Windows Defender - a lame joke?

[Dan Koerner]

At least it appears to be. Where's the meat? What's it doing?

OS is XP Pro x64.

Uninstalled beta 1; wasn't clean; had to clean up remains.

Installed Defender; indicated system needed updating simultaneously with Auto Update; stopped Defender.

Auto Update failed download; Manual Update seemed to go OK.

Re-started Defender; systray icon bubble indicated download of defs in progress; then bubble indicated defs installed.

Turned off AV.

Started scan; appeared to progress rather quickly, ~30k objects, ~35 sec., when scan failed with error 0x8020800c. All scan types, quick, full, or drive, fail with same error and at same object, C:\WINDOWS\system32\dvdplay.exe.

Finally found Update button on Help/About screen; systray bubble stateed latest defs installed.

Does it work? Turned on Real Time Protection; closed GUI. No evidence of running visable. Found services in Task Manager; opened several web pages, apps; no evidence of activity seen. Well, is Real Time Protection working? Opened both Regmon and Filemon; opened web pages, apps; no evidence of activity. Opened GUI; saw opening/closing activity in both Regmon and Filemon. Hmmm... it appears Defender DOESN'T provide Real Time Protection on XP x64.

Again, what is it doing? Where's the evidence?

 

[Mike Treit [Msft]]

Hi Dan.

Regarding this statement:

Started scan; appeared to progress rather quickly, ~30k objects, ~35
sec., when scan failed with error 0x8020800c. All scan types, quick,
full, or drive, fail with same error and at same object,
C:\WINDOWS\system32\dvdplay.exe.

Can you please open event viewer (start | run | eventvwr) and send the
contents of any error messages in the System log from "WinDefend" ?

Thanks

-Mike



At least it appears to be. Where's the meat? What's it doing?

OS is XP Pro x64.

Uninstalled beta 1; wasn't clean; had to clean up remains.

Installed Defender; indicated system needed updating simultaneously with
Auto Update; stopped Defender.

Auto Update failed download; Manual Update seemed to go OK.

Re-started Defender; systray icon bubble indicated download of defs in
progress; then bubble indicated defs installed.

Turned off AV.

Started scan; appeared to progress rather quickly, ~30k objects, ~35 sec.,
when scan failed with error 0x8020800c. All scan types, quick, full, or
drive, fail with same error and at same object,
C:\WINDOWS\system32\dvdplay.exe.

Finally found Update button on Help/About screen; systray bubble stateed
latest defs installed.

Does it work? Turned on Real Time Protection; closed GUI. No evidence of
running visable. Found services in Task Manager; opened several web pages,
apps; no evidence of activity seen. Well, is Real Time Protection working?
Opened both Regmon and Filemon; opened web pages, apps; no evidence of
activity. Opened GUI; saw opening/closing activity in both Regmon and
Filemon. Hmmm... it appears Defender DOESN'T provide Real Time Protection
on XP x64.

Again, what is it doing? Where's the evidence?

 

[Dan Koerner]

Done...