Windows 10: Windows 10's built-in antivirus can now be used to download viruses

Spartan · Sep 6, 2020

Windows 10's built-in antivirus can now be used to download viruses | PC Gamer

A recent update to the built-in antivirus software in Windows 10 has taught the program a new trickhow to download files through a command line tool, including nefarious ones (trojans, spyware, ransomware, and other malware).

Downloading malware is not the intended purpose, at least I presume that's not the case. But the new function could potentially be abused in such a manner. Fortunately, this is not something the typical home user needs to worry about, not unless they're a PC masochist (more on that in a moment).

Mohammad Askar (via Bleeping Computer), a security penetration tester and instructor who has posted hundreds of security articles, according to his Udemy profile.
Click to expand...

"Well, you can download a file from the internet using Windows Defender itself. In this example, I was able to download Cobalt Strike beacon using the binary 'MpCmdRun.exe' which is the 'Microsoft Malware Protection Command Line'," Askar stated on Twitter.

This effectively allows a local attacker to leverage Defender as what is called a living-off-the-land binary (LOLBin). That's when legitimate software is used for something maliciousin this case, using an antivirus program to download a virus.
Click to expand...

- - - Updated - - -

Let alone the fact that it's one of the heaviest AVs out there but the Windows Defender fanboys still want to convince themselves that it's light because they never saw how their system could be without it.

- - - Updated - - -

A post from Wilders Security:

I experienced something similar two days ago: uploading files to Google Drive, downloading files using a DL manager, copying videos across two sets of hard drives, and browsing some sites. The system began to slow down and the browser froze as the anti-malware program began to take up 100 percent of the network according to the task manager. I can't remember experiencing similar when I used KSC.
Click to expand...

Also, tests like those depicted in videos like this one might help:

"Is Windows Defender slowing down your computer?"

https://youtu.be/LTE9s_34NxY

"Is Windows Defender actually heavier than other Antivirus?"

https://youtu.be/4UhUZCZMJHg

:)
Click to expand...

EastCoasthandle · Sep 6, 2020

Question on viruses and documents

Once the virus is removed just use a reputable antivirus program like AVG. I suggest AVG because it does check usb devices for viruses automatically once you stick the usb drive into the usb port.

Ubersonic · Sep 6, 2020

Antivirus tools are a useless box-ticking exercise says Google security chap

Haven't used standalone antivirus in about 14 years, I make a point of not downloading viruses from dodgy sites instead. Plus Windows has had decent AV built in now anyway.

Fahadking07 · Sep 6, 2020

List of Anti-Viruses working in Windows 10 TP

Hello guys,

Recently, I saw many people asking about the working anti-viruses for Windows 10 Technical Preview, so I decided to create a thread and share the information. Because Sharing is Caring!
Here is list of some anti-viruses which are tested and found working on Windows 10 Technical Preview. [Note: Some of them might lack in their features]

Bitdefender antivirus free edition

Mcafee Antivirus Free

Avira Antivirus Free

ESET Smart Security

Avast 15

Webroot Secure Anywhere Endpoint Protection

AVG Antivirus Free | Might work

If you know any, feel free to share with us. I will update this thread.

-

Windows 10: Windows 10's built-in antivirus can now be used to download viruses

Windows 10's built-in antivirus can now be used to download viruses

Windows 10's built-in antivirus can now be used to download viruses

Windows 10's built-in antivirus can now be used to download viruses

Windows 10's built-in antivirus can now be used to download viruses - Similar Threads - 10's built antivirus

Windows 10 S antivirus

Windows s mode antivirus

using additional virus protection with s mode

S mode and antivirus

Can you download and use Zoom with Window 10 S mode?

Emsisoft antivirus caught the 10 virus

Windows Defender Antivirus can now run in a sandbox in Windows 10

Had malware virus infection, now I'm a Built-in Administrator(?)

'Windows 10 S' is now 'Windows 10 Now with S Mode'