Q&A What is Smartscreen? (Win8/10)

Discussion in 'Microsoft' started by Umbra, Apr 1, 2016.

?

Do you use it ?

  1. Yes

    45 vote(s)
    86.5%
  2. No because...

    7 vote(s)
    13.5%
  1. Umbra

    Umbra From Emsisoft
    Developer

    May 16, 2011
    17,169
    29,696
    Community manager
    Vietnam & France
    Windows 10
    Emsisoft
    read more:

    HTG Explains: How the SmartScreen Filter Works in Windows 8
     
  2. Dirk41

    Dirk41 Level 16

    Mar 17, 2016
    802
    2,487
    Earth
    Windows 10
    Microsoft
    I don't use IE but I activated that for the app of windows store.

    Maybe it is smartscreen that prevent apple to download updates for iCloud for windows ??
     
  3. Soulweave

    Soulweave Moderator
    Staff Member Content Creator

    Jan 14, 2015
    1,360
    3,396
    Windows 10
    Kaspersky
    As far as I'm aware this is not the case. At least I have no problem on w8.1 and I have ss enabled
     
    Dirk41 likes this.
  4. Umbra

    Umbra From Emsisoft
    Developer

    May 16, 2011
    17,169
    29,696
    Community manager
    Vietnam & France
    Windows 10
    Emsisoft
    i know that Apple use the "Bonjour" process , maybe your firewall or something else is blocking it.
     
    Andy Ful and Dirk41 like this.
  5. Dirk41

    Dirk41 Level 16

    Mar 17, 2016
    802
    2,487
    Earth
    Windows 10
    Microsoft
    Hi! Does smartscreen check the download in every folders?
    If yes , shouldn't it stops every ransomware ? In some YT video ( even here )I noticed SM pop up
     
  6. Umbra

    Umbra From Emsisoft
    Developer

    May 16, 2011
    17,169
    29,696
    Community manager
    Vietnam & France
    Windows 10
    Emsisoft
    yes it is system wide (at least on win8/10), it will ignore the file in some cases ( like FAT removable devices, etc...)
     
    Dirk41 and _CyberGhosT_ like this.
  7. HarborFront

    HarborFront Level 34
    Content Creator

    Oct 9, 2016
    2,305
    5,771
    Far East
    So far I have not seen it in action since I'm not using IE and Edge
     
  8. Umbra

    Umbra From Emsisoft
    Developer

    May 16, 2011
    17,169
    29,696
    Community manager
    Vietnam & France
    Windows 10
    Emsisoft
    if you download exes deemed as legitimate and safe , you won't see it. now disconnect internet and you will see it. since smartscreen is a cloud-like reputation feature.
     
    _CyberGhosT_ and HarborFront like this.
  9. HarborFront

    HarborFront Level 34
    Content Creator

    Oct 9, 2016
    2,305
    5,771
    Far East
    Thanks. But with other protection software in my system I doubt smartscreen has a chance show itself
     
  10. reboot

    reboot Level 3

    Jan 27, 2017
    143
    402
    Marketing consultant
    Australia
    Windows 10
    Default-Deny
    Please correct me if I am wrong but I thought Smartscreen was now a function in Windows itself not just the browser???
     
  11. Umbra

    Umbra From Emsisoft
    Developer

    May 16, 2011
    17,169
    29,696
    Community manager
    Vietnam & France
    Windows 10
    Emsisoft
    #11 Umbra, Feb 2, 2017
    Last edited: Feb 2, 2017
    on windows8/10, yes.

    "For Windows 10, Microsoft further developed the SmartScreen Filter by integrating its app reputation abilities into the operating system itself, which allows the filter to protect users regardless of the web browser they are using or the path that the app uses to arrive on the device (for example, email, USB flash drive). The first time a user runs an app that originates from the Internet, even if the user copied it from another PC, the SmartScreen Filter checks the reputation of the application by using digital signatures and other factors against a service that Microsoft maintains. If the app lacks a reputation or is known to be malicious, the SmartScreen Filter warns the user or blocks execution entirely, depending on how the administrator has configured Group Policy (see Figure 7)."

    Windows 10 security overview (Windows 10)

    Edge , safest browser:

    Microsoft Edge Tops Browser Protection Tests | SecurityWeek.Com
     
  12. carsten ibsen

    carsten ibsen Level 20

    Sep 18, 2016
    981
    5,211
    retired
    denmark
    Windows 10
    Microsoft
    My SmartScreen Filter sometimes block when I try to update Foobar 2000 among others, and I only got windows 8.1,and I use Google Chrome as default browsero_O
     
  13. Zero Knowledge

    Zero Knowledge Level 5

    Dec 2, 2016
    239
    692
    Dark Cloud Universe
    You can bypass Windows inbuilt filters for using unsigned/blocked apps by opening cmd with admin rights and typing " to start then file location and name and finish by typing " at the end and you will be able to use/install blocked program. Sometimes when Windows blocks unsigned/blocked apps I know are clean I have to use this method to unlock the file.
     
    Andy Ful likes this.
  14. reboot

    reboot Level 3

    Jan 27, 2017
    143
    402
    Marketing consultant
    Australia
    Windows 10
    Default-Deny
    Thank you for the validation Umbra. So SmartScreen Fliter combined with other native security would appear to be a very useful security feature. ;-)
     
    Umbra likes this.
  15. Umbra

    Umbra From Emsisoft
    Developer

    May 16, 2011
    17,169
    29,696
    Community manager
    Vietnam & France
    Windows 10
    Emsisoft
    indeed, this feature was never truly understood, because it often works silently or people disable it.
     
  16. Umbra

    Umbra From Emsisoft
    Developer

    May 16, 2011
    17,169
    29,696
    Community manager
    Vietnam & France
    Windows 10
    Emsisoft
    #16 Umbra, Feb 3, 2017
    Last edited: Feb 3, 2017
    if the legit apps, doesn't possess a valid and up to date certificate, it may be not whitelisted by MS.
     
  17. HarborFront

    HarborFront Level 34
    Content Creator

    Oct 9, 2016
    2,305
    5,771
    Far East
    #17 HarborFront, Feb 3, 2017
    Last edited: Feb 3, 2017
    Hi

    I just tried. Downloaded AppCheck, switch off my internet, install AppCheck and no action from smartscreen except alerts from CFW.

    I supposed AppCheck for now may not even be in MS cloud server as it's a Korean software.
     
  18. reboot

    reboot Level 3

    Jan 27, 2017
    143
    402
    Marketing consultant
    Australia
    Windows 10
    Default-Deny
    Thank you for sharing your test. What would one expect to happen if it was in the MS cloud server?
     
  19. Umbra

    Umbra From Emsisoft
    Developer

    May 16, 2011
    17,169
    29,696
    Community manager
    Vietnam & France
    Windows 10
    Emsisoft
    sorry i mispelled, i meant if the software isn't whitelisted (hash different from legit one) or haven't a valid certificate or the publisher is unknown; Smartscreen should alert it.

    i just did the test with the latest foobar 2000 version, i downloaded it from the site, saved on desktop, disconnected internet; then executed it, smartscreen did alert me.

    then i reconnected internet, smartscreen went silent
     
    harlan4096 likes this.
  20. HarborFront

    HarborFront Level 34
    Content Creator

    Oct 9, 2016
    2,305
    5,771
    Far East
    Sorry but I never see it in action so not sure. See @Umbra reply before this
     
Loading...
Similar Threads Forum Date
Smartscreen Test Page Microsoft May 14, 2017
Update Smartscreen in Creators Update Microsoft Apr 6, 2017
Poll If you don't use IE, should you disable Smartscreen on Windows 7? General Security Discussions Mar 25, 2017