Windows Defender Is Becoming the Powerful Antivirus That Windows 10 Needs

Your right, didn't notice that. It's a non issue for me, but I can see how it is annoying and shouldn't happen.

 

Anyone familiar with the "block at first sight" option (link)

When it is what I think it is WD blocks an executable when it is not seen and whitelisted at M$ (same whitelist Smartscreen uses now).

Have not played with WD for a while, but at PC (Windows 10 Pro) of a friend, the impact is near zero (chromium program launches, chromium is unsigned so fully checked by most AV's).

C:\Program Files\Chromium\chrome.exe - 5 executions No AV
0.4519
0.2033
0.2355
0.2049
0.2031

C:\Program Files\Chromium\chrome.exe - 5 executions Windows Defender
0.5595
0.2577
0.2683
0.2657
0.2548

 

https://technet.microsoft.com/en-us/itpro/windows/keep-secure/windows-defender-block-at-first-sight
If anyone wants to use that feature, I believe this statement is important to know

You can confirm that Block at First Sight is enabled in Windows Settings. The feature is automatically enabled, as long as Cloud-based protection and Automatic sample submission are both turned on.

It kinda sounds similar to Avast's Cybercapture since it locks the file and sends a copy to the cloud to be analyse. And I think Cybercapture works the same(I could be wrong though)

 

Is this all new feature be available for all (home) users or just for "business"/"enterprise" corp?

 

I bet business and enterprise only cause it seems its a group policy setting.

 

My bet is that these pre-requisites are (reading the GPO explanation)
- JOIN MAPS (on)
- AUTOMATIC SAMPLE SUBMISSION (on)

 

The article states

Applies to

• Windows 10, version 1607

So, it doesn't seem exclusive to business or enterprise versions. Group policy seems to just the give the user an alternate way of enabling/disabling the feature without messing with the Cloud-based protection and automatic sample submission settings.

 

hmm - I have had "automatic file submission" turned off just to make sure i get notified if there is a potential issue - I guess i should change that.

But, if with Block At First Sight - "If the cloud backend is unable to make a determination, the file will be locked by Windows Defender...". What happens in this case without BAFS enabled? A file isn't blocked/locked by default if there isn't enough information to make a determination on it?

 

@rm22 I don't know the answers, that is why I posted it, hoping other members would have the answers

 

don't see the option on my windows home pc but then I am only using it as an ondemand scanner.

 

on home version you won't have the option. it is enabled by default unless you disable sample submission and cloud.

 

Win Defender is crap on Win 8, but I do wonder if M$ will ever release the Win Defender ATP version with behavior blocking, now that would be exciting to me:

https://blogs.technet.microsoft.com...m-and-neodymium-target-individuals-in-europe/

 

Crap enough not to use it? Does it slow the machine down?

 

Anyway why would people stay on Win8, which is basically a "failed" version of Win10. Hardware maybe...?

 

I've been trying to use Windows Defender at work as our Trend Micro is expiring and there is no budget for new software. I have found defender to freeze the PCs while opening local folders and network shares, or any time an open or save dialog is opened from within a program. Sometimes the freeze is a couple of seconds, but sometimes it is a couple of minutes. Disabling it seems to stop the freezing. I am not the only one to notice, as I have had a couple of employees complain. I expect there is no setting I can change to stop this, but if it continues then I will need to find a free alternative I can use for business.

 

"Win Defender is crap on Win 8, but I do wonder if M$ will ever release the Win Defender ATP version with behavior blocking, now that would be exciting to me:"

I thought they already had but it is for business?

https://winatpregistration-prd.trafficmanager.net/UserAgreement

 

So it's getting behavior blocking and a new interface-- and what happens to EMET, is it getting spread around in the operating system somewhere? I know EMET is around until July 2017 but these redesigns have me concerned about eventual and subtle conflicts with third party software. Not a permanent Windows security user and don't wish to be manipulated into remaining one for the sake of keeping Windows 10 "happy." I'm already at this point now as it is--a permanently temporary user.

 

I obviously don't use it. The funny thing is, once you disable it, they have made it very hard to enable it again.

Yes exactly, it's available for business, but why not release a consumer version for power users?

 

Slow internet connection, not everybody has DSL 100 MBit like freaks here on Wilders.

 

I'm leaving it off; too much bad press against Bitdefender; the prosecution rests its case.

 

Is it fixed finally?

 

No

 

Is Windows Defender enabled by default in Win10?

 

Yes, if you have no other AV installed.

 

Thanks Krusty. Do you believe W10's Defender is good enough protection for a user who does not visit the 'dark side' of the web?