Toggle?

[Bill Sanderson]

I just want to report (badly) on two days experience.

On one system which got an error about updating, I set IE proxy settings to
always detect, and it went on to update.

Today, on another system with a different error (mentioning a "device") I
changed that same setting from "always detect" to unchecked. System went on
to update.

That' what I know to mess with so far.

--

 

[plun]

Hi Bill

I made the "usual" Kazaa test with Defendern and
it is detected as a threat, but during removal
something goes wrong, ie removing the setup file within
a temporarily folder.

I got the same error code as another user posted somewhere
(with a picture)

I also got warnings within the adminlog about lost realtime protection
during startup........ but appararently it detected Kazaa but couldn´t
remove it.

----------------------------------------------------------
To "reset" Defendern I must perform a manual scan........
----------------------------------------------------------

Maybe this is the way to have the icone visible......

The Admin logs now includes useful information about Defendern.

Well, more stress test with Kazaa....

regards
plun

 

[Bill Sanderson]

My stress test machine has an infection which beta1 never saw.

Windows Defender wouldn't run in safe mode, so that test didn't work. Will
see how it does with a full scan--which annoyingly requested a floppy in the
A drive and then insisted on scanning files on it.

--

 

[plun]

Hi

Well, I wrote about WD after a Vista test some times ago
and this is the worst case scenario.....

What have MSAS team they been doing, it seems to be a total mess.

Are they all running on Vista boxes ?

- No basic stress tests ?

- I have never tested something equal with a Beta remark, maybe Alpha.

regards
plun

 

[Bill Sanderson]

It is finding lots of stuff on my infected boxes--all in one particular
office. Unfortunately, it is immediately evident that it didn't find ALL of
the stuff--still popups!

I have repair instructions posted in these groups for the A: drive issue,
and will try repairing the install with his steps. It is possible that will
fix the safe mode thing too--worth checking anyway. I wish that the problem
machines were not always the older slower ones that take forever to work on.


--

 

[plun]

Hi Bill

Of course it finding stuff....... I am more interrested
in the RTP functionality and this is something strange.

- I have changed notify settings to notify for not allowed programs.

- I have also played with all checkboxes within RTP settings.

I cannot understand how it works. Is it only for defined malware ?

The only way is to test "bad guy stuff" and see what happens.

Kazaa is done with failure and I must see more how RTP works.

RTP is the key to everything but mostly all users seems to be more
intrested to "Scan their PCs to death"........

"Schedule scans works I´m safe"......... Exactly the same behavior
as with MSAS Beta 1 instead of learning RTP and to have a functioning
RTP.

And the RTP functionality seems to be odd.....

regards
plun

 

[Bill Sanderson]

I have to say that I've seen very little from RTP in the beta2 build--As you
say--this needs some intentional testing with known bad "stuff" and I
haven't had the time to do anything like that--not sure I will soon, either.

I'm hoping that somebody competent at the skills needed to do a good
comparative review of competing products will take a look at this aspect of
the program.

--

 

[plun]

Hi Bill

All comparative test is just to inject a malware and scan.

Within another message I tries to get an answer about RTP beacuse
this is the main functionality/benefit with Defendern IMHO.
(also user balem and Mr Rosenfeld has similar questions)

I changed permission for WD within registry and changed Spynet
to advanced member. Maybe it´s enough to change to advanced member.

Now it seems to be working

I am also going to check/change firewall rules beacuse this is really
stupid that a user must be advanced member to get
notifications.........
Maybe to block this traffic ;(

But I still have fault codes about denied permissions and it must be
easy for Defender team to check what default registry permission
should be.

regards
plun