Learn Vista - Introduction to Windows Defender

Windows Defender is a software that protects Microsoft Windows Operating System from the attack of spyware and other potentially unwanted software. This software is a part of Windows Vista and can be downloaded for free to be installed in Window XP and Windows Server 2003.

Windows Defender has three methods in keeping spyware and other potentially unwanted software from infecting your computer, namely:

- Real-time protection
Windows Defender alerts you when spyware or potentially unwanted software attempts to install itself or to run on your computer. It also alerts you when programs attempt to change important Windows settings.

- SpyNet community
The online Microsoft SpyNet community helps you see how other people respond to software that has not yet been classified for risks. Seeing if other members of the community allow software can help you choose whether to allow it on your computer. In turn, if you participate, your choices are added to the community ratings to help other people choose what to do.

- Scanning options
You can use Windows Defender to scan for spyware and other potentially unwanted software that might be installed on your computer, to schedule scans on a regular basis, and to automatically remove any malicious software that is detected during a scan.

    When you use Windows Defender, it's important to have up-to-date definitions. Definitions are files that act like an ever-growing encyclopedia of potential software threats. Windows Defender uses definitions to determine if software that it detects is spyware or other potentially unwanted software, and then to alert you to potential risks. To help keep your definitions up to date, Windows Defender works with Windows Update to automatically install new definitions as they are released. You can also set Windows Defender to check online for updated definitions before scanning.

Windows Defender offers you security agents while performing its real-time protection. Security agents are points which Windows Defender will monitor. You can find them by clicking Tools, and then click Options from Windows Defender window. Here are the short explanations to each agents:

- Auto Start
The purpose is to monitor lists of programs that are allowed to automatically run when you start your computer. Spyware and other potentially unwanted software can be set to run automatically when Windows starts. That way, it can run without your knowledge and collect information. It can also make your computer start or run slowly.

- System Configuration (Settings)
The purpose is to monitor security-related settings in Windows. Spyware and other potentially unwanted software can change hardware and software security settings, and then collect information that can be used to further undermine your computer's security.

- Internet Explorer Add-ons
The purpose is to monitor programs that automatically run when you start Internet Explorer. Spyware and other potentially unwanted software can masquerade as web browser add-ons and run without your knowledge.

- Internet Explorer Configurations (Settings)
The purpose is to monitor browser security settings, which are your first line of defense against malicious content on the Internet. Spyware and other potentially unwanted software can try to change these settings without your knowledge.

- Internet Explorer Downloads
The purpose is to monitor files and programs that are designed to work with Internet Explorer, such as ActiveX controls and software installation programs. These files can be downloaded, installed, or run by the browser itself. Spyware and other potentially unwanted software can be included with these files and installed without your knowledge.

- Services and Drivers
The purpose is to monitor services and drivers as they interact with Windows and your programs. Because services and drivers perform essential computer functions (such as allowing devices to work with your computer), they have access to important software in the operating system. Spyware and other potentially unwanted software can use services and drivers to gain access to your computer or to try to run undetected on your computer like normal operating system components.

- Application Execution
The purpose is to monitor when programs start and any operations they perform while running. Spyware and other potentially unwanted software can use vulnerabilities in programs that you have installed to run malicious or unwanted software without your knowledge. For example, spyware can run itself in the background when you start a program that you frequently use. Windows Defender monitors your programs and alerts you if suspicious activity is detected.

- Application Registration
The purpose is to monitor tools and files in the operating system where programs can register to run at any time, not just when you start Windows or another program. Spyware and other potentially unwanted software can register a program to start without notice and run, for example, at a scheduled time each day. This allows the program to collect information about you or your computer or gain access to important software in the operating system without your knowledge.

- Windows Add-ons
The purpose is to monitor add-on programs (also known as software utilities) for Windows. Add-ons are designed to enhance your computing experience in areas such as security, browsing, productivity, and multimedia. However, add-ons can also install programs that will collect information about you or your online activities and expose sensitive, personal information, often to advertisers.

Source: taken from Windows Vista documentation

No comments:

Post a Comment