Windows Defender

From Infogalactic: the planetary knowledge core
Jump to: navigation, search
Windows Defender
A component of Microsoft Windows
64px
300px
Windows Defender in Windows 10
Details
Type Antivirus software on Windows 8+; formerly spyware removal software
Included with Windows Vista
Windows 7
Windows 8
Windows 8.1
Windows 10
Also available for Windows XP
Windows Server 2003
Support status
Mainstream support
Related components
Microsoft Security Essentials

Windows Defender is a software product that attempts to detect and remove malware. Initially released as an antispyware program, it was first released as a free download for Windows XP, shipped with Windows Vista and by default, and currently ships with antivirus capabilities as part of Windows 10.

Basic features

Before Windows 8, Windows Defender featured antispyware capabilities. It included a number of real-time security agents that monitored several common areas of Windows for changes which may be caused by spyware. It also included the ability to easily remove installed ActiveX software. Windows Defender featured integrated support for Microsoft SpyNet that allows users to report to Microsoft what they consider to be spyware, and what applications and device drivers they allow to be installed on their system. In Windows 8, functionality has increased to offer antivirus protection as well. Windows Defender in Windows 8 resembles Microsoft Security Essentials and uses the same virus definitions.

History

Beta

File:Windows AntiSpyware Beta 1.png
Microsoft AntiSpyware Beta 1 (Version 1.0.701)

Windows Defender is based on GIANT AntiSpyware, which was originally developed by GIANT Company Software, Inc. The company's acquisition was announced by Microsoft on December 16, 2004.[1][2] While the original GIANT AntiSpyware supported older Windows versions, support for the Windows 9x line of operating systems was later dropped.

The first beta version of Microsoft AntiSpyware was released on January 6, 2005 and was basically a repackaged GIANT AntiSpyware.[1] More builds were released in 2005, with the last Beta 1 refresh released on November 21, 2005.

At the 2005 RSA Security conference, Chief Software Architect and co-founder of Microsoft, Bill Gates, announced that Windows Defender (which was known as Microsoft AntiSpyware prior to November 4, 2005) would be made available free of charge to all validly licensed Windows 2000, Windows XP, and Windows Server 2003 users to help secure their systems against the increasing malware threat.[3]

Windows Defender (Beta 2) was released on February 13, 2006. It featured the program's new name and a significant user interface redesign. The core engine was rewritten in C++, unlike the original GIANT-developed one, which was written in Visual Basic.[4] This improved the application's performance. Also, since beta 2, the program works as a Windows service, unlike earlier releases, which enables the application to protect the computer even when a user is not logged on. Beta 2 also requires Windows Genuine Advantage validation. However, Windows Defender (Beta 2) did not contain some of the tools found in Microsoft AntiSpyware (Beta 1); Microsoft removed the System Inoculation, Secure Shredder and System Explorer tools found in MSAS (Beta 1) as well as the Tracks Eraser tool, which allowed users to easily delete many different types of temporary files related to Internet Explorer 6, including HTTP cookies, web cache, and Windows Media Player playback history.[1] Microsoft later released German and Japanese versions of Windows Defender (Beta 2).[5][6]

General availability

On October 24, 2006, Microsoft released Windows Defender. It supports Windows XP and Windows Server 2003; however, unlike the betas, it does not run on Windows 2000.[7]

Conversion to antivirus

Windows Defender was released with Windows Vista and Windows 7, serving as their built-in antispyware component. Windows Defender is superseded by Microsoft Security Essentials, an antimalware product from Microsoft which provides protection against a wider range of malware. Upon installation, Microsoft Security Essentials disables Windows Defender and takes over its duty.[8][9][10] In Windows 8, Microsoft upgraded Windows Defender into an antivirus program comparable to Microsoft Security Essentials.[11] This new Windows Defender greatly resembles Microsoft Security Essentials and uses the same virus definition updates. As a result, Microsoft Security Essentials is not compatible with Windows 8.

Advanced features

File:Windows Defender EICAR.png
Windows Defender successfully blocks the EICAR test file
Real-time protection
In the Windows Defender options, the user can configure real-time protection options.
Browser integration
Integration with Internet Explorer and Microsoft Edge enables files to be scanned as they are downloaded to help ensure that one does not accidentally download malicious software. Although it does not integrate with Firefox or other web browsers, Windows Defender still scans downloaded files for malicious code, as part of the real-time protection.

Windows Vista-specific functionality

Windows Defender had additional functionality in Windows Vista which was removed in subsequent versions of Windows.

Security agents
Security agents monitor the computer for malicious activities.
  • Auto Start – Monitors lists of programs that are allowed to automatically run when the user starts the computer
  • System Configuration (settings) – Monitors security-related settings in Windows
  • Internet Explorer Add-ons – Monitors programs that automatically run when the user starts Internet Explorer
  • Internet Explorer Configurations (settings) – Monitors browser security settings
  • Internet Explorer Downloads – Monitors files and programs that are designed to work with Internet Explorer
  • Services and Drivers – Monitors services and drivers as they interact with Windows and programs
  • Application Execution – Monitors when programs start and any operations they perform while running
  • Application Registration – Monitors tools and files in the operating system where programs can register to run at any time
  • Windows Add-ons – Monitors add-on programs for Windows
Software Explorer
The Advanced Tools section allows users to discover potential vulnerabilities with a series of Software Explorers. They provide views of startup programs, currently running software, network connected applications, and Winsock providers (Winsock LSPs). In each Explorer, every element is rated as either "Known", "Unknown" or "Potentially Unwanted". The first and last categories carry a link to learn more about the particular item, and the second category invites users to submit the program to Microsoft SpyNet for analysis by community members.[12][13] The Software Explorer feature has been removed from Windows Defender in Windows 7,[14] for which Microsoft recommends using AutoRuns for controlling which programs run when the computer starts.
Notification of startup programs that run as an administrator
Windows Defender in Windows Vista automatically blocks all startup items that require administrator privileges to run (this is considered suspicious behavior for a startup item). This automatic blocking is related to the User Account Control functionality in Windows Vista, and requires users to manually run each of these startup items each time they log in if they desire the item to run at startup.[15]
User interface
In Windows Vista, it is possible to close the window and have the program run in the system tray while a scan is running. However, in Windows 7, this functionality was removed and the window must remain open while a scan is running.

Windows Defender Offline

Windows Defender Offline (formerly known as Standalone System Sweeper Beta[16]) is a bootable standalone antimalware program that runs from a bootable disk and is designed to scan infected systems while their operating systems are offline.[17]

See also

References

  1. 1.0 1.1 1.2 Lua error in package.lua at line 80: module 'strict' not found.
  2. Lua error in package.lua at line 80: module 'strict' not found.
  3. Lua error in package.lua at line 80: module 'strict' not found.
  4. Lua error in package.lua at line 80: module 'strict' not found.
  5. Lua error in package.lua at line 80: module 'strict' not found.
  6. Lua error in package.lua at line 80: module 'strict' not found.
  7. Lua error in package.lua at line 80: module 'strict' not found.
  8. Lua error in package.lua at line 80: module 'strict' not found.
  9. Lua error in package.lua at line 80: module 'strict' not found.
  10. Lua error in package.lua at line 80: module 'strict' not found.
  11. Windows 8 Consumer Preview: Set Up Windows 8 with the Web Installer
  12. Lua error in package.lua at line 80: module 'strict' not found.
  13. Lua error in package.lua at line 80: module 'strict' not found.
  14. Lua error in package.lua at line 80: module 'strict' not found.
  15. Lua error in package.lua at line 80: module 'strict' not found.
  16. Microsoft Standalone System Sweeper
  17. Lua error in package.lua at line 80: module 'strict' not found.

External links