Q&A What is Smartscreen? (Win8/10)

Do you use it ?

  • Yes

    Votes: 49 86.0%
  • No because...

    Votes: 8 14.0%

  • Total voters
    57

Umbra

Level 85
Content Creator
Verified
Joined
May 16, 2011
Messages
18,425
OS
Windows 10
Antivirus
Default-Deny
#1
Windows 8 includes a SmartScreen filter that prevents unknown and malicious programs from running. SmartScreen is part of Internet Explorer 8 and 9 – with Windows 8, it’s now integrated into the operating system.

SmartScreen is a useful security feature that will help prevent bad applications from running, but it may occasionally prevent a legitimate application from running. SmartScreen reports some information to Microsoft, so it may have some privacy implications.
read more:

HTG Explains: How the SmartScreen Filter Works in Windows 8
 

Dirk41

Level 17
Verified
Joined
Mar 17, 2016
Messages
804
OS
Windows 10
Antivirus
Microsoft
#2
I don't use IE but I activated that for the app of windows store.

Maybe it is smartscreen that prevent apple to download updates for iCloud for windows ??
 

Soulweave

Moderator
Content Creator
MalwareTips Staff
Verified
Joined
Jan 14, 2015
Messages
1,365
OS
Windows 10
Antivirus
Kaspersky
#3
I don't use IE but I activated that for the app of windows store.

Maybe it is smartscreen that prevent apple to download updates for iCloud for windows ??
As far as I'm aware this is not the case. At least I have no problem on w8.1 and I have ss enabled
 
Likes: Dirk41

Umbra

Level 85
Content Creator
Verified
Joined
May 16, 2011
Messages
18,425
OS
Windows 10
Antivirus
Default-Deny
#4
i know that Apple use the "Bonjour" process , maybe your firewall or something else is blocking it.
 

Dirk41

Level 17
Verified
Joined
Mar 17, 2016
Messages
804
OS
Windows 10
Antivirus
Microsoft
#5
Hi! Does smartscreen check the download in every folders?
If yes , shouldn't it stops every ransomware ? In some YT video ( even here )I noticed SM pop up
 

Umbra

Level 85
Content Creator
Verified
Joined
May 16, 2011
Messages
18,425
OS
Windows 10
Antivirus
Default-Deny
#6
Hi! Does smartscreen check the download in every folders?
If yes , shouldn't it stops every ransomware ? In some YT video ( even here )I noticed SM pop up
yes it is system wide (at least on win8/10), it will ignore the file in some cases ( like FAT removable devices, etc...)
 

HarborFront

Level 41
Content Creator
Verified
Joined
Oct 9, 2016
Messages
3,065
#9
if you download exes deemed as legitimate and safe , you won't see it. now disconnect internet and you will see it. since smartscreen is a cloud-like reputation feature.
Thanks. But with other protection software in my system I doubt smartscreen has a chance show itself
 

reboot

Level 3
Verified
Joined
Jan 27, 2017
Messages
143
OS
Windows 10
Antivirus
Default-Deny
#10
So far I have not seen it in action since I'm not using IE and Edge
Please correct me if I am wrong but I thought Smartscreen was now a function in Windows itself not just the browser???
 

Umbra

Level 85
Content Creator
Verified
Joined
May 16, 2011
Messages
18,425
OS
Windows 10
Antivirus
Default-Deny
#11
Please correct me if I am wrong but I thought Smartscreen was now a function in Windows itself not just the browser???
on windows8/10, yes.

"For Windows 10, Microsoft further developed the SmartScreen Filter by integrating its app reputation abilities into the operating system itself, which allows the filter to protect users regardless of the web browser they are using or the path that the app uses to arrive on the device (for example, email, USB flash drive). The first time a user runs an app that originates from the Internet, even if the user copied it from another PC, the SmartScreen Filter checks the reputation of the application by using digital signatures and other factors against a service that Microsoft maintains. If the app lacks a reputation or is known to be malicious, the SmartScreen Filter warns the user or blocks execution entirely, depending on how the administrator has configured Group Policy (see Figure 7)."

Windows 10 security overview (Windows 10)

Edge , safest browser:

Microsoft Edge Tops Browser Protection Tests | SecurityWeek.Com
 
Last edited:

carsten ibsen

Level 22
Verified
Joined
Sep 18, 2016
Messages
1,105
OS
Windows 10
Antivirus
Bitdefender
#12
My SmartScreen Filter sometimes block when I try to update Foobar 2000 among others, and I only got windows 8.1,and I use Google Chrome as default browsero_O
 
Joined
Dec 2, 2016
Messages
239
#13
You can bypass Windows inbuilt filters for using unsigned/blocked apps by opening cmd with admin rights and typing " to start then file location and name and finish by typing " at the end and you will be able to use/install blocked program. Sometimes when Windows blocks unsigned/blocked apps I know are clean I have to use this method to unlock the file.
 
Likes: Andy Ful

Umbra

Level 85
Content Creator
Verified
Joined
May 16, 2011
Messages
18,425
OS
Windows 10
Antivirus
Default-Deny
#15
Thank you for the validation Umbra. So SmartScreen Fliter combined with other native security would appear to be a very useful security feature. ;-)
indeed, this feature was never truly understood, because it often works silently or people disable it.
 

Umbra

Level 85
Content Creator
Verified
Joined
May 16, 2011
Messages
18,425
OS
Windows 10
Antivirus
Default-Deny
#16
My SmartScreen Filter sometimes block when I try to update Foobar 2000 among others, and I only got windows 8.1,and I use Google Chrome as default browsero_O
if the legit apps, doesn't possess a valid and up to date certificate, it may be not whitelisted by MS.
 
Last edited:

HarborFront

Level 41
Content Creator
Verified
Joined
Oct 9, 2016
Messages
3,065
#17
if you download exes deemed as legitimate and safe , you won't see it. now disconnect internet and you will see it. since smartscreen is a cloud-like reputation feature.
Hi

I just tried. Downloaded AppCheck, switch off my internet, install AppCheck and no action from smartscreen except alerts from CFW.

I supposed AppCheck for now may not even be in MS cloud server as it's a Korean software.
 
Last edited:

reboot

Level 3
Verified
Joined
Jan 27, 2017
Messages
143
OS
Windows 10
Antivirus
Default-Deny
#18
I supposed AppCheck for now may not even be in MS cloud server as it's a Korean software.
Thank you for sharing your test. What would one expect to happen if it was in the MS cloud server?
 

Umbra

Level 85
Content Creator
Verified
Joined
May 16, 2011
Messages
18,425
OS
Windows 10
Antivirus
Default-Deny
#19
Hi

I just tried. Downloaded AppCheck, switch off my internet, install AppCheck and no action from smartscreen except alerts from CFW.

I supposed AppCheck may not even be in MS cloud server as it's a Korean software.
sorry i mispelled, i meant if the software isn't whitelisted (hash different from legit one) or haven't a valid certificate or the publisher is unknown; Smartscreen should alert it.

i just did the test with the latest foobar 2000 version, i downloaded it from the site, saved on desktop, disconnected internet; then executed it, smartscreen did alert me.

then i reconnected internet, smartscreen went silent
 
Likes: harlan4096