Alerts that never go away

[Guest]

When a program installs itself as a startup program (i.e. it will get loaded
upon booting), then Windows Defender will pop up and ask if it's OK for this
to occur. I have two legit startup programs that it asks for permission
every time I reboot. In other words, when I reboot, Windows Defender pops up
and asks if it's OK to permit these two programs to be loaded at startup. I
say OK and it goes away. But when I reboot, it asks the same thing next
time. Both of the programs are in my startup folder. Why is this? It's
annoying.

Also, there's a website where I watch streaming video in IE. I think it
uses a Windows Media Player plugin. Every time I start watching video,
Windows Defender pops up and asks if it's OK to permit a firewall
configuration change. Why is this? It's annoying. Here's the full text of
this warning:

Summary:
System Configuration change occurred.

This agent monitors security related configuration changes made to
Windows.

Detected changes:
New: 2022:UDP:*:Enabled:Windows Media Format SDK (iexplore.exe)
Original: Not available

firewallport (New):
HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters
\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\2022:UDP

Advice:
Permit this configuration change only if you trust its origin. It is
recommended that you run a quick scan if you choose to deny this
change.

Checkpoint:
Firewall Port Exceptions

Category:
Configuration Change

thanks in advance,
John

 

[Guest]

Don't shoot the Messenger! All the issues you address were brought to the
attention of Microsoft during the Beta testing of Windows Defender. These
are real time protection alerts and unlike scans you do not have the ability
to specify always ignore. However, you do have a means to circumvent your
issues. You could turn off real time protection or selective agents (which
I do not advise) or you can add the "legit" programs to a do not scan box
(Tools->Options->Advanced Options). The Internet Explorer use of UDP 2022 is
a more complex issue. You could tell WD to Permit each time or you could add
UDP 2022 to the Windows Firewall (which does create an exposure). I leave it
up to you. Here's how: click Start, click RUN, enter firewall.cpl click
OK. Under the Windows Firewall box click Exceptions Tab, click Add Port,
enter a name such as Open Port for IE Media, click the button for UDP, enter
2022 for port. This will update the System Registry with the same key as in
your post. Windows Defender will probably ask for confirmation. I am not
sure if this procedure will stop the alert. Feedback would be nice.