Defender does not remember programs i already approved

[Guest]

Hi,
every day (after every reboot) i get a warning about 3 programs/processes on
my pc.
I approve these well known programs and defender confirms my permissions.
But the day after it all begins again...
Defender also does not accept any exceptions from me, also there is an empty
list
that should contain such exceptions...

Any idea?

Many Thanks,

Oliver

 

[Guest]

Hello Olivetr,

See if Dave M solution in that thread can be used in your case.

http://www.microsoft.com/communitie...cdc8&mid=360aedcb-2ffb-4d26-9de7-1007405acdc8

For the benefit of the community reading this post, please rate the pºst.

I hope this post is helpful.

Let us know how it works ºut.

Еиçеl

 

[Guest]

Maybe as a member of Skynet, er Spynet, your programs will eventually get
classified and the warning messages will stop. You can always customize the
real time protection options or add stuff to the do not scan files or
locations list. The only thing you can't do is to get WD to remember replies
(Permit or Deny) to real time protection alerts. You may be confusing the
exception list with allowed items which is only valid for manual or automatic
scans.

 

[Guest]

Hi thanks for the quick answer,

but how can i get something to the exception list?

Someone told me there should be 3 options to handle an alert:

1. denie
2. permit
3. permit always

but no 3 does not exist...

Is there another way to get something to the exception list?

Cheers,

Oliver

 

[Guest]

Early in the WD Beta, a user had posted the existence of an always allow
option for real time protection. At that time, I only saw Allow or Block
(new terminology is Permit or Deny) . This sounds like the old rumor. Maybe
it is planned for future releases. I really don't know. Or the possibility
may exist that Always Permit does exist in WD through SpyNet feedback. I
hate to speculate on what Microsoft has built into WD. An official
Microsoft post to your question would be appreciated. I find that real time
alerts for programs started via the Run registry key may become very
annoying. So you can selectively turn off real time agents. But what
happens if malware does create a new start Run entry via a Trojan?. Another
approach would be to uncheck the two boxes under Options that apply to how
real time protection should alert you. If the boxes are unchecked, then the
information will show under History as permitted. In both cases you have
sacrificed the ability to respond Permit or Deny. The alerts will still show
under History. I believe it is better to confront malware before it is
installed than after the fact via scanning. My personal feeling is to bypass
the messages (assuming you trust the Publisher)by using the WD options window
and putting the program path in the do not scan file or locations box.
Again, only items detected during a scan (automatic or manual) may be added
to allowed items via Always Allow.

 

[ptmx2]

Excellent way to work around the present illogic of WD. Thank you..

"My personal feeling is to bypass the Permit messages (assuming you trust
the Publisher) by using the WD options window and putting the program path in
the do not scan file or locations box."