1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Windows Defender v.s. Microsoft Security Essentials

Discussion in 'Security and Privacy' started by Christer, 2017/07/19.

  1. 2017/07/19
    Christer

    Christer Geek Member Staff Thread Starter

    Joined:
    2002/12/17
    Messages:
    6,585
    Likes Received:
    74
    Hello all,

    I have a LapTop running Windows 10 Home, using Windows Defender. When I start the computer, WD checks for updates even if only a few hours have passed since the previous shutdown. (It seems like Windows Update also checks for updates on each start. The current time stamp is 12:49 compared to 12:50 for WD and the last shutdown was ~2 hours earlier.)

    I have a DeskTop running Windows 7 Professional, using Microsoft Security Essentials. When I start the computer, MSE checks for updates only if more than 24 hours have passed since the previous shutdown. 23 hours and 59 minutes doesn't trigger a check. (Windows Update checks more often and may offer updates to MSE but no automatic download and installation.)

    There is no setting for this in neither WD nor MSE but I read about a regedit in some complicated way to get MSE to update more frequently.

    I also read somewhere that MSE is cloudbased and doesn't need more frequent updates but if that's true, why isn't it true for WD?
     
  2. 2017/07/19
    rsinfo

    rsinfo SuperGeek Alumni

    Joined:
    2005/12/25
    Messages:
    4,076
    Likes Received:
    178
    WD is Win10 version of MSE. So whatever MSE could do, WD can also do.

    MS has most probably decreased the update interval to counter the new threats & to bring it par with other anti virus which get updated multiple times in a day.
     

  3. to hide this advert.

  4. 2017/07/19
    Christer

    Christer Geek Member Staff Thread Starter

    Joined:
    2002/12/17
    Messages:
    6,585
    Likes Received:
    74
    I understand that WD, compared to MSE, is more "integrated" with the OS and updating WD is possibly managed by Windows Update. The question is why MSE is not since the "cloudbased and doesn't need more frequent updates" is not totally true. When not online, the sky is cloud free ... :rolleyes: ... and if you use a borrowed USB-stick, your system may be less protected with an outdated local database.
     
  5. 2017/07/19
    rsinfo

    rsinfo SuperGeek Alumni

    Joined:
    2005/12/25
    Messages:
    4,076
    Likes Received:
    178
    Well Christer that question, like thousands of others, can only be answered by MS and not by minions like us :).

    I use Panda Free antivirus. Though Panda says that it's "cloud" based, it also keeps on updating its databases. I think cloud is used to offload the not so common viruses to cloud database & the common one's are downloaded. I may be wrong & would be glad to be corrected and informed by others.
     
  6. 2017/07/19
    Bill

    Bill SuperGeek WindowsBBS Team Member

    Joined:
    2002/01/11
    Messages:
    3,369
    Likes Received:
    411
    I think you are confused. Neither MSE or WD are "cloudbased". Cloudbased is just another misused/abused marketing term. The main "engine" for the programs are installed on and run on our computers. They may use some information stored on centrally located services (ie, the "cloud") for updates but they are not cloudbased. The scanning engines are on our systems and both programs use, among other methods, signature/definition files that are regularly updated, downloaded and installed on the local computers.

    Windows Defender also utilizes "behavior analysis" to look for "suspicious" behavior. So, for example, if WD sees some brand new code it does not recognize that looks "funny" (a highly technical term, BTW ;)), it may block that code from executing and then query Microsoft severs (the cloud) to see if it has been addressed but not yet distributed in a new signature/definition file.

    Note in Windows Defender it is called "cloud-delivered" protection, not "cloudbased" protection.

    MSE is not integrated into W7 because that would require totally re-coding W7. And that makes no sense since W7 is already out of mainstream support.

    The "new" Windows Defender is an updated version of MSE, a full anti-malware solution that is integrated into W8 and W10 and should not be confused with the "old" Windows Defender that runs only on W7 and is an anti-spyware program only. Two totally different programs with the same name - yet another example of Microsoft's misguided (IMO) and confusing naming conventions. :(

    I have no clue what that means. Again, neither MSE or WD are cloudbased and regardless, that has nothing to do with the need for more (or less) frequent updates. The need for updates is based solely on the number of newly released threats out in "the wild".
    I don't understand your point here either. It is your responsibility to ensure any scanner on a USB stick is the most current - regardless the scanning program used.
     
    Bill,
    #5
    Steve R Jones likes this.
  7. 2017/07/19
    retiredlearner

    retiredlearner SuperGeek WindowsBBS Team Member

    Joined:
    2004/06/25
    Messages:
    7,209
    Likes Received:
    514
     
  8. 2017/07/20
    Christer

    Christer Geek Member Staff Thread Starter

    Joined:
    2002/12/17
    Messages:
    6,585
    Likes Received:
    74
    I used Comodo Internet Security until I had to restore (using Image for Linux) my LapTop. (No viral infection but Firefox crashed and was impossible to fix or even uninstall.) After the restore, since some people claim that Windows Defender (WD) is as good as the competition, I decided to try it. That's why I have noticed differences between WD and Microsoft Security Essentials (MSE) which I use on my DeskTop.

    I have tried to find the article that discussed why MSE doesn't download updates as frequently as expected. I didn't find it but it said that only a proportion of the database gets downloaded to the local computers, most of it is "in the cloud". They didn't say that the engine was "in the cloud", only most of the database.

    Well, english isn't my first language ... o_O ... but I do the best I can. What I mean is why updating MSE is not managed by Windows Update like updating WD seems to be (another assumption on my part)? I have set Windows Update (WU) to notify and get prompted to let WU download the updates to MSE but it doesn't happen automatically.

    Have I finally found a benefit to Windows 10 forcing all updates onto the users ... :) ... ?

    That was based on my assumption that most of the database is cloudbased. If I work on a computer that hasn't been automatically updated for over 24 hours and not having the complete database "on board", if I disconnect from the internet and use a borrowed USB-stick, then there's a risk of infection and scanning the stick with an "outdated" and "incomplete" database wouldn't make it 100% safe.

    Since I misunderstood the meaning of "cloudbased", most of my questions and thoughts are irrelevant but the one that remains is why the update intervals/behaviour differ between WD and MSE?

    I never keep my computers runnig 24/7 and don't know if MSE ever downloads updates with a certain interval. I only know that after a shutdown and restart, MSE doesn't search for update unless 24 hours have passed since the last check. (Of course, I can initiate a search for updates manually but shouldn't have to.)
     
  9. 2017/07/20
    Christer

    Christer Geek Member Staff Thread Starter

    Joined:
    2002/12/17
    Messages:
    6,585
    Likes Received:
    74
    retiredlearner,

    I found no way to make a quote from your post but I agree with what you say, especially: "It is not a 'resource hog' that some 3rd. party AV's were renowned for."
     
  10. 2017/07/20
    Bill

    Bill SuperGeek WindowsBBS Team Member

    Joined:
    2002/01/11
    Messages:
    3,369
    Likes Received:
    411
    Now I understand your question. The answer is rather simple, with several reasons. MSE is a stand-alone product (not integrated with Windows). In terms of updating, it is more like Comodo or AVG which require their own updating process too. So MSE does not update via WU because it was designed with its own update process. This might have been due in part because too many users disabled Windows Update and Microsoft, not wanting to be blamed - again - for poor user discipline when it comes to keeping Windows updated, decided keeping it a separate update process was better.

    The greater reason, however, is probably because MSE came out 8 years ago and its initial versions were designed to run on XP too - which did not have Windows Update.

    Today, however, Windows Update is a fixture in W8/W10 and is a much more refined, stable, and robust process. Except in large corporate/enterprise networks, there is no good/valid reason for users to disable Windows Update. Problems with it really are very few and far between, though GREATLY EXAGGERATED WAY OUT OF PROPORTION by sensationalized headlines from wannabe journalists in the IT Press, bloggers, and, of course, Microsoft bashers posting in forums. :(

    You did not misunderstand the meaning of cloudbased. You just misunderstood how WD uses the cloud. It is not "based" in the cloud. It just uses the cloud to expedite updates.
     
    Bill,
    #9
  11. 2017/07/20
    Christer

    Christer Geek Member Staff Thread Starter

    Joined:
    2002/12/17
    Messages:
    6,585
    Likes Received:
    74
    Surely Windows XP had Windows Update! It had several cathegories, just like Windows 7 but the structure was different.

    I have been running Windows Update set to "notify but not download anything until I choose to do so" on XP as well as on W7. I don't have that option on W10 and I think that's the reason for the difference. Had I been running Windows Update on W7 in "automatic", then MSE would get the updates automatically, just like WD on W10. I will TEMPORARILY change the setting to find out if my assumption is right.

    In the user interface of MSE and of WD there is a possibility to get definition updates and I believe also through Windows Update on both OS. On W10 it isn't possible to tell from which the updates get downloaded and installed.
     
  12. 2017/07/20
    Bill

    Bill SuperGeek WindowsBBS Team Member

    Joined:
    2002/01/11
    Messages:
    3,369
    Likes Received:
    411
    I think it was called Microsoft Update and pretty sure it too was a manual process.
    You may have to change the setting to allow WU to update "Other Microsoft programs" (or some similar wording) too.
    I don't see the need. I am not smart enough to pick and choose wisely which updates for WD I need. Since I know Microsoft does not want my Windows to get infected, I am going to assume I need them all.

    BTW, when W7 came out in 2009 and I migrated all my systems to W7, I stuck with the default settings and let WU do its thing automatically. It never broke any of my systems. At worse, a simple reboot cleared any problems.
     
  13. 2017/07/20
    Christer

    Christer Geek Member Staff Thread Starter

    Joined:
    2002/12/17
    Messages:
    6,585
    Likes Received:
    74
    You misunderstood, what I mean is that I have no way of telling whether the update was done through Windows Update or through Windows Defender itself. I didn't want to choose which definition updates I want to install.
     
  14. 2017/07/20
    Bill

    Bill SuperGeek WindowsBBS Team Member

    Joined:
    2002/01/11
    Messages:
    3,369
    Likes Received:
    411
    Oh, I see. Well, the answer is both, kinda sort.

    WD uses WU to keep itself current. But if you look through WU "Update history", you won't see any WD updates listed.
     
  15. 2017/07/20
    Christer

    Christer Geek Member Staff Thread Starter

    Joined:
    2002/12/17
    Messages:
    6,585
    Likes Received:
    74
    Correct, no updates listed in the update history on W10 for WD but on W7 for MSE there are several even though all of them have been downloaded and installed through MSE itself. I am sure (?) of that because on W7, the updates for MSE are among the optional updates and I have never checked the box to get any of them.

    Even after changing the settings by choosing "automatic" and check the box to "include recommended updates", I still had to choose the one for MSE manually. We'll find out in a day or two how it behaves.
     
  16. 2017/07/21
    Bill

    Bill SuperGeek WindowsBBS Team Member

    Joined:
    2002/01/11
    Messages:
    3,369
    Likes Received:
    411
    Correct because MSE is a stand-alone product.

    WD is not simply a re-branded MSE. While much of the core malware and malicious behavior detection coding is the same, everything else about the two programs are significantly different. I feel you believe they should work the exact same way. They don't. But that should not be seen as a problem because MSE is phasing out along with W7. WD is the new way of doing things.

    The thing to focus on is, are you being protected? And the answer is yes.
     
  17. 2017/07/21
    Christer

    Christer Geek Member Staff Thread Starter

    Joined:
    2002/12/17
    Messages:
    6,585
    Likes Received:
    74
    Checking the "about" tab in both, it's easy to get the impression that they are basically the same. See the attached screenshots. The "definitions" obviously differ since the two weren't udpated at exactly the same time but other than that, the client version (user interface?) differ, the rest is the same.

    MSE.jpg WD.jpg

    And yes ... :cool: ... I feel secure!
     
  18. 2017/07/21
    Bill

    Bill SuperGeek WindowsBBS Team Member

    Joined:
    2002/01/11
    Messages:
    3,369
    Likes Received:
    411
    You are right and I should not have said "everything else about the two programs are significantly different." They are more alike than different. But they still differ in significant ways, even if they don't "look" it. And while I think everyone should be up to W10 and WD, I still recommend MSE for W7 users without hesitation.
    And by keeping all current and by not being "click-happy" on unsolicited links, downloads, attachments, and popups, I am sure your system is secure. :)
     
  19. 2017/07/22
    Christer

    Christer Geek Member Staff Thread Starter

    Joined:
    2002/12/17
    Messages:
    6,585
    Likes Received:
    74
    Well, I had been away all day and returned home late this afternoon. The last run of MSE was at 9 PM last night, at which time it was updated. I didn't expect it to check for updates since less than 24 hours had passed and that was according to plan to find out what Windows Update (Windows 7) would acchieve. It listed an optional update for MSE but even though every box had been ticked to make it automatic, it didn't install. I had to manually tick the box next to the update and click install.

    At the same time, I started the LapTop and the corresponding update to WD installed automatically, either through Windows Update (Windows 10) or by the update function in WD itself. (It's impossible to tell which unless I find and dig through a number of logfiles.)

    The simple solution may be to elevate the "optional" status of the update to MSE to the "important" status but ... :confused: ... maybe not.
     
  20. 2017/07/22
    Bill

    Bill SuperGeek WindowsBBS Team Member

    Joined:
    2002/01/11
    Messages:
    3,369
    Likes Received:
    411
    Solution? I guess I have to wonder, what is the "problem" you are seeing that needs fixing?
     
  21. 2017/07/22
    Christer

    Christer Geek Member Staff Thread Starter

    Joined:
    2002/12/17
    Messages:
    6,585
    Likes Received:
    74
    I'm sorry to ask but isn't it obvious? WD on W10 gets updates almost as and when they are released. MSE on W7 does not, no matter what setting I use to "leave it to Windows 7 to manage the updates automatically, the same way as in Windows 10" (like you among others recommend). I have to do it manually or have it done "automatically" with 24+ hours delay in some cases, depending on when my computer was last updated and restarted. That delay is a problem and the question is why do WD and MSE differ? (As I mentioned earlier, I never leave my computers running 24/7 and don't know how MSE manages the updates under those conditions.)
     

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.