[SOLVED] How to modify Windows to not realise a third party AV is installed?

[Digerati]

The funny thing is I cannot blame "the uneducated" exclusively in this regard.

Its not funny at all. That's exactly why I said above, "if they know better".

I never suggested to directly "enforce" etiquette - but there is nothing wrong, IMO, for forum leaders to point out or remind users - especially new users - that there is such a thing. Most people want to fit in and do what's right. Therefore, I have found most people appreciate being informed of these things.

If they take offense, then that most likely is a clear indication of immaturity and/or rudeness. And then sterner "enforcement" may be necessary if it continues.

Just because forums like Sysnative are places where "the general public" can gather and share information, that IN NO WAY means they are free to do so anyway they please.

I even have a canned text for this. One part deals with "shotgun" or "cross platform" posting at multiple sites and forums. The below deals with follow-up posting, as seen here:

It is also considered poor forum etiquette to leave threads hanging. So when (if) the solution to your problem is found, be sure you revisit each site again and submit a follow-up post with your findings.

See the following for more 25 Forum Posting Etiquette Tips.

If a new person still does not comply, or they come in thinking they have the right to post, do and say whatever they want, then it is them being rude and inconsiderate. And, once informed and have been given a fair opportunity to comply, if they still refuse to comply, then punitive action to include being banned from that community is totally appropriate.

 

[britechguy]

See the following for more 25 Forum Posting Etiquette Tips.

If a new person still does not comply, or they come in thinking they have the right to post, do and say whatever they want, then it is them being rude and inconsiderate. And, once informed and have been given a fair opportunity to comply, if they still refuse to comply, then punitive action to include being banned from that community is totally appropriate.

An absolutely excellent resource, and one I shall be referring to in the future.

That list has absolutely stood the test of time, with a single exception: "9. Use plain text over HTML if you want your post to be readable by everyone." In 2021, I would offer the diametrically opposed advice, since HTML format is almost universal, and you lose a lot of "easy content options" like click-through text links rather than naked URLs if you stick to using plain text.

I'd also say her final admonition has limits, and you've outlined them quite well. If a newbie arrives and is, on first post, violating multiple rules on her list, the first thing I'd be doing is chastising them in no uncertain terms.

 

[Digerati]

Yeah, the plain text vs HTML comment is a bit outdated. But then again, there are still users on metered connections so for them, plain text may be better.

Perhaps saying to avoid, or at least "use sparingly" BB code instead of HTML would be better. I note when I copy and paste into forum posts, I always select the option to "Paste as plain text". Then I will add BB code back in to suit my intentions. Otherwise, you may end up with HUGE or tiny text in all sorts of strange fonts and colors that detract rather than add clarifying emphasis.

 

[axe0]

And that's a good thing. It suggests your primary solution (or you, the user and ALWAYS weakest link in security) didn't let something slip by.

While that is true, I have not seen anything indicating any actual scans have been run by Defender in the past years, not even a notification or something that a scan was run. Though, thinking about it, if I were to see a notification from Defender that a scan was run and nothing was detected, I would probably just view it as Defender "uselessly" informing me of something I already knew and wonder why it informed me of the result of a scan as I would not remember having requested a scan. Maybe Microsoft did a good job here and will only show something when Defender has detected a potential threat, which hopefully is never.

 

[Digerati]

I have not seen anything indicating any actual scans have been run by Defender in the past years, not even a notification or something that a scan was run.

Ummm, have you looked?

This is what I just found in Windows Security on this system:



When I look on my other computers here, I see similar reports on various days, through last Friday - indicating automatic scans were performed on each within the last week.

Though, thinking about it, if I were to see a notification from Defender that a scan was run and nothing was detected, I would probably just view it as Defender "uselessly" informing me of something I already knew and wonder why it informed me of the result of a scan as I would not remember having requested a scan.

I also run Malwarebytes Premium on 2 of those system and I do get a popup everyday around noon telling me nothing was found. And I agree with you - when I am busy, I find that notice annoying, or at least momentarily distracting, even though it will automatically go away after about 5 or so seconds.

 

[Digerati]

Your reply got me looking. I found a setting in Malwarebytes to only yell at me if threats are detected. I guess I will see (or hopefully not see) if it worked tomorrow.

 

[Will]

Your reply got me looking. I found a setting in Malwarebytes to only yell at me if threats are detected. I guess I will see (or hopefully not see) if it worked tomorrow.

I have also now disabled this. I guess it never bothered me enough to look for the setting, but getting those popups at inconvenient times was sure annoying.

 

[axe0]

Ummm, have you looked?

This is what I just found in Windows Security on this system

Short answer: no.


Long answer, I didn't check because I forgot it was there and overlooked it when looking for this option to periodically have Defender scan. I guess that happens when you don't use the built-in security.

 

[Digerati]

I guess that happens when you don't use the built-in security.

Ummm, no. It happens if you (you, as in people in general) simply don't look. And IMO, that's okay. We don't need to.

I used to check regularly way back when I first started using Defender with W8. But after checking I don't know how many times and seeing every time that it had scanned in the last few days (and found nothing malicious), I stopped checking and simply assumed it had recently scanned.

Now to that, I generally don't like to assume as that has bitten me in the a$$ too many times in the past. But I have no problem assuming, in this case, for several reasons.

In no particular order:

First - supplemental scans (either automatic with Premium or manual with Free) with my secondary scanner, Malwarebytes has revealed that neither Defender nor me ever, as in never-ever let anything malicious come through. Worst case was Malwarebytes tagged a couple "wanted" potentially unwanted programs (PUPs) that I intentionally downloaded and installed and knew were safe.

Second - and perhaps more significantly - it is important to note that supplemental scans with a secondary scanner to verify our primary scanners (regardless are primaries of choice) have done their jobs are (or should be!) just for the user's "peace of mind".

Why? Because if your primary scanner keeps letting malicious code through, it is time to get a different primary scanner and/or it is time for you to change your computing habits. That is, it is time to learn how to "practice safe computing" (keeping our systems and security current and avoid being click-happy on unsolicited links), and to become habitually disciplined (anal!) at practicing safe computing.

Also, another reason supplemental scans are primarily for "peace of mind" is because "in theory" they are not needed. Why? Because any good real-time anti-malware solution, including Defender, is already scanning our systems in real-time. They scan everything coming in and going out of our systems through every I/O. And any good solution is already constantly monitoring the computer's operating environment for any "suspicious behavior" or activity.

So if our security has already ensured nothing malicious came into our systems, why scan again to make sure nothing is on our systems - except for "peace of mind"?

Now I typically am the first to remind others that "theory" and "real-world" often don't jive. But I have been using Defender since it first came out with W8 in 2012. And again, in those 9 years, supplemental scanning with Malwarebytes (and scheduled scans with Defender) has never found anything malicious on any of my personal systems, or any of the 30 or so friends/family/client systems I am still responsible for. I consider that a pretty good track record.

Does that mean I am going to remove those "unnecessary" and "redundant" supplemental Defender and Malwarebytes scans from Task Scheduler? Nope!
Why? Because "peace of mind" gives me "peace of mind"!