Removal of files in archives

[Guest]

It's technically difficult to remove unwanted software from files that are
in an archive. A simple message, rather than error codes 80501001 and
80508026, would save a lot of confusion and questions. Windows Defender may
be acting correctly based upon design specifications, but is it too much to
ask for messages that mere mortals can understand? More and more bad stuff
is attempting to hide within archives. There are some cases where I think
Windows Defender can legitimately remove unwanted software from archives.
The test case I generated was one file in zip form. Even though it is in an
archive, it is the only file and could have been safely removed. There are
some utilities (granted they work for a limited number of file types) that
have the ability to remove and/or delete a file from an archive. It would be
possible for the user to procure and use such utilities; however, the goal of
any detection and removal software should be to make life as easy as possible
for the end user.

 

[Mike Treit [Msft]]

Yes, the current experience with handling detections inside archives is not
very good.

We are working on improving that, and you will see some changes with the
engine update in the next few weeks that should help address the existing
poor experience.

Also, in general all of the raw error codes being spewed out every time
there is an error is not the desired final behavior - we are certainly
planning on implementing better error messages as well.

Thanks

-Mike

 

[Guest]

Thank you Mr Treit. Good news. I know it's a beta and you can't always get
what you want.

 

[Guest]

Thank you Mr Treit. I know you can't always get what you want, but it's good
to know that Windows Defender is progressing in a positive direction.