Don't shoot the Messenger! All the issues you address were brought to the
attention of Microsoft during the Beta testing of Windows Defender. These
are real time protection alerts and unlike scans you do not have the ability
to specify always ignore. However, you do have a means to circumvent your
issues. You could turn off real time protection or selective agents (which
I do not advise) or you can add the "legit" programs to a do not scan box
(Tools->Options->Advanced Options). The Internet Explorer use of UDP 2022 is
a more complex issue. You could tell WD to Permit each time or you could add
UDP 2022 to the Windows Firewall (which does create an exposure). I leave it
up to you. Here's how: click Start, click RUN, enter firewall.cpl click
OK. Under the Windows Firewall box click Exceptions Tab, click Add Port,
enter a name such as Open Port for IE Media, click the button for UDP, enter
2022 for port. This will update the System Registry with the same key as in
your post. Windows Defender will probably ask for confirmation. I am not
sure if this procedure will stop the alert. Feedback would be nice.
"Big Daddy" wrote:
> When a program installs itself as a startup program (i.e. it will get loaded
> upon booting), then Windows Defender will pop up and ask if it's OK for this
> to occur. I have two legit startup programs that it asks for permission
> every time I reboot. In other words, when I reboot, Windows Defender pops up
> and asks if it's OK to permit these two programs to be loaded at startup. I
> say OK and it goes away. But when I reboot, it asks the same thing next
> time. Both of the programs are in my startup folder. Why is this? It's
> annoying.
>
> Also, there's a website where I watch streaming video in IE. I think it
> uses a Windows Media Player plugin. Every time I start watching video,
> Windows Defender pops up and asks if it's OK to permit a firewall
> configuration change. Why is this? It's annoying. Here's the full text of
> this warning:
>
> Summary:
> System Configuration change occurred.
>
> This agent monitors security related configuration changes made to
> Windows.
>
> Detected changes:
> New: 2022:UDP:*:Enabled:Windows Media Format SDK (iexplore.exe)
> Original: Not available
>
> firewallport (New):
> HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters
> \FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\2022:UDP
>
> Advice:
> Permit this configuration change only if you trust its origin. It is
> recommended that you run a quick scan if you choose to deny this
> change.
>
> Checkpoint:
> Firewall Port Exceptions
>
> Category:
> Configuration Change
>
> thanks in advance,
> John
>
|