G
Guest
Latest WIN Defender on WINXP SP2 H.E.
I'm having a hard time getting acquainted with Windows Defender's methods.
1.) I run primarily in a limited user account
2.) WIN DEFENDER scans right on schedule from this account. Cool.
3.) Received first actual visual alert on systray about a U.S. Robotics
modem driver. There should have been a way for me to Apply my decision
(permit/deny) but the button was grayed out (I was in limited user account).
What gives?
4.) I notice I have several entries in eventvwr (#3004) which isn't uncommon
I realize. But I think it's counter-productive to restrict these notices to
the evenvwr - why aren't I getting them on the systray icon? None of the
items is classified and I do have the alert option enabled: "Software that
has not yet been classified"
Yet most of the alerts are hitting the eventvwr and not the systray.
5.) I joined the Advanced membership for Spynet based on reliable
recommendations. Yet my early experience is somewhat lackluster. Where's the
beef?
Finally, for those alerts already restricted to the eventvwr, how and when
can I attend to them now? All of them are unclassified but absolutely safe.
I repeat one question that I just can't get out of my head. What good is it
to throw an alert into the eventvwr where I may go once a week. I need all
alerts on the systray icon so that I can deal with it immediately. Here's
sample of alert sent only to eventvwr:
"Windows Defender Real-Time Protection agent has detected changes. Microsoft
recommends you analyze the software that made these changes for potential
risks. You can use information about how these programs operate to choose
whether to allow them to run or remove them from your computer. Allow
changes only if you trust the program or the software publisher. Windows
Defender can't undo changes that you allow.
For more information please see the following:
http://go.microsoft.com/fwlink/?linkid=74409
Scan ID: {26D6B950-C56F-4570-8FB5-065A0A3BF204}
User: xxxxx\xxxxx
Name: Unknown
ID:
Severity: Not Yet Classified
Category: Not Yet Classified
Path Found: driver
ROCEXP111
Alert Type: Unclassified software
Detection Type: "
This was for Microsoft's on Process Explorer 11.4.0.
I'm having a hard time getting acquainted with Windows Defender's methods.
1.) I run primarily in a limited user account
2.) WIN DEFENDER scans right on schedule from this account. Cool.
3.) Received first actual visual alert on systray about a U.S. Robotics
modem driver. There should have been a way for me to Apply my decision
(permit/deny) but the button was grayed out (I was in limited user account).
What gives?
4.) I notice I have several entries in eventvwr (#3004) which isn't uncommon
I realize. But I think it's counter-productive to restrict these notices to
the evenvwr - why aren't I getting them on the systray icon? None of the
items is classified and I do have the alert option enabled: "Software that
has not yet been classified"
Yet most of the alerts are hitting the eventvwr and not the systray.
5.) I joined the Advanced membership for Spynet based on reliable
recommendations. Yet my early experience is somewhat lackluster. Where's the
beef?
Finally, for those alerts already restricted to the eventvwr, how and when
can I attend to them now? All of them are unclassified but absolutely safe.
I repeat one question that I just can't get out of my head. What good is it
to throw an alert into the eventvwr where I may go once a week. I need all
alerts on the systray icon so that I can deal with it immediately. Here's
sample of alert sent only to eventvwr:
"Windows Defender Real-Time Protection agent has detected changes. Microsoft
recommends you analyze the software that made these changes for potential
risks. You can use information about how these programs operate to choose
whether to allow them to run or remove them from your computer. Allow
changes only if you trust the program or the software publisher. Windows
Defender can't undo changes that you allow.
For more information please see the following:
http://go.microsoft.com/fwlink/?linkid=74409
Scan ID: {26D6B950-C56F-4570-8FB5-065A0A3BF204}
User: xxxxx\xxxxx
Name: Unknown
ID:
Severity: Not Yet Classified
Category: Not Yet Classified
Path Found: driver
ROCEXP111Alert Type: Unclassified software
Detection Type: "
This was for Microsoft's on Process Explorer 11.4.0.