Microsoft Security Essentials Final Released

[fvbounty]

Originally Posted by Griff

Check post #5 about email scanning. You have to click the link.

Thanks I have to have my eyes checked....lol

[CrowdAds]

[JimTram]

I am sure it does scan emails. Perhaps in a non-obtrusive way. I doubt MS would release a AV program without some sort of email protection.

BTW - under "Settings" there is an indication concerning the scanning of attachments. Have you tried the latest release of MSE?

Originally Posted by fvbounty

For the little I used it I liked it too, the only thing is no E-Mail scanner, for me that's my main reason for having a anti- virus program, with my wife's family sending mail with attachments all the time its a must!

[fvbounty]

Yes but I guess I missed that....

[JimTram]

Yep - some say the eyes are the second thing to go!

Originally Posted by fvbounty

Yes but I guess I missed that....

[Griff]

Originally Posted by fvbounty

Thanks I have to have my eyes checked....lol

That is a sign you are getting old like the rest of us Old Farts.

[fvbounty]

Originally Posted by Griff

That is a sign you are getting old like the rest of us Old Farts.

Almost 61 now, I would have taken better care of myself if I thought I would live this long! LOL

[Sandog]

I've got it, thanks guys.
I was using Live One Care up until it expired about six mo.s ago.

[GWillakers]

Originally Posted by JimTram

Other AV software did not find anything? These are genuine virus?

Other AV software did not report the infection. I don't run AV scanners on my server system religiously though. Normally when I get a copy of Ghost or something like that, I will scan the server with the enclosed AV program.

I don't care too much about the adware virus ...its been quaranteened.

As for the worm...is it a genuine virus...or a fake positive??....hmmm I could run a disassembler...and interprate the output... however there is no documentation to all the control blocks {that is properties for you object oriented types} that Microsoft may be using in their OS. Thus I could not possibly know what it is doing.

As a pack rat for DP info, I have 5 Million + files on this server.
I really don't need that file about SUSE Linux 7.3 at this date. {gone}


I have often wondered if AV companies had some sort of clearing house for their discovered infections. Would seem to be a total waste of manpower for each company to discover and figure a way to remove each individual virus as it appeared in the wild.

[JimTram]

I feel quite confident MSE detected what was previously missed. Gives me confidence in using it. IMHO I think the AV companies contribute to the malware problem - just an opinion, no facts to support it.

Originally Posted by GWillakers

Other AV software did not report the infection. I don't run AV scanners on my server system religiously though. Normally when I get a copy of Ghost or something like that, I will scan the server with the enclosed AV program.

I don't care too much about the adware virus ...its been quaranteened.

As for the worm...is it a genuine virus...or a fake positive??....hmmm I could run a disassembler...and interprate the output... however there is no documentation to all the control blocks {that is properties for you object oriented types} that Microsoft may be using in their OS. Thus I could not possibly know what it is doing.

As a pack rat for DP info, I have 5 Million + files on this server.
I really don't need that file about SUSE Linux 7.3 at this date. {gone}


I have often wondered if AV companies had some sort of clearing house for their discovered infections. Would seem to be a total waste of manpower for each company to discover and figure a way to remove each individual virus as it appeared in the wild.

[wonderwrench]

I decided to give it a shot on my Vista 64 sp2 box. First thing I see is the manual scan engine is very slow compared to Avast. Avast could do a complete scan, all files including compressed in about an hour MSE took 3 hours. This time may have been exaggerated see below. By default MSE quarantines anything it finds and it found several tools I use like netstumbler, TightVNC and UltraVNC. Trouble is these files are in large zip, ISO files etc.

What happened was MSE quarantined a huge amount if data. After the scan was complete I was able to force MSE to undo what it had done but it took another hour. This was my fault as I should have added these to a white list before hand but I wanted to see what MSE would do by default. I also do not like the alert action choices as the available options are "recommended action" "remove" and "quarantine". Where the h e l l is ask! MSE also disables Windows defender which is not a problem but I get the idea MSE does not replace all of Windows defenders functionality.

If MSE gets decent reviews from testing sites it should be a good choice for novice users that want a free program.

[JimTram]

I have 500K+ individual files of various sizes. It took an hour more or less for a full scan. Seemed like a long time to me. Perhaps when I go 64bit it may speed-up?

Since I just do a quick scan most of the time - it is not really a show stopper.

[wonderwrench]

Having MSE installed causes errors in the event security log. You would think MS would not have stupid problems like this.

"Code integrity determined that the image hash of a file is not valid. The file could be corrupt due to unauthorized modification or the invalid hash could indicate a potential disk device error.

File Name: \Device\HarddiskVolume1\Program Files\Microsoft Security Essentials\Drivers\mpfilter\mpfilter.sys"

I get nine of these errors on every boot.

I did some searching and it looks like a common problem.

Maybe I'm to picky but I hate event log errors!

[JimTram]

Sorry to hear - I looked in my event viewer and seen nothing similar or even close to what you describe. I must be lucky.

Originally Posted by wonderwrench

Having MSE installed causes errors in the event security log. You would think MS would not have stupid problems like this.

"Code integrity determined that the image hash of a file is not valid. The file could be corrupt due to unauthorized modification or the invalid hash could indicate a potential disk device error.

File Name: \Device\HarddiskVolume1\Program Files\Microsoft Security Essentials\Drivers\mpfilter\mpfilter.sys"

I get nine of these errors on every boot.

I did some searching and it looks like a common problem.

Maybe I'm to picky but I hate event log errors!

[Griff]

Originally Posted by wonderwrench

Having MSE installed causes errors in the event security log. You would think MS would not have stupid problems like this.

"Code integrity determined that the image hash of a file is not valid. The file could be corrupt due to unauthorized modification or the invalid hash could indicate a potential disk device error.

File Name: \Device\HarddiskVolume1\Program Files\Microsoft Security Essentials\Drivers\mpfilter\mpfilter.sys"

I get nine of these errors on every boot.

I did some searching and it looks like a common problem.

Maybe I'm to picky but I hate event log errors!

I have looked in my event viewer and have nothing that resembles what you have posted either.

[wonderwrench]

What OS are you guys running? Vista 64? If your using Vista is UAC fully enabled?