Windows Defender In Win 10 Concern

Topic

New Reply

Windows Defender Concern

 

After reading Susan Bradley’s article in the AskWoody Plus Newsletter I just got today I checked my version of Windows Defender and will attach what I found. I am not at all certain if I am protected with the latest version. I see too may versions listed at 0.0.0.0. Susan mentioned “version of the Engine you have installed.” She says it should be “Version 1.1.17700.4 “ or higher. I see 0.0.0.0 beside Engine version. So if I am not protected can I force a Windows Defender update? I have not found a way to do that.  By the way I see the same thing on all 5 of my computers.

 

Wow! Even more Office updates!

By Susan Bradley

• Office 2010 receives more updates this month
• Windows Defender had a zero day that silently was patched
• Security update for Secure Boot DBX can be skipped (KB 4535680)
• I’m giving the all-clear for Windows 10 2004

 

 

 

 

Defender zero day

Microsoft has silently patched a remote code exploit Zero day in the Malware Protection Engine component (mpengine.dll) better known to you and me as Windows Defender antivirus. As long as you have Version 1.1.17700.4 or higher installed, you are already protected. To determine what version you have, click on the search box in the left corner of your computer and type in Windows security. Open the Blue Windows security app, and in the bottom-left corner, click on the gear icon. Now click on About and check what version of the Engine you have installed.

For those customers at risk, Microsoft will have silently updated your Engine version in the background. I’m personally a fan of Windows Defender, especially when running the latest Windows 10 feature release. Running a third-party antivirus software program is problematic if you are on the latest feature releases and especially if you are running an insider version. It’s even more problematic if you run more than one antivirus and registry cleaner program on Windows 10. If you are going to use either of these programs, make sure your security software is compatible before installing a feature release version.

Reply | Quote

Replies

Ditto here… in fact, the only version number is the first one. All of the other three are 0’s. Could it be because I’m running MalwareBytes along with Windows Defender???

Reply | Quote

I don’t know but I too am running Malwarebytes.

Reply | Quote

[PFC]

are you getting security updates?
I’m not running 3rd party av

• This reply was modified 4 years, 3 months ago by PFC.

Reply | Quote

[PFC]

PFC wrote:

are you getting security updates?
I’m not running 3rd party av

• This reply was modified 4 years, 3 months ago by PFC.

Yep I get them all the time once AskWoody Plus Newsletter tells us it is safe to download them.

Reply | Quote

I can’t speak to what Malwarebytes may be doing to you but
a review of how you’re pausing updates may be needed.
I have win 10 pro and have gpedit notification 2 on and that
intercepts any Quality Updates until I download and install them,
but my Definition updates come through daily (sometimes twice daily).

Reply | Quote

Check what AV you are running, details here.
If you are not running Defender then you don’t need the update.

cheers, Paul

Reply | Quote

Paul T wrote:

Check what AV you are running, details here.
If you are not running Defender then you don’t need the update.

cheers, Paul

I’m more confused now than before. I have the Windows Defender icon showing in the systray. I see the same thing following your link as I do when I click on that icon to open it. I assume that means, as I have always believed, that I am using Windows Defender. I had a need a while ago to remove Malawarebytes to solve a problem. While it was uninstalled I was still running Windows Defender if I can believe the systray.

 

So the question again is, how do I force an update to Windows Defender since I do not see the Engine version equal to or greater than Susan says it needs to be.

Reply | Quote

PFC wrote:

I can’t speak to what Malwarebytes may be doing to you but
a review of how you’re pausing updates may be needed.
I have win 10 pro and have gpedit notification 2 on and that
intercepts any Quality Updates until I download and install them,
but my Definition updates come through daily (sometimes twice daily).

Sorry I missed this earlier. I just turned the pause off and recently let Win 10, Office, etc., do their updates. Still I see what I posted above and not at all sure what it means.

Reply | Quote

It means that Malwarebytes (or another third party security software) is handling your antivirus duties and Defender is not enabled. It’s perfectly normal with third party antivirus being installed.

Susan Bradley Patch Lady/Prudent patcher

Reply | Quote

That would be for Malwarebytes Pro not the free version.

--Joe

Reply | Quote

Can you update manually at Windows Security, Virus & threat protection, … updates, Check for updates?

Reply | Quote

Susan Bradley wrote:

It means that Malwarebytes (or another third party security software) is handling your antivirus duties and Defender is not enabled. It’s perfectly normal with third party antivirus being installed.

Thank you.

Reply | Quote

Susan Bradley wrote:

It means that Malwarebytes (or another third party security software) is handling your antivirus duties and Defender is not enabled. It’s perfectly normal with third party antivirus being installed.

I always thought I had protection from both Windows Defender and Malawarebytes. In any case I turned of Malawarebytes’ real time protection and found out I do, in fact, have the version you mentioned, 1.1.17700.4. installed. So I guess all is well.

Reply | Quote

Never run 2 a/v apps with real-time protection.

Reply | Quote

Alex5723 wrote:

Never run 2 a/v apps with real-time protection.

Is that even possible when one is Microsoft Defender in Windows 10 Security?

If another antivirus product is installed and working correctly, Microsoft Defender Antivirus will disable itself. The Windows Security app will change the Virus & threat protection section to show status about the AV product, and provide a link to the product’s configuration options.

https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-antivirus/limited-periodic-scanning-microsoft-defender-antivirus#:~:text=If%20another%20antivirus%20product%20is%20installed%20and%20working%20correctly,%20Microsoft%20Defender%20Antivirus%20will%20disable%20itself.

 

WShlewton wrote:

I always thought I had protection from both Windows Defender and Malawarebytes.

You can enable periodic scanning with Windows Defender, but no real-time protection:

How to enable limited periodic scanning

Reply | Quote

b wrote:

Alex5723 wrote:

Never run 2 a/v apps with real-time protection.

Is that even possible when one is Microsoft Defender in Windows 10 Security?

If another antivirus product is installed and working correctly, Microsoft Defender Antivirus will disable itself. The Windows Security app will change the Virus & threat protection section to show status about the AV product, and provide a link to the product’s configuration options.

https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-antivirus/limited-periodic-scanning-microsoft-defender-antivirus#:~:text=If%20another%20antivirus%20product%20is%20installed%20and%20working%20correctly,%20Microsoft%20Defender%20Antivirus%20will%20disable%20itself.

 

WShlewton wrote:

I always thought I had protection from both Windows Defender and Malawarebytes.

You can enable periodic scanning with Windows Defender, but no real-time protection:

How to enable limited periodic scanning

Thank you. I am going to have to check that link out.

Reply | Quote

Please quote just the section you need in replies.
Highlight the section you are replying to, click Quote.

cheers, Paul

Reply | Quote

This could be the case if you are running a third party anti-virus or anti-malware solution. The presence of those applications disables Defender functionality.

Reply | Quote

b wrote:

You can enable periodic scanning with Windows Defender, but no real-time protection: How to enable limited periodic scanning

Thank you. I just did that on all my computers. I guess it doesn’t allow you to pick how long in between periodic scanning, at least I saw no option. However, when I went back to see if I had missed that setting Windows Defender showed it had made a Quick scan today. Another had me take actions on the threats it found. Glad I have it periodically scanning.

Reply | Quote

b wrote:

You can enable periodic scanning with Windows Defender, but no real-time protection: How to enable limited periodic scanning

I am not sure what this is supposed to act like once the Periodic Option is enabled but on my machines once they are restarted that option is no longer enabled.

Reply | Quote

Well this is very interesting. I read the linked articles from another site and followed even more links within those articles. What I came up with was that Malwarebytes does not play nice with Windows Defender if both are using Real Time Protection. That was already mentioned here. It mentioned trying to use exclusions if you wanted to try that. I do not want both to run Real Time Protection. I only wanted to be able to enable Periodic Scanning in Windows Defender. Articles I have read suggest I should be able to do that. I can enable it but after a reboot, it is again disabled.

 

I just got off the phone with a support technician from Malwarebytes. He was very difficult to understand but he said that if I am using Malwarebytes I cannot use Periodic Scanning in Windows Defender. I have not found anything on the WEB that confirms what he said; I even asked him for links and he said there are none. I have found articles saying I should be able to enable that Periodic Scanning but it doesn’t work.

If I do this, “In Malwarebytes, open Settings, click the “Security” tab, and disable the “Always register Malwarebytes in the Windows Security Center” option.” then I have to disable Real Time Protection in one of the programs. This sure is different protection than I thought I had for the last 4 years or so.

Reply | Quote

[dmt_3904]

I run Malwarebytes premium with Defender. I have disabled this:  In Malwarebytes, open Settings, click the “Security” tab, and disable the “Always register Malwarebytes in the Windows Security Center” option.  Real-time protection is set in both.

I think it is working properly  – Defender runs periodic scans and I scheduled MBAM scan to run daily.  I will have to check into it more, but I see the scans running.  What other articles were you reading on this?

I think this article explains it a bit although it is a year old https://forums.malwarebytes.com/topic/256296-malwarebytes-and-windows-defender/

• This reply was modified 4 years, 3 months ago by dmt_3904.
• This reply was modified 4 years, 3 months ago by dmt_3904.

Reply | Quote

I’ve been running Malwarebytes Premium for years, since long before they changed to a subscription model.  I have a lifetime (never expires) license, and Malwarebytes Premium receives regular updates.  I’m now on version 4.3.0.98, and the last signature update was today, 1/30/21 at 2:08 PM.  It has real-time protection enabled for web protection, malware protection, ransomware protection and exploit protection, and runs an automatic scan daily.  It is not registered in the Windows Security Center.

I’m also running Windows Defender, updated automatically, real-time protection active.  I began running Malwarebytes Premium concurrently with Microsoft Security Essentials in Windows 7 Pro, and when I upgraded (not a clean install) to Windows 10 I didn’t change a thing.  It has been my experience these last several years that Malwarebytes Premium (lifetime license edition) and Windows Defender play quite well together.  They both run scans automatically, they both provide active protection, and I’ve never had them get in each other’s way.

YMMV

Always create a fresh drive image before making system changes/Windows updates; you may need to start over!

We all have our own reasons for doing the things that we do with our systems; we don't need anyone's approval, and we don't all have to do the same things.

We were all once "Average Users".

Computer Specs

1 user thanked author for this post.

dmt_3904

Reply | Quote

bbearren wrote:

I have a lifetime (never expires) license, and Malwarebytes Premium receives regular updates.

I have to say you should feel lucky. I had, at one time, a lifetime subscription and somehow it expired. I talked to Malwarebytes (or somebody) on the phone when I ordered a replacement edition and was told they no longer offer a lifetime version. I even had to allow them to do something out of the ordinary this past year for me to add 2 years to my subscription because they didn’t advertise multi-year subscriptions on line.

Reply | Quote