Solved What does Windows Defender lack, what can’t it do?

antspants · Jan 18, 2024

Halo.

I have a friend that has no money and cannot renew their antivirus Software. (Norton 360)
Normally I would just buy it for him as I buy software for other friends but this person is broke due to a fetish with tattoos and as a result his family goes without. I will not invest in his tattoos.

So, as I have read in here some comments from those of you who love or proffer to use Windows Defender, I was hoping you’ll could tell me:
What if anything does it lack?
Is there a best practice for running it?
If the person was to open a file, start a program or open a corrupted zip file that was malicious, what would defender do?

I probably have more questions but as I have never used anything but 3rd party software, I can’t think of them right now.

Thanks

ThrashZone · Jan 18, 2024

Hi,
WD lacks tattoos hehe

oldschool · Jan 18, 2024

antspants said:
Is there a best practice for running it?

Most users, including many on this forum, probably run Defender in its default configuration. I use it with additional options enabled via GPO on Windows Pro, but for ease of use I advise this simple, portable app that can be used on Windows Home. .
ConfigureDefender
It is developed by a trusted member of another forum, utilizes Powershell to enable advanced protection features and is easy to use. If your friend is a technophobe you can install and configure for him easily. You can see a recent test results from another trusted member on another forum here:
MS Defender Test
This test and thread include additional details you might find valuable.

antspants said:
What if anything does it lack?

A PC "junk" cleaner, which are a waste. No password manager or other "features" some consider bloatware. I can say it lacks an AV feature like Kaspersky's System Watcher (or whatever it might be called now). Defender works in tandem with system-wide Smartscreen and Smartscreen in Edge. Users with a well-patched OS, Defender and sensible computing habits, e.g. avoid dodgy websites, downloading cracks, clicking on spam, etc. easily stay protected. Even more so if they use Edge for browsing protection.

antspants said:
If the person was to open a file, start a program or open a corrupted zip file that was malicious, what would defender do?

This question is too broad to answer satisfactorily. There was a recent test where Defender did not recognize a password-protected Zip file that was downloaded via a phishing email, but this was a case where the user's behavior was the source of the fault, as is often typical. The tester had to use gymnastics to actually enable the infection chain!
Defender Bypassed: How You Got Hacked

trumpy81 · Jan 18, 2024

@antspants
I am one of those users that runs Windows defender in it's default state. I think as far as antivirus/antimalware goes, it is up there with the best of them. If you configure it further, it rivals the best AV software out there at half the cost ... lol

Security, as was pointed out by @oldschool comes down to the user and their practises, but WD will help protect them just the same.

Help your friend lock it down, and your friend will be in good shape and very lucky to have a friend like you

antspants · Jan 18, 2024

Thank you very much, @oldschool & @trumpy81. You answered my questions.
I shall load ConfigureDefender on his PC and sort it out.
As far as him being cautious, I believe his fetish goes beyond his spending all his money on tattoos. @trumpy81 will confirm, tattoos are the fad in Australia, a hipster lifestyle. I’ll admit, there are some wonderful artists out there. It’s expensive and those that start on them get obsessed. This particular guy has them all the way up coving his neck. He looks like an idiot (in my opinion) but he has redeeming qualities, although harder to find these days.

My point is, I can’t say he’ll take any care. I’d like to say this isn’t my problem but it is as his wife is in fact the friend, he is a default.
Yes he is in fact a Technophobe and carelss. Every other month he brings his PC to me. The only other option would be to give him a little jaw tap, knock some sense into him, but it isn’t really my place.

Again, I appreciate the help.

@ThrashZone, if the software was Australian it would be covered in tattoos from head to toe.

trumpy81 · Jan 18, 2024

Tatts are popular here, but not that prevalent. I know plenty of folks that don't have any, but those that do, are covered in them ... lol

Despite my handle, Trumpy, being Australian slang for a Triumph motorcycle, I'll let you figure out what the 81 means, I don't have a single tatt anywhere

My biggest issue is that, what I like today is not necessarily what I like tomorrow ... lol

I'm always undecided when it comes to art and tattoos, but like you say, there is some great art out there and I have loads of mates with tatts and I often wonder what some of them would look like on me, but I have never bitten the bullet and got one, despite all of the peer pressure.

pparks1 · Jan 18, 2024

I haven't used anything but defender for years. Haven't had to take any extra precautions or do anything different. I see absolutely no reason to spend money on a third party software, especially with my internet habits.

antspants · Jan 18, 2024

pparks1 said:
I haven't used anything but defender for years. Haven't had to take any extra precautions or do anything different. I see absolutely no reason to spend money on a third party software, especially with my internet habits.

Thank you

antspants · Jan 18, 2024

trumpy81 said:
Tatts are popular here, but not that prevalent.

I think the devide is Gold Coast vs Brisbane. The Gold Coast is becoming one giant Tattoo. Having been in Brisbane for something recently, I didn’t notice it as much.

trumpy81 · Jan 18, 2024

Yeah you probably see it more down there where all the 'cool' kids hang out ... lol

Up here not so much, depending on where you hang out though ... lol

Queensland definitely seems to have more tatts than any of the other states I've been to, Vic., N.S.W, S.A., W.A. Only place I have not been yet is the NT.

From here, I'd love to travel out to Birdsville, across the Simpson desert to the Stuart Highway, then up to the Alice and onto Darwin. I doubt I'd see too many tatts along that route ... lol

TraderGary · Jan 18, 2024

I use only Defender and haven't seen a need for any third-party solutions. Microsoft's security department is monitoring for new malware 24 hours a day 365 days a year. Microsoft has a lot riding on keeping Defender among the best there is. I'm confident using Defender.

Netrick · Jan 18, 2024

You may already know this, but you might need to use the Norton uninstall tool.
Download and run the Norton Remove and Reinstall tool for Windows

I also use Microsoft Defender and will sometimes manually run Malwarebytes free version as well when I think about it.

antspants · Jan 19, 2024

TraderGary said:
I use only Defender and haven't seen a need for any third-party solutions. Microsoft's security department is monitoring for new malware 24 hours a day 365 days a year. Microsoft has a lot riding on keeping Defender among the best there is. I'm confident using Defender.

Thanks Gary.

antspants · Jan 19, 2024

Netrick said:
You may already know this, but you might need to use the Norton uninstall tool.
Download and run the Norton Remove and Reinstall tool for Windows

I also use Microsoft Defender and will sometimes manually run Malwarebytes free version as well when I think about it.

Very true. I believe I still have a Revo Uninstaller portable somewhere. It’s a few versions old that I billed to a job. Thanks for the heads up. Wasn’t aware that Nortons had one

antspants · Jan 19, 2024

trumpy81 said:
Yeah you probably see it more down there where all the 'cool' kids hang out ... lol

Up here not so much, depending on where you hang out though ... lol

Queensland definitely seems to have more tatts than any of the other states I've been to, Vic., N.S.W, S.A., W.A. Only place I have not been yet is the NT.

From here, I'd love to travel out to Birdsville, across the Simpson desert to the Stuart Highway, then up to the Alice and onto Darwin. I doubt I'd see too many tatts along that route ... lol

Maybe a few sailors anchors with the word MUM at the bottom.

trumpy81 · Jan 19, 2024

Oi, don't knock the sailors ... my dad was a sailor with the R.A.N, until he died in a car accident in 1967.
You're probably right though ... lol

Getting back on topic, I remember when WD was called Security Essentials. It was passable, but pretty p i s s poor back then which gave rise to all of the 3rd party vendors we see now. Microsoft have put a lot of effort into it since then and they deserve the accolades they have earnt in that time.

This is why I use WD now and don't waste my time or money with 3rd party apps that do the same thing. All they do is bloat your system and slow it down, so it makes sense to stay with WD IMHO.

Your mate should be well protected by the time you're finished with him ... lol

@oldschool I downloaded and ran ConfigureDefender and I quite like it. It is easy enough to use and understand and everything appears to be reversible if needed. I made one change with it and I will test it out to see what effect it has. Thanks for the tip

bikemanI7 · Jan 19, 2024

Been Using Defender in Default State steady since 2018, runs good on all my systems here, Do have Malwarebytes Premium as well, but that never finds anything on all 3 Household systems typically.

Alot Less problems than when i was running 3rd Party Antivirus many years ago

Winuser · Jan 19, 2024

IMHO as a free alternative for a security program Windows Defender is a very good choice. I run Eset Smart Security on my two desktops and Windows Defender on everything else. Both security programs seem to be doing their job. As for why I use Eset, I want the extra protection that I feel Eset gives me on my main PCs.

monkeylove · Jan 21, 2024

Check AV-Comparatives for test results:

Comparison

www.av-comparatives.org

and note the ones that do the best in terms of protection and performance. Consider choosing from those. You may also look at other websites and video tests.

In my case, the top ones for free versions are Avast, AVG, Bitdefender, and Kaspersky. (The first two are made by the same company.) The one that's complete is Avast, although I was told that Kaspersky should be able to remove malware already present. (The comparison chart states that it's a paid feature.)

For performance, I note the results (including that of the built-in AV) but also browse files and run apps, plus run free benchmark software, to see what's lightest. The one that does well is Kaspersky.

Lastly, note the ff.

You might be blamed for opening files that you shouldn't, etc., but more malware are now found in legitimate software and websites. Several might even operate without user interaction.

You might think that because there's nothing wrong with your system, then it's not infected. Malware can also now stay hidden in systems and steal your data. That also means having backups won't reverse any data stolen.

When you rely on yourself to decide what to disallow or approve, or not allow various applications to access certain folders, then you might end up creating even more damage than malware. You'll have to figure out what you modified and then try to undo it.

You might be told that some AVs are made in dangerous countries while others are safer, but they're mostly made in countries that are considered such (look up "eyes" nations). Also, not only are AVs by default intrusive, free versions will always monetize user activity. Even the Windows OS may do that, together with its AV and even things like browsers. As for paid versions, watch out for hidden costs like the subscription rising considerably for the second year. If you're buying for several devices, it might be like buying a new hard drive each year or two.

jimbo45 · Jan 21, 2024

monkeylove said:
Check AV-Comparatives for test results:

Comparison

www.av-comparatives.org

and note the ones that do the best in terms of protection and performance. Consider choosing from those. You may also look at other websites and video tests.

In my case, the top ones for free versions are Avast, AVG, Bitdefender, and Kaspersky. (The first two are made by the same company.) The one that's complete is Avast, although I was told that Kaspersky should be able to remove malware already present. (The comparison chart states that it's a paid feature.)

For performance, I note the results (including that of the built-in AV) but also browse files and run apps, plus run free benchmark software, to see what's lightest. The one that does well is Kaspersky.

Lastly, note the ff.

You might be blamed for opening files that you shouldn't, etc., but more malware are now found in legitimate software and websites. Several might even operate without user interaction.

You might think that because there's nothing wrong with your system, then it's not infected. Malware can also now stay hidden in systems and steal your data. That also means having backups won't reverse any data stolen.

When you rely on yourself to decide what to disallow or approve, or not allow various applications to access certain folders, then you might end up creating even more damage than malware. You'll have to figure out what you modified and then try to undo it.

You might be told that some AVs are made in dangerous countries while others are safer, but they're mostly made in countries that are considered such (look up "eyes" nations). Also, not only are AVs by default intrusive, free versions will always monetize user activity. Even the Windows OS may do that, together with its AV and even things like browsers. As for paid versions, watch out for hidden costs like the subscription rising considerably for the second year. If you're buying for several devices, it might be like buying a new hard drive each year or two.

Comparative tests are really 100% U/S. For starters they are usually done many days or even weeks in the past - and new nasties can appear at any time. WD is often updated 5 times in a week - and no 3rd party vendor will be able to test their products on new insider windows builds for a period after that too.

For domestic users WD is as good as it gets - most of those other 3rd party products are essentially solving a C20 problem when Windows was as leaky as a sieve. There's utterly no need for any of these for domestic users - certainly not for technological reasons.

If people feel paranoid and want extra security -- then that's fine if it gives you extra piece of mind but its not actually buying you anything on a technical level other than possible performance issues and potential problems with next windows update or release - especially if using insider versions.

Corporates, large LAN operators, web site operators etc have other issues - but for domestic users WD is fine,

Cheers
jimbo