Windows 10: Full scans using \Program Files\Windows Defender\MpCmdRun

When running a full file scan using \Program Files\Windows Defender\MpCmdRun, which Platform package is used? Does it automatically select the latest version of the package?If I use the more complicated arrangement of\Program Data\Microsoft\Windows Defender\Platform I'm required to manually select the "newest" platform package. For example, today I see 4.8.2205.7-0 from June 26 and 4.18.2207.7-0 from September 7, so I select 4.18.2207.7, the new one.While it allows me to select the newest platform package, I'm pretty much stuck manually looking up the current package and manually entering it i

:)

 

MpCmdRun killing my internet connection after installing creators update

Hi Brian,

The MpCmdRun.exe is associated with the Windows Defender program and is located in
C:\Program Files\Windows Defender. There are malicious programs that uses the same name so you won't suspect that it is malware. To check if this process is a malicious program, you can follow these steps:

• Right-click Start and select Task Manager.
• Under the Process tab, locate the MpCmdRun.
• Right-click MpCmdRun and select Open file location.

If the location is C:\Program Files\Windows Defender, then the system is safe and secure. If the location is elsewhere then we suggest that you run a virus and malware scan on your computer.

Let us know if you have any other questions.

 

MpCmdRun file "SpyNetService -RestrictPrivileges -AccessKey..........

Hi,
[am using windows 8.1]
my laptop used to be continuously unable to update Defender after using the system restore [used restore to an earlier time to be able to update defender,as this proiblem occurs regardless] and then updating Defender,if i try again on another day i would get a message that defender wasnt allowed to update the virus signatures, have forgotten the "reason" in the msg.
Now, i am having a look at the "MpCmdRun" file that is in the windows/temp folder,as the laptop developed a problem at the same time as the windows defender problem above,where i am not able to delete certain files and folders in the windows/temp folder,such as the MpCmdRun files and the Crashpad folder with its files it contains,unless i take ownership of it [have to do this every time i want to delete these files].
I suspected malware.

And NOW there are entries in the MpCmdRun file:
"MpCmdRun: Command Line: "C:\Program Files\Windows Defender\MpCmdRun.exe" SpyNetService -RestrictPrivileges -AccessKey..............."

DO I HAVE SPYWARE ON MY LAPTOP?

HAVE MULTIPLE ENTRIES like the above as well as the below :
MpCmdRun: Command Line: "C:\Program Files\Windows Defender\MpCmdRun.exe" SignatureUpdate -ScheduleJob -RestrictPrivileges"

BUT now i am able to update defender,which i havent been able to do for a long time,unless i reformat the laptop or i use system restore ..........?!

Could anyone shed some light or have more info on this??

THANKS in advance

regards

 

right click scan in windows defender?


thanks for that.. i didn't notice the tutorial section :x

I did the suggested registry change and it's now listed on the desktop context menu.. but all this does is ask if I want to open it, update, or start a scan... I was hoping for the option where you right click a specific file and it will have listed 'scan with windows defender' like other antivirus programs have.. MSE had it. I'll keep looking around to see if I can find it in the meantime..