Windows Defender fails to protect from spyware

Windows Defender fails to protect from spyware

Microsoft's free Windows Defender ships standard with Windows Vista and is available as a free download for Windows XP SP2. If it had presented itself as an anti-adware program, we'd be less hard on it, but Defender's Web site asserts that the software provides "Spyware protection for free," and in that claim it fails.

In tests performed by, Windows Defender did detect all ten of the active adware threats it was exposed to. It detected less than 50 percent of the 46,352 inactive adware samples we threw at it -- hardly admirable but middle of the road against other products. In disinfection tests, the program successfully removed 55 percent of adware files and Registry entries, missing PremiumSearch, (which messes with Internet Explorer's home page and favorites and produces pop-up ads) and Starware (which creates an IE search bar).

But with regard to spyware, the story is entirely different and somewhat by design. Microsoft says in its own product documentation that Windows Defender is not a replacement for full anti-virus protection -- in contrast to the company's subscription-based Windows OneCare antimalware suite -- and makes clear that Windows Defender won't block such virulent computer threats as password-stealing bots and Trojan horse programs, some of which can be classified as spyware. Sure enough, in our tests the program neither detected nor disinfected the ten active spyware threats we introduced. It did, however, detect 7 percent of the 6365 inactive password stealers we threw at it. It failed to detect any inactive rootkits.

Windows Defender did excel in behavior-based protection, which detects changes to key areas of the system without having to know anything about the actual threat. This type of protection is important in the case of a zero-day threat which runs rampant before security companies have a chance to patch their software. The program detected all additions to the 'Run' keys (HKCU and HKLM), all additions to the startup folder, all changes to the Internet Explorer Search and Start pages and changes to the Hosts file (which can redirect a URL to a malicious Web site).

Windows Defender is easy to understand and configure. There's little user interaction beyond the option of choosing a low, medium, or high level of security. Windows Defender was the only stand-alone antispyware program we tested that by default has a regularly scheduled scan (at 2 a.m. daily). In Vista, it is the only antispyware tool that integrates with Internet Explorer 7 Protected Mode to permit scanning of downloaded files before they are saved or executed. Warning: Telephone support for the program is expensive. After two free calls, you must pay US$35 per request. E-mail and Web-based support is free.

Windows Defender is certainly better than nothing. It combats adware and offers behavior-based protection that should block many threats that might try to make unwelcome changes to your system, but if a Trojan horse or other piece of malicious spyware slips past Defender's first line of defense, you'll need something else to clean up the mess.

Join the newsletter!


Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.
Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Ryan Naraine

PC World
Show Comments

Cool Tech

Toys for Boys

Family Friendly

Stocking Stuffer

SmartLens - Clip on Phone Camera Lens Set of 3

Learn more >

Christmas Gift Guide

Click for more ›

Brand Post

Most Popular Reviews

Latest Articles


PCW Evaluation Team

Michael Hargreaves

Microsoft Office 365/Dell XPS 15 2-in-1

I’d recommend a Dell XPS 15 2-in-1 and the new Windows 10 to anyone who needs to get serious work done (before you kick back on your couch with your favourite Netflix show.)

Maryellen Rose George

Brother PT-P750W

It’s useful for office tasks as well as pragmatic labelling of equipment and storage – just don’t get too excited and label everything in sight!

Cathy Giles

Brother MFC-L8900CDW

The Brother MFC-L8900CDW is an absolute stand out. I struggle to fault it.

Luke Hill


I need power and lots of it. As a Front End Web developer anything less just won’t cut it which is why the MSI GT75 is an outstanding laptop for me. It’s a sleek and futuristic looking, high quality, beast that has a touch of sci-fi flare about it.

Emily Tyson

MSI GE63 Raider

If you’re looking to invest in your next work horse laptop for work or home use, you can’t go wrong with the MSI GE63.

Laura Johnston

MSI GS65 Stealth Thin

If you can afford the price tag, it is well worth the money. It out performs any other laptop I have tried for gaming, and the transportable design and incredible display also make it ideal for work.

Featured Content

Product Launch Showcase

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?