[{"data":1,"prerenderedAt":199},["ShallowReactive",2],{"en-post-85":3},{"id":4,"title":5,"body":6,"description":12,"extension":192,"meta":193,"navigation":194,"path":195,"seo":196,"stem":197,"__hash__":198},"content/post/85.md","85",{"type":7,"value":8,"toc":179},"minimark",[9,13,18,25,29,39,42,46,49,57,60,64,75,79,82,91,107,118,122,125,129,132,149,153,156,160,168,172,175],[10,11,12],"p",{},"The built-in antivirus is now called Windows Security, and its engine is still Microsoft Defender. It is good enough, free, and ad-free, but it occasionally \"friendly-fires\" on your games or dev tools. Here is how to use it day to day, how to recover from mistakes, and the pitfalls to avoid.",[14,15,17],"h2",{"id":16},"_1-know-the-interface-it-is-now-windows-security","1. Know the interface: it is now \"Windows Security\"",[10,19,20,24],{},[21,22,23],"code",{},"Win + I"," > Privacy and security > Windows Security (formerly Windows Defender). Virus and threat protection, account protection, and firewall and network protection are the parts you use most.",[14,26,28],{"id":27},"_2-temporarily-turn-off-real-time-protection-troubleshooting-only","2. Temporarily turn off real-time protection (troubleshooting only)",[30,31,32,36],"ol",{},[33,34,35],"li",{},"Go to Virus and threat protection > Manage settings.",[33,37,38],{},"Turn off Real-time protection (usually temporary; it comes back after a restart or after a while).",[10,40,41],{},"Do not leave it off long term. Browsing unprotected or plugging in unknown USB drives is risky. Turn it back on when you are done.",[14,43,45],{"id":44},"_3-add-exclusions-the-right-move-prevents-false-deletes","3. Add exclusions (the right move, prevents false deletes)",[10,47,48],{},"Better than \"turning off protection\": add your game folder, dev folder, and download folder to the exclusion list, and Defender leaves them alone.",[30,50,51,54],{},[33,52,53],{},"Virus and threat protection > Manage settings > Exclusions > Add or remove exclusions.",[33,55,56],{},"You can exclude a folder (game library, code repo), a file, a process, or a file type.",[10,58,59],{},"This avoids false kills while keeping the rest of the system protected. Dev tools (Python, Node, Go build outputs) and game mods are the ones most worth excluding.",[14,61,63],{"id":62},"_4-recover-a-file-defender-deleted","4. Recover a file Defender deleted",[30,65,66,69,72],{},[33,67,68],{},"Virus and threat protection > Protection history.",[33,70,71],{},"Find the quarantined item > Restore, and add its folder to exclusions (section 3) while you are at it.",[33,73,74],{},"If it was \"removed\" and never hit quarantine, recovery odds are low, so act fast.",[14,76,78],{"id":77},"_5-smartscreen-windows-protected-your-pc","5. SmartScreen: \"Windows protected your PC\"",[10,80,81],{},"Downloads from the web are often blocked by SmartScreen with \"Windows protected your PC\". Once you trust the source:",[83,84,85,88],"ul",{},[33,86,87],{},"Right-click the installer > Properties > bottom \"Unblock\" > OK.",[33,89,90],{},"Or use PowerShell:",[92,93,98],"pre",{"className":94,"code":95,"language":96,"meta":97,"style":97},"language-powershell shiki shiki-themes github-light github-dark","Unblock-File -Path \"D:\\Downloads\\setup.exe\"\n","powershell","",[21,99,100],{"__ignoreMap":97},[101,102,105],"span",{"class":103,"line":104},"line",1,[101,106,95],{},[83,108,109],{},[33,110,111,112,117],{},"In a corporate environment you can disable it via group policy; ordinary users should not leave it off long term. For how to open group policy and common settings, see ",[113,114,116],"a",{"href":115},"/post/61/","How to Use the Registry Editor (regedit) and Group Policy (gpedit)",".",[14,119,121],{"id":120},"_6-controlled-folder-access-anti-ransomware","6. Controlled folder access (anti-ransomware)",[10,123,124],{},"Virus and threat protection > Ransomware protection > Controlled folder access. Once on, it protects your Documents, Pictures, and similar folders from being rewritten by unknown programs, a solid extra layer against ransomware.",[14,126,128],{"id":127},"_7-allow-an-app-through-windows-firewall","7. Allow an app through Windows Firewall",[10,130,131],{},"Sometimes you need to let a program through, for example an online game or Remote Desktop.",[83,133,134,137],{},[33,135,136],{},"Advanced settings > Inbound rules > New rule to allow; or tick it under Allow an app through firewall.",[33,138,139,140,144,145,117],{},"Remote Desktop and LAN sharing often need this; see ",[113,141,143],{"href":142},"/post/62/","How to Use Windows Remote Desktop (RDP)"," and ",[113,146,148],{"href":147},"/post/17/","Windows File and Printer Sharing on a Local Network",[14,150,152],{"id":151},"_8-third-party-antivirus-conflicts","8. Third-party antivirus conflicts",[10,154,155],{},"Huorong, 360, and Defender together will delete and block each other. Install one mainstream product and do not stack them.",[14,157,159],{"id":158},"_9-common-false-positive-scenarios","9. Common false-positive scenarios",[83,161,162,165],{},[33,163,164],{},"Key generators, trainers, cheats, and unsigned dev tools are the most likely to be flagged.",[33,166,167],{},"The rule: confirm the source is trusted, add it to exclusions (section 3), then run it. Do not disable the whole protection just for convenience.",[14,169,171],{"id":170},"wrap-up","Wrap-up",[10,173,174],{},"Defender is enough for daily use, so don't rush to disable it. False deletes are solved with \"exclusions plus restore from protection history\"; SmartScreen blocks on downloads are cleared with \"Unblock\"; turn on \"Controlled folder access\" to fight ransomware. Pick one third-party antivirus and stop there, because stacking them makes them fight.",[176,177,178],"style",{},"html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}",{"title":97,"searchDepth":180,"depth":180,"links":181},2,[182,183,184,185,186,187,188,189,190,191],{"id":16,"depth":180,"text":17},{"id":27,"depth":180,"text":28},{"id":44,"depth":180,"text":45},{"id":62,"depth":180,"text":63},{"id":77,"depth":180,"text":78},{"id":120,"depth":180,"text":121},{"id":127,"depth":180,"text":128},{"id":151,"depth":180,"text":152},{"id":158,"depth":180,"text":159},{"id":170,"depth":180,"text":171},"md",{},true,"/post/85",{"description":12},"post/85","wjubTZwTI8Wgl6BQaYY-vbS8MGg_foiA1LjafiMizvU",1794378304352]