Microsoft: Windows Defender can run in sandbox mode

Generally, high-privilege anti-virus programs are executed correctly. As a result, the software becomes a highly sought after target by hackers. Microsoft explained how to protect against attacks.

Redmond has been working for some time running its own anti-virus software, Windows Defender, in a sandbox. Basically, this is not a simple process because sandbox programs can only use many computer functions with great restrictions. Nevertheless, Microsoft has now announced that the Defender is now equipped with a sandbox mode.

To achieve this goal, Microsoft has separated the antivirus program into two components. Besides the file "MsMpEng.exe", which still requires many permissions for real-time backup of the computer, there is the process "MsMpEngCP.exe", which is responsible for the badysis and represents the new sandbox.

Even if the success has just been released, the activation of a sandbox option should already have worked with Windows 10 version 1703. In the last insider preview, the mode is tested and activated without any action of the user.

This allows you to activate the sandbox manually

In addition, all users who do not participate in the insider program can manually activate the sandbox mode. First, PowerShell must be started with administrator rights. Then the command "setx / M MP_FORCE_USE_SANDBOX 1" must be sent. At the end of the process, a restart of the computer is necessary.

Of course, it is possible to disable the option again. For this, the same command must be executed with the digit "0" at the end. With the next major update of Windows 10 scheduled for early 2019, the Defender sandbox should be automatically available to all users of the operating system.

Download Thus, Windows Defender and other antivirus applications do not run in parallel



Windows 10, Security, Antivirus, Windows Defender, Defender, Windows Antivirus, Windows Defender Security Center

2018-10-27T14: 51: 00 + 02: 00Tobias Rduch