Live data from Hacker News

MS Windows Defender and DeCSS

arch13.com

11–20 of 211 posts

Re: MS Windows Defender and DeCSS

#13

Do tech aware people like nearly everyone in this forum, need Defender (or another AV) to run at all? How many people here completely or partially stop it from running?

I had to get signed permission from our IT contractors to disable it. But then again, I was trying to get a PDF of a Categorical Logic paper from an Italian university’s website and the filters kept blocking for pornography and sending emergency messages to the contractor to audit my computer.

Re: MS Windows Defender and DeCSS

#14

To be fair, this does look like a false positive. In general, the desktop antivirus space in 2021 is a mess. Because of the sheer number of malware, and some obfuscation techniques used by some of it, antivirus software has to use very broad regular expressions for describing the malware, counterbalanced by huge whitelists of known mainstream software. If you don't qualify as a "mainstream software vendor", simply bu…

Deleting both the exe and the source code makes a false positive seem rather unlikely to me.

Re: MS Windows Defender and DeCSS

#15

To be fair, this does look like a false positive. In general, the desktop antivirus space in 2021 is a mess. Because of the sheer number of malware, and some obfuscation techniques used by some of it, antivirus software has to use very broad regular expressions for describing the malware, counterbalanced by huge whitelists of known mainstream software. If you don't qualify as a "mainstream software vendor", simply bu…

I don't care how broad your definition is, it shouldn't include the mp4 files in my hard drive.

Re: MS Windows Defender and DeCSS

#16
post #7

His comment in /r/sysadmin: "Setting a Windows Defender exception to the folder does not prevent the quarantine from occurring. I re-ran this test three times trying exceptions and even the entire NAS drive as on the excluded list." Windows Defender is overriding the user whitelist?

In addition, Windows also quarantines and deletes innocuous Windows activation crack tools that contain no malware whatsoever, but can be used to activate Windows independently of Microsoft.

It's really amazing the attitude Microsoft takes regarding hardware that isn't theirs, including the nonconsensual forced autoupdate.

Re: MS Windows Defender and DeCSS

#17
post #10
post #7

His comment in /r/sysadmin: "Setting a Windows Defender exception to the folder does not prevent the quarantine from occurring. I re-ran this test three times trying exceptions and even the entire NAS drive as on the excluded list." Windows Defender is overriding the user whitelist?

from that forum it also seems like Windows Defender is deleting a .txt file containing the source code.

Yes, if true, this would invalidate the "heuristics error on exe" argument.

Re: MS Windows Defender and DeCSS

#19
post #3

I wonder when Anti-Virus will start deleting files that express opinions they don't like. Reminds me of the famous Earworm https://www.youtube.com/watch?v=-JlxuQ7tPgQ

I get annoyed with AV when it quarantines "Potentially unwanted software" like ProduKey. While it may be able to be used maliciously, that's not why I have it installed, and I do want it on my machine.

Re: MS Windows Defender and DeCSS

#20

Do tech aware people like nearly everyone in this forum, need Defender (or another AV) to run at all? How many people here completely or partially stop it from running?

Sadly it’s often a contractual / insurance requirement.

At home?
Post reply on HN