Windows Defender In Win 10 Concern

[WShlewton]

Windows Defender Concern

 

After reading Susan Bradley’s article in the AskWoody Plus Newsletter I just got today I checked my version of Windows Defender and will attach what I found. I am not at all certain if I am protected with the latest version. I see too may versions listed at 0.0.0.0. Susan mentioned “version of the Engine you have installed.” She says it should be “Version 1.1.17700.4 “ or higher. I see 0.0.0.0 beside Engine version. So if I am not protected can I force a Windows Defender update? I have not found a way to do that.  By the way I see the same thing on all 5 of my computers.

 

Wow! Even more Office updates!

By Susan Bradley

• Office 2010 receives more updates this month
• Windows Defender had a zero day that silently was patched
• Security update for Secure Boot DBX can be skipped (KB 4535680)
• I’m giving the all-clear for Windows 10 2004

 

 

 

 

Defender zero day

Microsoft has silently patched a remote code exploit Zero day in the Malware Protection Engine component (mpengine.dll) better known to you and me as Windows Defender antivirus. As long as you have Version 1.1.17700.4 or higher installed, you are already protected. To determine what version you have, click on the search box in the left corner of your computer and type in Windows security. Open the Blue Windows security app, and in the bottom-left corner, click on the gear icon. Now click on About and check what version of the Engine you have installed.

For those customers at risk, Microsoft will have silently updated your Engine version in the background. I’m personally a fan of Windows Defender, especially when running the latest Windows 10 feature release. Running a third-party antivirus software program is problematic if you are on the latest feature releases and especially if you are running an insider version. It’s even more problematic if you run more than one antivirus and registry cleaner program on Windows 10. If you are going to use either of these programs, make sure your security software is compatible before installing a feature release version.

Attachments:

You must be logged in to access attached files.

Reply | Quote

[bbotz]

Ditto here… in fact, the only version number is the first one. All of the other three are 0’s. Could it be because I’m running MalwareBytes along with Windows Defender???

Reply | Quote

[WShlewton]

I don’t know but I too am running Malwarebytes.

Reply | Quote

[PFC]

are you getting security updates?
I’m not running 3rd party av

• This reply was modified 1 month, 2 weeks ago by PFC.

Attachments:

You must be logged in to access attached files.

Reply | Quote

[WShlewton]

PFC wrote:

are you getting security updates?
I’m not running 3rd party av

• This reply was modified 1 month, 2 weeks ago by PFC.

Yep I get them all the time once AskWoody Plus Newsletter tells us it is safe to download them.

Reply | Quote

[PFC]

I can’t speak to what Malwarebytes may be doing to you but
a review of how you’re pausing updates may be needed.
I have win 10 pro and have gpedit notification 2 on and that
intercepts any Quality Updates until I download and install them,
but my Definition updates come through daily (sometimes twice daily).

Reply | Quote

[Paul T]

Check what AV you are running, details here.
If you are not running Defender then you don’t need the update.

cheers, Paul

Reply | Quote

[WShlewton]

Paul T wrote:

Check what AV you are running, details here.
If you are not running Defender then you don’t need the update.

cheers, Paul

I’m more confused now than before. I have the Windows Defender icon showing in the systray. I see the same thing following your link as I do when I click on that icon to open it. I assume that means, as I have always believed, that I am using Windows Defender. I had a need a while ago to remove Malawarebytes to solve a problem. While it was uninstalled I was still running Windows Defender if I can believe the systray.

 

So the question again is, how do I force an update to Windows Defender since I do not see the Engine version equal to or greater than Susan says it needs to be.

Reply | Quote

[WShlewton]

PFC wrote:

I can’t speak to what Malwarebytes may be doing to you but
a review of how you’re pausing updates may be needed.
I have win 10 pro and have gpedit notification 2 on and that
intercepts any Quality Updates until I download and install them,
but my Definition updates come through daily (sometimes twice daily).

Sorry I missed this earlier. I just turned the pause off and recently let Win 10, Office, etc., do their updates. Still I see what I posted above and not at all sure what it means.

Reply | Quote

[Susan Bradley]

It means that Malwarebytes (or another third party security software) is handling your antivirus duties and Defender is not enabled. It’s perfectly normal with third party antivirus being installed.

Susan Bradley Patch Lady

Reply | Quote

[joep517]

That would be for Malwarebytes Pro not the free version.

--Joe

Reply | Quote

[b]

Can you update manually at Windows Security, Virus & threat protection, … updates, Check for updates?

Reply | Quote

[WShlewton]

Susan Bradley wrote:

It means that Malwarebytes (or another third party security software) is handling your antivirus duties and Defender is not enabled. It’s perfectly normal with third party antivirus being installed.

Thank you.

Reply | Quote

[WShlewton]

Susan Bradley wrote:

It means that Malwarebytes (or another third party security software) is handling your antivirus duties and Defender is not enabled. It’s perfectly normal with third party antivirus being installed.

I always thought I had protection from both Windows Defender and Malawarebytes. In any case I turned of Malawarebytes’ real time protection and found out I do, in fact, have the version you mentioned, 1.1.17700.4. installed. So I guess all is well.

Reply | Quote

[Alex5723]

Never run 2 a/v apps with real-time protection.

Reply | Quote

[b]

Alex5723 wrote:

Never run 2 a/v apps with real-time protection.

Is that even possible when one is Microsoft Defender in Windows 10 Security?

If another antivirus product is installed and working correctly, Microsoft Defender Antivirus will disable itself. The Windows Security app will change the Virus & threat protection section to show status about the AV product, and provide a link to the product’s configuration options.

https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-antivirus/limited-periodic-scanning-microsoft-defender-antivirus#:~:text=If%20another%20antivirus%20product%20is%20installed%20and%20working%20correctly,%20Microsoft%20Defender%20Antivirus%20will%20disable%20itself.

 

WShlewton wrote:

I always thought I had protection from both Windows Defender and Malawarebytes.

You can enable periodic scanning with Windows Defender, but no real-time protection:

How to enable limited periodic scanning

Reply | Quote

[WShlewton]

b wrote:

Alex5723 wrote:

Never run 2 a/v apps with real-time protection.

Is that even possible when one is Microsoft Defender in Windows 10 Security?

If another antivirus product is installed and working correctly, Microsoft Defender Antivirus will disable itself. The Windows Security app will change the Virus & threat protection section to show status about the AV product, and provide a link to the product’s configuration options.

https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-antivirus/limited-periodic-scanning-microsoft-defender-antivirus#:~:text=If%20another%20antivirus%20product%20is%20installed%20and%20working%20correctly,%20Microsoft%20Defender%20Antivirus%20will%20disable%20itself.

 

WShlewton wrote:

I always thought I had protection from both Windows Defender and Malawarebytes.

You can enable periodic scanning with Windows Defender, but no real-time protection:

How to enable limited periodic scanning

Thank you. I am going to have to check that link out.

Reply | Quote

[Paul T]

Please quote just the section you need in replies.
Highlight the section you are replying to, click Quote.

cheers, Paul

Reply | Quote

[Amy Babinchak]

This could be the case if you are running a third party anti-virus or anti-malware solution. The presence of those applications disables Defender functionality.

Reply | Quote

[WShlewton]

b wrote:

You can enable periodic scanning with Windows Defender, but no real-time protection: How to enable limited periodic scanning

Thank you. I just did that on all my computers. I guess it doesn’t allow you to pick how long in between periodic scanning, at least I saw no option. However, when I went back to see if I had missed that setting Windows Defender showed it had made a Quick scan today. Another had me take actions on the threats it found. Glad I have it periodically scanning.

Reply | Quote

[WShlewton]

b wrote:

You can enable periodic scanning with Windows Defender, but no real-time protection: How to enable limited periodic scanning

I am not sure what this is supposed to act like once the Periodic Option is enabled but on my machines once they are restarted that option is no longer enabled.

Reply | Quote

[WShlewton]

Well this is very interesting. I read the linked articles from another site and followed even more links within those articles. What I came up with was that Malwarebytes does not play nice with Windows Defender if both are using Real Time Protection. That was already mentioned here. It mentioned trying to use exclusions if you wanted to try that. I do not want both to run Real Time Protection. I only wanted to be able to enable Periodic Scanning in Windows Defender. Articles I have read suggest I should be able to do that. I can enable it but after a reboot, it is again disabled.

 

I just got off the phone with a support technician from Malwarebytes. He was very difficult to understand but he said that if I am using Malwarebytes I cannot use Periodic Scanning in Windows Defender. I have not found anything on the WEB that confirms what he said; I even asked him for links and he said there are none. I have found articles saying I should be able to enable that Periodic Scanning but it doesn’t work.

If I do this, “In Malwarebytes, open Settings, click the “Security” tab, and disable the “Always register Malwarebytes in the Windows Security Center” option.” then I have to disable Real Time Protection in one of the programs. This sure is different protection than I thought I had for the last 4 years or so.

Reply | Quote

[dmt_3904]

I run Malwarebytes premium with Defender. I have disabled this:  In Malwarebytes, open Settings, click the “Security” tab, and disable the “Always register Malwarebytes in the Windows Security Center” option.  Real-time protection is set in both.

I think it is working properly  – Defender runs periodic scans and I scheduled MBAM scan to run daily.  I will have to check into it more, but I see the scans running.  What other articles were you reading on this?

I think this article explains it a bit although it is a year old https://forums.malwarebytes.com/topic/256296-malwarebytes-and-windows-defender/

• This reply was modified 1 month ago by dmt_3904.
• This reply was modified 1 month ago by dmt_3904.

Reply | Quote

[bbearren]

I’ve been running Malwarebytes Premium for years, since long before they changed to a subscription model.  I have a lifetime (never expires) license, and Malwarebytes Premium receives regular updates.  I’m now on version 4.3.0.98, and the last signature update was today, 1/30/21 at 2:08 PM.  It has real-time protection enabled for web protection, malware protection, ransomware protection and exploit protection, and runs an automatic scan daily.  It is not registered in the Windows Security Center.

I’m also running Windows Defender, updated automatically, real-time protection active.  I began running Malwarebytes Premium concurrently with Microsoft Security Essentials in Windows 7 Pro, and when I upgraded (not a clean install) to Windows 10 I didn’t change a thing.  It has been my experience these last several years that Malwarebytes Premium (lifetime license edition) and Windows Defender play quite well together.  They both run scans automatically, they both provide active protection, and I’ve never had them get in each other’s way.

YMMV

Create a fresh drive image before making system changes/Windows updates, in case you need to start over!

"When you're troubleshooting, start with the simple and proceed to the complex."—M.O. Johns

"Experience is what you get when you're looking for something else."—Sir Thomas Robert Deware

Computer Specs

1 user thanked author for this post.

dmt_3904

Reply | Quote

[WShlewton]

bbearren wrote:

I have a lifetime (never expires) license, and Malwarebytes Premium receives regular updates.

I have to say you should feel lucky. I had, at one time, a lifetime subscription and somehow it expired. I talked to Malwarebytes (or somebody) on the phone when I ordered a replacement edition and was told they no longer offer a lifetime version. I even had to allow them to do something out of the ordinary this past year for me to add 2 years to my subscription because they didn’t advertise multi-year subscriptions on line.

Reply | Quote

[Author]

Posts