Spynet: How do I use for not yet classified

[Guest]

Windows defender beta 2; XP SP2 (all updates)
In settings, Spynet, I have clicked 'become an advanced member'.
In settings, General settings, I have checked notify 'when changes are
detected from software that has not yet been classified'.

I have one app, Everest Ultimate edition, for which each time I use it I get
an alert that it has not yet been classified. I allow it. But how do I get
that info to Spynet so that Everest Ultimate can be classified as legitimate?
I am on line when I allow, but I can't see any network traffic that might
suggest the info is being sent out.

In Antispyware there was an option to send to Spynet, I can't find it in
Windows Defender.

The help file says

By joining the online community, you can see how other people respond to
Windows Defender alerts. Not all software that is detected is spyware but
Windows Defender alerts you if software has not yet been classified for
risks. Seeing how other people respond to each item can help you choose what
to do. In turn, if you participate, your choices are added to the community
ratings to help other people take action. In Windows Defender, community
ratings are displayed as a bar graph that shows the percentage of users who
have allowed each item.

Where can I see the bar graph referred to?
How do I communicate with Spynet?

If Spynet is not active, then I'll opt out and disable alerts on not yet
classified items as the alerts are in themselves irritating and I only would
want to have them if I knew that it was contributing to the improvement of
Windows Defender.

 

[Guest]

Try here:

http://www.microsoft.com/athome/security/spyware/software/isv/default.mspx
Еиçеl

 

[Guest]

Thanks for the link, I already looked at that, but it seems to be only for
false positives or vendor dispute, neither of which relates to not yet
classified, a different category altogether. Neither forms seems apposite to
getting not yet classified software recognised as legitimate by a private
user.

As for the bar graph supposedly showing how other users have responded, I
think I found where it should appear; on the page 'Review Detected changes'
there is a line which currently states 'Spynet community rating: not
available'. Presumably if Spynet had info about the particular not yet
classified software, that's where the bar chart would appear.

 

[Guest]

Hi all,

Spynet reporting works behind the scenes, you don't have to do anything
explicit to send reports.

If you turn unknown software reporting on, you submit votes by allowing or
blocking software, if you don't have unknowns on, you submit a "seen" report
that doesn't contain a yes or no vote.

Thanks for the feedback, though!

 

[Guest]

Thanks for explanation of how Spynet works.

Related to that, it would be nice if WD would remember my decision to allow
some not yet classified app to run (an always allow option as well as the
allow and block options). At present it alerts me each time I restart the app
after I have reviewed detected changes, selected allow and clicked Apply
actions. Presumably that generates a lot of positive votes for this app in
Spynet . It also generates a lot of entries in the history, where,
unfortunately one cannot (as one could in antispyware) delete individual
items, only all or nothing.

If I ignore the popup (which stays on screen an annoyingly long time), I
don't get the alert next time I open the app. But if I then open WD I get a
window to review items that have not been classified yet.

 

[Guest]

Hello Joe,

Thank you for the new info

Еиçеl

 

[Randy Treit \(MS\)]

If you have files that you think should be detected but aren't, put them in
an archive (.zip or .rar) with the password 'infected' (no quotes) and
e-mail them to (e-mail address removed).

More detailed instructions are available here:

http://www.microsoft.com/athome/security/spyware/software/support/reportspyware.mspx

Thanks,

Randy

 

[Guest]

No problem!

It would indeed be very nice to remember blocks of unknowns, it's one of the
things we really wanted to put in this version, but couldn't fit into our
schedule. It's high on the list for the next version, please keep the
feedback coming!

Thanks,
Joe

 

[Bill Sanderson]

Am I correct in thinking that it is unlikely that you'll be allowing
remembering of blocks of "knowns"?