Microsoft Security Essentials beta updated to 2.0.522.0

''Microsoft today released an update to the test version of its free antivirus software, Microsoft Security Essentials 2.0.

With this update, Microsoft Security Essentials 2.0 Beta has gained some new features in new Forefront Endpoint Protection 2010 RC, such as behavior-based detection of files.

Another interesting novelty is that now Microsoft Security Essentials 2.0 Beta allows users to limit the CPU usage by the program during scanning for malware.''

http://www.baboo.com.br/conteudo/modelos/MS-atualiza-seu-antivirus_a40341_z317.aspx

use google translator...

 

Thanks for the update. MSE 2.0 is going to be a formidable free product.

 

Two family members got it today. A bit of delay.

 

I am actually starting to like it.. the behavior analysis is a really nice feature they got in there now.. will really help against zero day annoyance. IMO

 

I installed it in a VM today. It does indeed have Behaviour Analysis now, though it seems to do nothing.

I threw 50 malware at it, the ones that weren't caught by signatures got right by with no problems, I let it run for about half an hour with no internet access and got no further alerts from MSE at all.

 

new today:
Microsoft Security Essentials Client Update Package - KB2461287 (2.0.522.0)

Installation date: ‎11/‎9/‎2010 2:02 PM

Installation status: Successful

Update type: Important

This package will update Microsoft Security Essentials client on the user's machine.

More information:
http://go.microsoft.com/fwlink/?LinkId=195462

Help and Support:
http://go.microsoft.com/fwlink/?LinkId=195463


Security Essentials Version: 2.0.522.0
Antimalware Client Version: 3.0.8007.0
Engine Version: 1.1.6301.0
Antivirus definition: 1.93.1519.0
Antispyware definition: 1.93.1519.0
Network Inspection System Engine Version: 2.0.5850.0
Network Inspection System Definition Version: 8.49.0.0
Policy Name: FEP clean-up policy
Policy Applied: 11/9/2010 at 7:01 PM

 

Any information on when we can expect the public release of MSE 2.0?

 

I wish they'd finally remove on-access archive scanning. But i don'tthink this will ever happen.

 

At the very least they should make it an option. The option - 'Scan incoming files only' does that but it also exempts all existing files from scanning. Lame.

 

Summary of beta (v2) features:

You can disable SpyNet completely.
You can automatically remove quarantined files after X time.
"Enable behavior monitoring" option.
Limiting CPU usage during a scheduled scan.
Network Inspection (exploit detection) system.
Ability to monitor incoming, outgoing or both files.

My beta just updated via Windows Update.

 

Someone please confirm or deny this on your own system, but I'm not seeing a restore point done with every signature update (not speaking of ones associated with a scan here, if that matters). I'm pretty sure that was in earlier versions, if not the original 2.0 version. Win7 doesn't list them anyway.

If this is true, I consider it a feature, and a good one, since what are the odds of a signature update decimating your machine to the point that you'd need to run a restore point?

Now, if it would only stop cluttering up WU history.

 

Yeah, I wish the settings could be more finite, but anyway, is it really
an issue if you know the files on your pc are clean? If you run LUA with EMET and SRP, and the windows firewall, scanning incoming files only should
be appropriate?

But, the on demand scan is still very slow, they really need to improve that.

 

But what does monitoring "incoming" files mean, exactly, considering that there's a separate "Scan all downloads" item? Let's say I uncheck that AND have monitoring of incoming files enabled. Hmmm.

 

Incoming refers to all new files being copied to the hard disk. It my be via an external drive, a network resource etc.

 

OK, but the default is 'scan all downloads' on and monitoring on 'all," so MS seems to have a situation where if you uncheck 'scan all downloads' then downloads are still scanned by virtue of the 'all.'

 

The difference lies in the exact point at which scanning is done. The 'Scan All Downloads' refers to scanning during the point the file is being downloaded from the web - which other AVs do via so called web-scanners. The 'monitor all files' refers to scans done when file is created on hard disk - other AVs call it the file shield.

 

I didn't try to use this when it first came out and I can't seem to find it now, so I think my window to beta test has closed. So, are you saying that MSE 2.0 can scan downloads, but NOT do other on access scanning?

What about files downloaded from the net but not via browser? Like email or program updates? I ask, because this is what I want. The slowdown on new downloads or updates, but not the other on access scanning. I see no reason to scan the same 2 yr. old program as it gets run for the 1000th time or to scan memory if I know my executables are clean.

Thx.

Edit:
Should be more clear
Can MSE 2.0 be configured to scan downloads and at the same time NOT do other on access scanning?

 

Now I firstly must admit that I *never* do an on-demand scan so I just did a quick scan right now to test (yes I am using the latest beta if it makes a difference).

Quick scan completed in 54seconds and scanned 75909 items, that doesn't seem very slow to me?

 

@scott1256ca - Yes, I believe it can be done. You can try it by changing Real time protection settings to - 'Scan Incoming Files only' and leaving the rest on default. Then proceed by downloading the eicar test file. You will be alerted. But when you will open a folder full of executable files, you will not notice any slowdown in rendering of their icons as they are not being scanned again and again as is the case with default settings.

 

@RaviG, I unchecked "Scan all downloads" (never had an interest in scanning during downloads) and set "Monitor only incoming files." As expected, eicar.com triggered a warning, but I was happy to see that the ZIP version did too (and this is before I touched the file). I'm sure there's some giant flaw in leaving it like this, but it's tempting.

P.S., I wonder why they phrase it "incoming files" and "outgoing files." Much more clear to me, anyway, would be "file writes" and "file reads." It's bizarre to think of reading a file as "outgoing."

 

BOMBSHELL: my boyfriend just told me that the new M$$E will "feature" a new WAT attack. In a cracked Windows 7 (unlike XP) the current stable M$$E "believes" that the system is legit. It looks that M$ will bundle a renewed WAT system in the new M$$E that will break the current cracks.

So plz be careful!

 

I see your boyfriend and raise you Mary Jo Foley:
http://www.zdnet.com/blog/microsoft...f-next-gen-microsoft-security-essentials/7954

Microsoft quote:
“Microsoft did not make any changes between v1.0 (SU2 in Feb 2010 to be exact) and the current version of the beta of v2 regarding Microsoft’s genuine check mechanism. Nothing has changed and this is not new.”

 

I should have said, slow, relative to the on demand scans of both avira
free and avast.

Here's a test: http://www.raymond.cc/antivirus/scantime.html

 

Are we suppose to uncheck start scheduled scan only when my computer is on but not in use and if unchecked will it atill peform the scan