Do tech aware people like nearly everyone in this forum, need Defender (or another AV) to run at all? How many people here completely or partially stop it from running?
If you joined a domain, you're not alone anymore.
MS Windows Defender and DeCSS
41–50 of 211 posts
Re: MS Windows Defender and DeCSS
#42Do tech aware people like nearly everyone in this forum, need Defender (or another AV) to run at all? How many people here completely or partially stop it from running?
I personally don't see a reason to have any kind of AV installed on my system(AV software is generally a performance decrease anyways). I should note that I used to work in the AV industry many years ago, so I consider my security knowledge above average and almost everything that I consider non-essential is being run inside a VM(also do RE as a hobby).
Re: MS Windows Defender and DeCSS
#43Earlier quoted context omitted.
I had to get signed permission from our IT contractors to disable it. But then again, I was trying to get a PDF of a Categorical Logic paper from an Italian university’s website and the filters kept blocking for pornography and sending emergency messages to the contractor to audit my computer.
Sounds weird... Do you know to what extent those are correlated? That is: is the contractor told every time the filter thinks it has found adult entertainment? Or was your case exceptional?
[deleted]
Re: MS Windows Defender and DeCSS
#44His comment in /r/sysadmin: "Setting a Windows Defender exception to the folder does not prevent the quarantine from occurring. I re-ran this test three times trying exceptions and even the entire NAS drive as on the excluded list." Windows Defender is overriding the user whitelist?
Microsoft knows better. We are here to protect you.
Re: MS Windows Defender and DeCSS
#45Wait until Windows 11 comes along and has more security features enabled.
Re: MS Windows Defender and DeCSS
#46He said DirectConnect!
Re: MS Windows Defender and DeCSS
#47Ok, honest question. How do they come up with those names for the malware?
Glupteba!ml looks like a randomly generated thing, but I’m sure it’s not.
Re: MS Windows Defender and DeCSS
#48Earlier quoted context omitted.
I get annoyed with AV when it quarantines "Potentially unwanted software" like ProduKey. While it may be able to be used maliciously, that's not why I have it installed, and I do want it on my machine.
My win10 install recently started deleting my install of qBittorrent, which I very much want installed and use daily, as "potentially unwanted software". Exceptions kept getting ignored so just today I disabled the entire category of potentially unwanted software in win defender. It feels like they're just getting capricious in their scope for flagging things now.
I personally never really vibed with qbittorrent. Stuck with deluge for years.
May I ask why you use qbit?
Re: MS Windows Defender and DeCSS
#49Do tech aware people like nearly everyone in this forum, need Defender (or another AV) to run at all? How many people here completely or partially stop it from running?
Do you disassemble every EXE file before running it? Do you have an absolute protection against zero-days? (In the latter case it can't protect you against initial infection, but it will clear things up once the threat is discovered.)
Re: MS Windows Defender and DeCSS
#50To be fair, this does look like a false positive. In general, the desktop antivirus space in 2021 is a mess. Because of the sheer number of malware, and some obfuscation techniques used by some of it, antivirus software has to use very broad regular expressions for describing the malware, counterbalanced by huge whitelists of known mainstream software. If you don't qualify as a "mainstream software vendor", simply bu…
> In general, the desktop antivirus space in 2021 is a mess.
I don’t think that antivirus is helpful in 2021. I think the most important thing you can do is make sure you are all patched and do not run as administrator.
Antivirus is likely to be unable to catch the really bad stuff, and it actually increases your attack surface. In addition, you pay a performance tax all the time. IMO, just not worth it.