Windows Defender Suggestions

[Guest]

I suggest adding the following programs to your spyware detection signatures.
I have included the URL's where you can find them for reference.

Spector & eBlaster (Remote Monitoring & Keylogging)
http://www.spectorsoft.com

RealVNC (Remote Control & Monitoring)
http://www.realvnc.com

In addition, you may want to locate a copy of Grokster (File Sharing App)
which contains enough spyware, adware and malware to bring even the fastest
computer to it's knees. WARNING: Download it at your own risk.

I realize that Windows Defender is still in beta (I am a developer too), but
my experience with it and the previous version (Microsoft Antispyware) have
not been good at all when it comes down to detecting many common spyware,
adware and malware threats. I also believe that it should detect certain
cookies that can pose a potential threat to privacy.

Lastly, it is not clear how to update the signatures. Perhaps adding an
update button and an auto update option would be a good idea.

 

[Joe Faulhaber[MSFT]]

We have versions of all of these in our signatures already, do you have
versions we're not detecting?

We're moving signature update from hidden in Help->About dialog to hidden in
the Help menu. We believe that will be sufficiently poorly hidden so
everybody who needs it will find it - but automatic updates gets me my
updates Weds/Fri quite nicely.

 

[Guest]

Yes, I have the following versions of the spyware/monitoring programs and
Windows Defender does not detect them:

UltraVNC 1.0.1
Spector Professional 5.0 Build 1167

I didn't know there was an option to check for updates in the About dialog
box, thanks. I prefer not to use Windows automatic updates, I like to
manually select what updates are installed. Perhaps a more visible Update
button would be a good idea.

Other than the missed detections, I like the overall feel of Windows
Defender, especially the Software Explorer but I am curious... Does the
Software Explorer also detect Stealth programs and processes like those used
by Spector?

 

[Guest]

Correction to my earlier suggestions post. I listed one of the programs that
Windows Defender was not detecting as:

RealVNC (Remote Control & Monitoring)
http://www.realvnc.com

The correct program is (3 versions listed):

UltraVNC v100-RC18 (Remote Control & Monitoring)
UltraVNC v1.0.1 (Remote Control & Monitoring)
UltraVNC v1.0.2 (Remote Control & Monitoring)
http://ultravnc.sourceforge.net/

 

[Bill Sanderson MVP]

RealVNC should already be detected--as should all VNC variants--and is, in
my experience.
Autoupdate is normal update mode for Windows Defender. If Autoupdate works
on your system, Windows Defender should update automatically without
intervention.

 

[Joe Faulhaber[MSFT]]

Could you please post your signature version, so we're sure you're current?

My help->about says:
Windows Defender Version: 1.1.1520.0

Engine Version: 1.1.1481.0

Definition Version: 1.14.1518.10

Note my WD version is newer than yours, but I hope the engine/definition
version match.

Regards,

Joe

 

[Guest]

Hello Joe,

Can you provide the link to Download the new Windows Defender version.
(1.1.1520.0)

I have the follow:
Jue 6 Jul 2006

WD v. 1.1.1347.0
Engine v. 1.1.1481.0
Signature v. 1.14.1518.

TIA

 

[Donald Anadell]

Hi Joe,

Are you privy to an in house version of the UI that hasn't been distributed
yet? Perhaps a faux pas, or typo? I am still sitting here with version
1.1.1347.0 of the UI.

Donald Anadell

 

[Joe Faulhaber[MSFT]]

Sorry, I probably shouldn't have posted that WD version - it is an internal
build
However, I believe the engine/sigs I'm using should be the same as yours.

We'll get you a new version on the UI as soon as it's ready, I'm of course
not allowed to speculate when that will be.

Regards,
Joe

 

[Donald Anadell]

Hi Joe,

Thank you for the clarification kind sir)

Donald Anadell