Windows Defender

Windows Defender A component of Microsoft Windows
Windows Defender in Windows 7
Details
Type	Spyware removal software
Included with	Windows Vista Windows 7
Also available for	Windows XP Windows Server 2003
Replaced by	Microsoft Security Essentials
Support status
Mainstream support

Windows Defender

Developer(s)	Microsoft
Initial release	October 24, 2006; 5 years ago (2006-October-24)
Stable release	1.1.1593 / May 23, 2007; 4 years ago (2007-05-23)[1][2]
Development status	Stalled
Operating system	Windows XP Windows Server 2003
Platform	IA-32[1] and x86-64[2]
Size	4.9 MB[1] – 7.0 MB[2]
Available in	For IA-32: English, Arabic, Chinese, Czech, Danish, Dutch, Finnish, French, German, Greek, Hebrew, Hungarian, Italian, Japanese, Korean, Norwegian, Polish, Portuguese, Russian, Spanish, Swedish and Turkish[1] For x64: English, Chinese, French, German, Italian, Japanese, Korean, Portuguese (Brazil), Russian and Spanish[2]
Type	Spyware removal software
License	Freeware
Website	microsoft.com/windowsdefender/

Windows Defender, formerly known as Microsoft AntiSpyware, is a software product from Microsoft to prevent, remove, and quarantine spyware in Microsoft Windows. It is included and enabled by default in Windows Vista and Windows 7, and is available as a free download for Windows XP and Windows Server 2003.

Basic features

Windows Defender features spyware scanning capabilities like other free spyware-scanning products available on the market, and includes a number of real-time security agents that monitor several common areas of Windows for changes which may be caused by spyware. It also includes the ability to easily remove ActiveX applications that are installed. Also integrated is support for Microsoft SpyNet network that allows users to report to Microsoft what they consider to be spyware, and what applications and device drivers they allow to be installed on their system.

History

Beta 1

Microsoft AntiSpyware Beta 1 (Version 1.0.701)

Windows Defender is based on GIANT AntiSpyware, which was originally developed by GIANT Company Software, Inc. The company's acquisition was announced by Microsoft on December 16, 2004.^[3][4] While the original GIANT AntiSpyware supported older Windows versions, support for the Windows 9x line of operating systems was later dropped.

The first release of Microsoft AntiSpyware was released in beta form on January 6, 2005 and was basically a repackaged GIANT AntiSpyware.^[3] It was then a free product (though only for genuine installations of Windows), contained few new features and was simply rebranded as a Microsoft product. More builds were released as 2005 progressed, with the last Beta 1 refresh released on November 21, 2005.

Beta 2

At the 2005 RSA Security conference, Chief Software Architect and co-founder of Microsoft, Bill Gates, announced that Windows Defender (which was known as Microsoft AntiSpyware prior to November 4, 2005) would be made available free of charge to all validly licensed Windows 2000, Windows XP, and Windows Server 2003 users to help secure their systems against the increasing malware threat.^[5]

Windows Defender (Beta 2) was released on February 13, 2006. It featured the program's new name and a significant user interface redesign. The core engine was rewritten in C++, unlike the original GIANT-developed one, which was written in Visual Basic.^[6] This improved the application's performance. Also, since beta 2, the program works as a Windows service, unlike earlier releases, which enables the application to protect the computer even when a user is not logged on. The Windows Defender application is technically an interface to the service, which also has the same name. Beta 2 also requires Windows Genuine Advantage validation. However, Windows Defender (Beta 2) did not contain some of the tools found in Microsoft AntiSpyware (Beta 1). Microsoft removed the System Inoculation, Secure Shredder and System Explorer tools found in MSAS (Beta 1) as well as the Tracks Eraser tool, which allowed users to easily delete many different types of temporary files related to Internet Explorer 6, including cookies, temporary internet files, and Windows Media Player playback history.^[3] Microsoft later released German^[7] and Japanese^[8] versions of Windows Defender (Beta 2).

General availability

On October 24, 2006, Microsoft released Windows Defender.^[9] It supports Windows XP, Windows Server 2003 and Windows Vista; however, unlike the betas, it does not run on Windows 2000 by default.^[10]

Advanced features

Windows Defender is shown here successfully blocking the EICAR test file.

Real-time protection

In the Windows Defender options, the user can configure real-time protection options:

• Auto Start - Monitors lists of programs that are allowed to automatically run when the user starts the computer
• System Configuration (settings) - Monitors security-related settings in Windows
• Internet Explorer Add-ons - Monitors programs that automatically run when the user starts Internet Explorer
• Internet Explorer Configurations (settings) - Monitors browser security settings
• Internet Explorer Downloads - Monitors files and programs that are designed to work with Internet Explorer
• Services and Drivers - Monitors services and drivers as they interact with Windows and programs
• Application Execution - Monitors when programs start and any operations they perform while running
• Application Registration - Monitors tools and files in the operating system where programs can register to run at any time
• Windows Add-ons - Monitors add-on programs (also known as software utilities) for Windows

Internet Explorer integration

There is integration with Internet Explorer which enables files to be scanned when they are downloaded to help ensure that one does not accidentally download malicious software. This implementation is similar to the real-time scanners of many anti-virus products on the market. Although not combined with Firefox or other browsers, Windows Defender still scans downloaded files for malicious code, as part of the real-time protection.

Software Explorer

The Advanced Tools section allows users to discover potential vulnerabilities with a series of Software Explorers. They provide views of startup programs, currently running software, network connected applications, and Winsock providers (Winsock LSPs). In each Explorer, every element is rated as either "Known", "Unknown" or "Potentially Unwanted". The first and last categories carry a link to learn more about the particular item, and the second category invites users to submit the program to Microsoft SpyNet for analysis by experts. The Software Explorer feature has been removed from Windows Defender in Windows 7.

Windows Vista-specific functionality

Windows Defender in Windows Vista automatically blocks all startup items that require administrator privileges to run (this is considered suspicious behavior for a startup item). This automatic blocking is related to the UAC (User Account Control) functionality in Windows Vista, and requires users to manually run each of these startup items each time they log in.

Microsoft Security Essentials

Windows Defender is superseded by Microsoft Security Essentials, a standalone antimalware product from Microsoft. Upon installation, Microsoft Security Essentials disables Windows Defender and takes over its duty.^[11][12][13]

See also

Computer security portal

• Security and safety features new to Windows Vista

References

1. ^ ^{a b c d} "Download details: Windows® Defender". Microsoft Download Center. Microsoft Corporation. 23 May 2007. http://www.microsoft.com/downloads/en/details.aspx?FamilyId=435BFCE7-DA2B-4A6A-AFA4-F7F14E605A0D&displaylang=en. Retrieved 22 April 2011. 
2. ^ ^{a b c d} "Download details: Windows® Defender x64". Microsoft Download Center. Microsoft Corporation. 23 May 2007. http://www.microsoft.com/downloads/en/details.aspx?FamilyId=61F0C114-6FFE-4FAD-8CA5-74F236E9283B&displaylang=en. Retrieved 22 April 2011. 
3. ^ ^{a b c} Thurrot, Paul (6 October 2010). "Microsoft Windows Anti-Spyware Preview: Paul Thurott's SuperSite for Windows". SuperSite for Windows. http://www.winsupersite.com/reviews/ms_antispyware_preview.asp. Retrieved 13 October 2011. 
4. ^ "Microsoft Acquires Anti-Spyware Leader GIANT Company". PressPass. Microsoft Corporation. December 16, 2004. http://www.microsoft.com/presspass/press/2004/dec04/12-16GIANTPR.mspx. Retrieved 11 November 2009. 
5. ^ "Gates Highlights Progress on Security, Outlines Next Steps for Continued Innovation". PressPass. Microsoft Corporation. February 15, 2005. http://www.microsoft.com/presspass/press/2005/feb05/02-15rsa05keynotepr.mspx. Retrieved 11 November 2009. 
6. ^ Thurrott, Paul (14 February 2006). "Windows Defender Beta 2 Review: Paul Thurrott's SuperSite for Windows". SuperSite for Windows. http://www.winsupersite.com/reviews/windefender_beta2.asp. Retrieved 8 October 2009. 
7. ^ "Windows Defender: Startseite" (in German). Microsoft Corporation. http://www.microsoft.com/germany/windows/products/winfamily/defender/default.mspx. Retrieved 8 May 2011. 
8. ^ "マイクロソフト セキュリティ At Home" (in Japanese). Microsoft Corporation. http://www.microsoft.com/japan/protect/default.mspx. Retrieved 8 May 2011. 
9. ^ Thurrott, Paul (24 October 2006). "Finally, Microsoft Ships Windows Defender". Windows IT Pro. http://www.windowsitpro.com/Article/ArticleID/93991/93991.html. Retrieved 8 May 2011. 
10. ^ "Windows Defender: Support → FAQ". Microsoft Corporation. http://www.microsoft.com/windows/products/winfamily/defender/support.mspx. Retrieved 8 May 2011. "Q: What are the system requirements for Windows Defender? A: System requirements: [...] Note: Windows Defender does not run on the Microsoft Windows 2000." 
11. ^ Thurrott, Paul (18 June 2009). "Microsoft Security Essentials Public Beta". Paul Thurrott's SuperSite for Windows. http://www.winsupersite.com/win7/mse_beta.asp. Retrieved 8 May 2011. 
12. ^ Hau, Kevin (23 June 2009). "Windows Defender and Microsoft Security Essentials". Microsoft Answers. Microsoft Corporation. http://answers.microsoft.com/en-us/protect/forum/protect_start/windows-defender-and-microsoft-security-essentials/5309cb8d-02e1-40e8-974f-0dcedb9ab9fd. Retrieved 8 May 2011. 
13. ^ Marius, Marius Oiaga (30 August 2010). "Microsoft Security Essentials 1.0 and 2.0 Disable Windows Defender". Softpedia (SoftNews NET SRL). http://news.softpedia.com/news/Microsoft-Security-Essentials-1-0-and-2-0-Disable-Windows-Defender-154342.shtml. Retrieved 8 May 2011. 

External links

• Official website
• Microsoft Malware Protection Center