware-using-intel-tdt/

 

The only thing I can recommend regarding tweaks to WD is to get configure defender, set it to MAX mode set the security center to be visible. And also enable the anti-ransomware thing with all of your file folders protected by it. And some exclusions for any software you use that would edit those files. But be sure to keep a copy of configure defender handy in case you need to set some ASLR exclusions for whatever reason.

 

I wanted to share some information. Bleachbit can be used to clear WD's quarantine very quickly. Much faster than going through all of the UAC prompts one after another.

 

Yah, you really don't need to go that hardcore, High setting is more than enough. And if by ransomware thingy you mean Protected Folders, well many find it problematic and don't use it at all due to its blocking legit programs. I don't use it, for me a strong backup strategy such as using Macrium Reflect is a far better option.

 

maybe not max mode then, but I would definitely change the cloud security level to "block" and the timeout check to the full 60 seconds from the template of "high"

 

How to stop Windows 10 Defender from uploading files to Microsoft
May 2, 2021
https://www.bleepingcomputer.com/ne...0-defender-from-uploading-files-to-microsoft/

 

I dont recommend this, it will have a significant impact in detection, it will be much lower because of the lose of "Block at first sight" and some other cloud detections.

 

The problem here is WD doesn't provide file exclusion capability as most third party AV's have. For example, exclusion of .docx, etc. files.

 

For sure WD does exclusions by file types.

 

I am referring to suspicious file submissions; not file scanning exclusions.

 

Yes, I had a little discussion about this in another thread. If it really impacts detection that much it would mean that Win Defender is a bit crappy if you ask me. Because you would hope that even without this feature, it should already be able to block most malware with cloud protection enabled, see link.

https://docs.microsoft.com/en-us/mi...lient-behavioral-blocking?view=o365-worldwide

 

Has defender become hyperactive since the recent windows update? Seems to gripe about so much lately. Suddenly it has gone all Comodo on me, blocking and asking about so many things.

 

Have latest updates and if anything, I find it less intrusive and it was almost zero for me to begin with compared to Kaspersky, etc.

 

Have you got Controlled Folders enabled? That was bugging me while I used MSD.

 

https://www.ghacks.net/2021/05/05/w...fill-your-hard-drive-with-thousands-of-files/

 

No I have controlled folders off. It was really acting up when I was trying to install Jellyfin. And on my Dads PC, it wouldn't let him log into the connect.xfinity website.

 

Yes, that's why I try to avoid updates as much as possible. But I'm not sure if it's possible to only download signature updates, without updating the WD engine.

 

AFAIK, downloading signature updates automatically updates the engine and, when needed, the client version as well. I didn't experience the bug reported by Ghacks, but my WD engine updated last night to the fixed version.

 

Yes, so did mine when forcing a signature update--1.1.18100.6. Client is 4.18.2104.10. Now, I'm on Insiders build 19043.964 so these numbers might be a little ahead of those on released Windows versions. No problems, no bugs. And strangely: no problems with latest stable Edge and widely reported YouTube videos crashing in full screen mode.

Even if you could block everything except signature updates, seeing as Defender is the primary antivirus on here, I would still religiously apply all updates to the platform. I remember the Network Inspection Service issue colliding with Memory Integrity a while back, needing an update to the client platform.

I mean, if I had Kaspersky or any of the 3rd party brands, I would apply all updates as soon as any became available (barring any issues of course). I don't think it's optional, except in very rare cases.