Windows 10: Windows 10 1903: Windows Defender Antivirus gets Tamper Protection feature

Microsoft released a new preview build of the upcoming first feature update of 2019 for Windows 10; the new build, the last for this year according to Microsoft, introduced a number of interesting new features and changes to the operating system.

We covered Windows Sandbox, a new sandboxing feature, earlier today already. It is integrated in all Pro and Enterprise editions of Windows 10 and can be used without installation of virtual machine images or third-party software.

Another new security related feature protects Windows Defender Antivirus from tampering.

Tamper Protection




Tamper Protection's description provides some insight on what it does:

Prevents others from tampering with important security features.
​

The feature itself lacks additional information, but Microsoft revealed additional tidbits on the Windows Experience blog:

Tamper Protection is a new setting from Windows Defender Antivirus, available in the Windows Security app, which when on, provides additional protections against changes to key security features, including limiting changes which are not made directly through the Windows Security app.
​

Tamper Protection prevents certain changes to security features to avoid misuse. Malicious applications could change security settings but with tamper protection in place, these setting changes should be blocked by Tamper Protection.

Microsoft reveals little else: we know just one scenario where changes are blocked if Tamper Protection is enabled but there are more.

How to enable or disable Tamper Protection

1. Use the shortcut Windows-I to open the Settings application.
2. Go to Windows Security > Virus & Threat Protection > Virus & Threat Protection Settings > Manage Settings.
3. Toggle Tamper Protection on or off.

The feature was turned on in the Insider Build version of Windows 10 the feature launched in. It is likely that it will be enabled in the release version as well.

Disabling may be useful if you use third-party software such as Configure Defender which may be blocked from making changes to Windows Defender after you upgrade Windows 10 the 2019 feature update for Windows 10.

Closing Words


The lack of information makes it difficult to judge how effective the new protective feature is. It remains to be seen how effective the new protective feature is.

Tampering Protection did not prevent any of the changes that I made using Configure Defender.

Now You: Which security solution do you use on Windows? Does it have tamper protection?

Ghacks needs you. You can find out how to support us here or support the site directly by becoming a Patreon. Thank you for being a Ghacks reader. The post Windows 10 1903: Windows Defender Antivirus gets Tamper Protection feature appeared first on gHacks Technology News.

read more...

 

"Attestation" A new feature coming to Windows Defender in Windows 10

Tech Republic - Upcoming Windows Defender feature will tell you when security fails

This seems very promising. Microsoft is in the unique position to know what Windows should look like, even before Windows Update pushes out new changes. As long as MS can properly sync WD with WU changes AND this new features does not make any "noticeable" hit on system performance/resources, all without any false positives, this should be a big step forward for consumer security, and a blow to the bad guys - always a good thing.

Of course, there will likely be some hiccups the Windows/Microsoft/Windows Defender bashers will surely pounce on - regardless how extensive the Beta process is. But hopefully open and unbiased minds will prevail. After all, the goal is to stop the bad guys and if this gets us closer to that, that's a very good thing.

For more detailed information, see Introducing Windows Defender System Guard runtime attestation)

 

The State of Cryptocurrency

According to the reddit page i linked earlier, this is the solution:

• Disable Windows Real-Time Protection
• Disable Cloud-delivered protection
• Copy the .exe back over to the affected machine.
• Add the .exe to the windows 10 defender exclusion list
• Enable windows defender again to see if it would removed it again.
• Startup claymore again.

Here is how to add an exclusion:

https://support.microsoft.com/en-us...dd-an-exclusion-to-windows-defender-antivirus

 

Windows Defender Antivirus protection

In your previous threads you indicated you were using a third party antivirus program so I assume you are a "new" user of Windows Defender.

Any other security program installed?

https://support.microsoft.com/en-us...b59cebc4f24/how-to-protect-your-windows-10-pc
Note the statement "If you want to use Windows Defender Antivirus, uninstall all of your other antivirus programs and Windows Defender Antivirus will automatically turn on. You may be asked to restart your device.



Go to Security and Maintenance, look in 'Security' and see what program is listed under Virus Protection. Windows Defender will not be enabled and functioning properly if there is a program other than Windows Defender listed.

See the reply of quietman7 in this thread:windowsdefender wont turn on.

If the issue continues recommend you follow the steps in Problems
starting Windows Defender in Windows 8/8.1/10 to include (but not limited to) running SFC, scanning for malware with programs such as the Emsisoft Emergency Kit or Malwarebytes and running
the software removal tools for any security software (AVG, Kaspersky, McAfee, Norton, whatever) that may have previously been on the computer (to include a trial copy of McAfee or Norton or another program that may have been preinstalled on a new computer).
See List of
anti-malware product removal tools and be sure to restart the computer after running such tools.

You might also want to review How to Use the Built-in Windows Defender Antivirus on Windows 10 Good
article but ignore the ads!

If you cannot resolve these issues with Windows Defender please post back in this thread with further information.

Regards…

Top 10 Ways PUPs Sneak Onto Your Computer. And How To Avoid Them.