Defender problems so far...

[Dave Bolt]

As mentioned in another thread, after installing Defender downloads seem to
be prevented from being saved. I checked further, the particular download
already existed and the download hung for a while at 99% then appeared
complete. The file did eventually save, but did not seem to update details
properly. Creation date remained August 2004 when I expected it to be
updated to 19 Feb 2006. At least it did save the file eventually.
Attempting to delete a file which is in an archive causes a nasty error
0x80508026, which does have an explanation when you resize the header of the
Status column sufficiently. Two options to fix this would be desirable;
allow a multi-line explanation and offer a second level action to delete the
entire cab file.
Definitely need an icon in the tray. I noticed a comment that this should be
available as an option in the near future, Good!
I was running a full scan when I also changed my home page. Since I had set
advanced SpyNet mode, I was alerted which was fine. Unfortunately, I could
not see any of the progress of the scan after that until I hit the Abort
button.
(The full scan found a number of SpyWare and Virus instances in the Norton
Internet Security Quarantine folder).
On the Currently Running Programs option under Software Explorer, it takes
AGES to classify the Microsoft Generic Host Processes, in particular. Some
others as well.
I really feel that I miss some of the features from the Microsoft
AntiSpyware, e.g. the stuff that allows you to look at the various settings
in Internet Explorer. Not having some of these features may be OK when the
system is all clean and dandy, but what if they are already corrupted when
Defender is installed? I look forward to my first infected PC. Incidentally,
can I download Defender on a machine which will not allow using the Version
Checking component because of SpyWare already on it?
There is no obvious way to force a check for updates.
I'll keep an eye out to see what else shows, and what happens on the above
points.
BFN
Dave

 

[Dave Bolt]

Additional.
A new installation (upgrading from Microsoft AntiSpyware), said definitions
were 24 days old, OK, but did not give any real feedback about the update
process, leading even me to start playing with buttons. If it is doing
something, we do need to know that it is doing something.
BFN
Dave

 

[Guest]

Hello Dave,

Try going to Windows Update and check for Criticals Updates, this is how I
resolv the same problem. Maybe work for you too.

Good luck

Let us know how you end up.
Еиçеl

 

[Dave Bolt]

Been there, got the mug and the tee-shirt
No updates though

Another possible problem for the list.
Doing a full scan has been working for 7.5 hours so far, looked at 4434264
files at this point and still looking at some files on C: then some files on
E:
Norton Internet Security only finds about 1500000 files to check and
completes in 4.5 hours.
UPDATE:
As I was writing this message the scan completed, with 4434284 files scanned
in 7 hours 33 minutes and 43 seconds. Found 21 high/severe items, 5 low
items.
Looks like we have a false positive here. msriched.vbx is detected as
Typhoon, a trojan offering severe risk. It does however have the following
version information.
Company: Microsoft Corporation
File Version: 4.0
Internal Name: msriched
Language: English (United States)
Original file name: msriched.vbx
Product Name: Microsoft® Windows(TM) Operating System
Product Version: 4.0
This particular file is in some saved data from a Windows 95 machine, dating
back to 20 Nov 1996.
Everything else looks just fine, although of course some of the detected
threats are inside cab files and will have to be manualy removed.
Regards
Dave

 

[Guest]

David C wrote

I first must first say that MSD does not make loads of temp files like beta 1.
Problems:
1. No icon in task bar
2. HELP file out of date. eg describes how to disable realtime protection
when it is not possible.
3. When updating there is no indication of progress.
4. When in Software explorer and Currently Running Programs is selected the
CPU load goes up to almost 100%. Every time.

 

[Guest]

WD keeps on bogging down my Internet experience, I don't why it decides to
hog my CPU running at 99%. I usually just kill it and its associated
processes. Can anyone tell me why it is doing this. I have Athlon 1800, WinXP
Home, 512MB RAM, Norton Internet Security, Cable Modem and have run MS
Baseline Security Analyzer and full virus scan, both with Norton and Windows
Defender.

 

[Bill Sanderson]

You can go to Help, About, and trigger a check for definition updates.
You'll get a baloon that the check has been initiated, then there will be
nothing apparently happening for a good long time--not sure how this
mechanism works, but it isn't speedy.

If you want to see it more directly, drop to a command prompt and run
\program files\windows defender\mpcmdrun.exe SignatureUpdate and watch what
happens--if you like watching paint dry.

The intent is that sig updates will come in automatically via WSUS, or
autoupdate, or by the setting within the program which calls for sig updates
before a scan, and we can all ease our fingers off the update trigger....

 

[Bill Sanderson]

There's a checkbox at the very end of the install labelled something like
"start Windows Defender, update the sigs and perform a scan" (very poorly
remembered)--You should also get a baloon tip about as soon as the UI opens
on the new install.

--

 

[Bill Sanderson]

I've seen that same false positive, and in the same situation--a set of
files saved as a backup of a Win95 machine.
--