Basic Defender Question

  • Thread starter Thread starter Jeff
  • Start date Start date
J

Jeff

Under tools-options- Default actions-What does "Definition recommended
action" actually mean? Does it delete;quarantine,clean??? More clarification
needed please.

Jeff
 
Hello Jeff,

Signatures are the definitions of the applications that WD detects as
potetially unwanted. These definitions have recommended actions for each
item detected - for severe threats, the default is to remove. For most low
threat items, the default action is ignore.

I hope this post is helpful.

Please, rate the pºsts.

Еиçеl
 
Thanks,
But here comes the inevitable question? How do you know which action it
will take? And what are the rules defining what MS considers threats? Which
then brings me to another point; which has caused contention; MS has decided
that cookies are not spyware and will not search for them. Ok. I'll just use
another program that does. But to the contrary,and no matter what MS
says-cookies are spying,and are offensive to me in the least. But that's for
another thread.
Jeff
 
We have a set of criteria which we use to determine what the recommend
action is for a particular threat. You are welcome to overwrite our
recommendation at any time and can set what you want by default within
tools -> options.
The cookie debate is a lively one, but you can choose to limit cookies
within IE. We feel that IE is in a better position to block cookies before
they are written instead of removing after the file is there.

--
-steve

Steve Dodson [MSFT]
Windows Defender Beta Lead
MCSE, CISSP
http://blogs.technet.com/stevedod
--

This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this
message are best directed to the newsgroup/thread from which they
originated.
 
Steve,
Thanks for the response. Don't get me wrong; I like Defender,but am
confused as to what actions it will take based on your rules(i.e.-does it
delete,clean,move,etc.) Basically;should I leave it at default values? And
will their eventually be a way to see what actions Defender took in regards
to "threats" in the tools area? (instead of having to go to the event
viewer?).
On the subject of "cookies"; which ARE spyware, that is fine about
Microsoft's position on the issue. In the area of security;one is never
remiss to have various ways to deal with such things as "cookies"; or any
"malware" in general. And there are excellent 3rd party software
applications that do deal with the "cookies" and other issues; if they
breach security settings. Defender is an excellent tool(in my opinion) so
far! Just miss some of the user configurable settings and logs/info that
were in MSAS Giant. Thanks for your time, and if you could clarify;briefly,
maybe in a help section or READ ME file; the different actions Defender will
take based on Microsoft criteria of the "threat",that would be great;because
"Definition recommended Action" confuses me,and maybe others too. So
basically;for maximum protection;should I leave those settings on
"Definition Recommended Action"? Again, Thanks for your time,
Sincerely, Jeff
Steve Dodson said:
We have a set of criteria which we use to determine what the recommend
action is for a particular threat. You are welcome to overwrite our
recommendation at any time and can set what you want by default within
tools -> options.
The cookie debate is a lively one, but you can choose to limit cookies
within IE. We feel that IE is in a better position to block cookies before
they are written instead of removing after the file is there.

--
-steve

Steve Dodson [MSFT]
Windows Defender Beta Lead
MCSE, CISSP
http://blogs.technet.com/stevedod
--

This posting is provided "AS IS" with no warranties, and confers no
rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this
message are best directed to the newsgroup/thread from which they
originated.
Jeff said:
Thanks,
But here comes the inevitable question? How do you know which action it
will take? And what are the rules defining what MS considers threats?
Which then brings me to another point; which has caused contention; MS
has decided that cookies are not spyware and will not search for them.
Ok. I'll just use another program that does. But to the contrary,and no
matter what MS says-cookies are spying,and are offensive to me in the
least. But that's for another thread.
Jeff
Click to expand...
Click to expand...
 
Back
Top