Understanding Windows Defender

Windows Defender, originally known as Windows AntiSpyware, is a software program from Microsoft that provides continuous protection against malware. (The term malware is short for malicious software. It includes any number of harmful programs that can infiltrate your computer through your connection to the Internet.) In addition to providing real-time protection, Windows Defender also lets you perform on-demand scanning and malware removal.

Like other anti-malware products, Windows Defender uses a database of definitions to detect malware. Unlike other products, though, these definitions are established and maintained through the use of a "voting network," which Microsoft describes as "a worldwide network of users who help discover and report new threats." Through the use of this model, "Microsoft analysts review these reports and develop new software definitions to guard against the new threats, so that everyone is better protected." If you wish, you can even apply to be part of the Microsoft "SpyNet" group of users.

By default, Windows Defender is continuously running on your computer and performing periodic scans to look for possibly infectious files. You may want to change how it's working, however, or even turn it off. To make changes to Windows Defender if you are using Windows 7, go to Start | Control Panel | Windows Defender. If you are using Windows 8, display the Search box by pressing Win+C to display the Charms area at the right of the screen and then click the Search tool. In the Search box type "defender" (without the quotes) and press Enter. Windows displays the Windows Defender dialog box. (See Figure 1.)

Figure 1. The Windows Defender dialog box.

From here, you can use the Scan menu to perform a Quick, Full, or Custom scan. You can also use the Tools menu to change options or deal with quarantined and allowed items. (Removing spyware using Windows Defender is covered under another tip.) If you ever want to review all the actions that have occurred through Windows Defender, click the History option.

If you are using Windows 10, type "defender" (without the quotes) in the Search box. Windows displays the Windows Security screen. (See Figure 2.)

Figure 2. The Windows Security screen.

There are seven protection areas that Windows Defender monitors:

• Virus & Threat Protection
• Account Protection
• Firewall & Network Protection
• App & Browser Control
• Device Security
• Device Performance & Health
• Family Options

If you click on the Open Windows Defender Security Center button, displays the Security at a Glance screen. Here you can see if any action is needed in any of the seven protection areas or specify how you want your device protected. (See Figure 3.)

Figure 3. The Security at a Glance screen.

Some of these areas display a status icon:

• A green checkmark icon means your device is sufficiently protected and there are no recommended actions.
• A yellow caution icon means there is a safety recommendation to be considered.
• A red warning icon means there is something that needs immediate attention.

You can click on any of the areas on this screen to get more information on a recommended action, see when the last scan was performed, the results of the scan, as well as make changes in specific settings unique to a particular protection area.

 This tip (12337) applies to Windows 7, 8, and 10.