Q&A What is Smartscreen? (Win8/10)

  • This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn more.

Do you use it ?

  • Yes

    Votes: 46 86.8%
  • No because...

    Votes: 7 13.2%

  • Total voters
    53

Umbra

Level 61
Content Creator
Verified
May 16, 2011
17,471
30,678
Operating System
Windows 10
Installed Antivirus
Default-Deny
#1
Windows 8 includes a SmartScreen filter that prevents unknown and malicious programs from running. SmartScreen is part of Internet Explorer 8 and 9 – with Windows 8, it’s now integrated into the operating system.

SmartScreen is a useful security feature that will help prevent bad applications from running, but it may occasionally prevent a legitimate application from running. SmartScreen reports some information to Microsoft, so it may have some privacy implications.
read more:

HTG Explains: How the SmartScreen Filter Works in Windows 8
 

Dirk41

Level 16
Mar 17, 2016
802
2,479
Operating System
Windows 10
Installed Antivirus
Microsoft
#2
I don't use IE but I activated that for the app of windows store.

Maybe it is smartscreen that prevent apple to download updates for iCloud for windows ??
 

Soulweave

Moderator
Staff member
Content Creator
Jan 14, 2015
1,360
3,379
Operating System
Windows 10
Installed Antivirus
Kaspersky
#3
I don't use IE but I activated that for the app of windows store.

Maybe it is smartscreen that prevent apple to download updates for iCloud for windows ??
As far as I'm aware this is not the case. At least I have no problem on w8.1 and I have ss enabled
 
Likes: Dirk41

Umbra

Level 61
Content Creator
Verified
May 16, 2011
17,471
30,678
Operating System
Windows 10
Installed Antivirus
Default-Deny
#4
i know that Apple use the "Bonjour" process , maybe your firewall or something else is blocking it.
 

Dirk41

Level 16
Mar 17, 2016
802
2,479
Operating System
Windows 10
Installed Antivirus
Microsoft
#5
Hi! Does smartscreen check the download in every folders?
If yes , shouldn't it stops every ransomware ? In some YT video ( even here )I noticed SM pop up
 

Umbra

Level 61
Content Creator
Verified
May 16, 2011
17,471
30,678
Operating System
Windows 10
Installed Antivirus
Default-Deny
#6
Hi! Does smartscreen check the download in every folders?
If yes , shouldn't it stops every ransomware ? In some YT video ( even here )I noticed SM pop up
yes it is system wide (at least on win8/10), it will ignore the file in some cases ( like FAT removable devices, etc...)
 

HarborFront

Level 36
Content Creator
Oct 9, 2016
2,543
6,439
#9
if you download exes deemed as legitimate and safe , you won't see it. now disconnect internet and you will see it. since smartscreen is a cloud-like reputation feature.
Thanks. But with other protection software in my system I doubt smartscreen has a chance show itself
 
Jan 27, 2017
143
393
Operating System
Windows 10
Installed Antivirus
Default-Deny
#10
So far I have not seen it in action since I'm not using IE and Edge
Please correct me if I am wrong but I thought Smartscreen was now a function in Windows itself not just the browser???
 

Umbra

Level 61
Content Creator
Verified
May 16, 2011
17,471
30,678
Operating System
Windows 10
Installed Antivirus
Default-Deny
#11
Please correct me if I am wrong but I thought Smartscreen was now a function in Windows itself not just the browser???
on windows8/10, yes.

"For Windows 10, Microsoft further developed the SmartScreen Filter by integrating its app reputation abilities into the operating system itself, which allows the filter to protect users regardless of the web browser they are using or the path that the app uses to arrive on the device (for example, email, USB flash drive). The first time a user runs an app that originates from the Internet, even if the user copied it from another PC, the SmartScreen Filter checks the reputation of the application by using digital signatures and other factors against a service that Microsoft maintains. If the app lacks a reputation or is known to be malicious, the SmartScreen Filter warns the user or blocks execution entirely, depending on how the administrator has configured Group Policy (see Figure 7)."

Windows 10 security overview (Windows 10)

Edge , safest browser:

Microsoft Edge Tops Browser Protection Tests | SecurityWeek.Com
 
Last edited:
Sep 18, 2016
1,039
5,518
Operating System
Windows 10
Installed Antivirus
BitDefender
#12
My SmartScreen Filter sometimes block when I try to update Foobar 2000 among others, and I only got windows 8.1,and I use Google Chrome as default browsero_O
 
Dec 2, 2016
239
681
#13
You can bypass Windows inbuilt filters for using unsigned/blocked apps by opening cmd with admin rights and typing " to start then file location and name and finish by typing " at the end and you will be able to use/install blocked program. Sometimes when Windows blocks unsigned/blocked apps I know are clean I have to use this method to unlock the file.
 
Likes: Andy Ful
Jan 27, 2017
143
393
Operating System
Windows 10
Installed Antivirus
Default-Deny
#14
on windows8/10, yes.
Thank you for the validation Umbra. So SmartScreen Fliter combined with other native security would appear to be a very useful security feature. ;-)
 
Likes: Umbra

Umbra

Level 61
Content Creator
Verified
May 16, 2011
17,471
30,678
Operating System
Windows 10
Installed Antivirus
Default-Deny
#15
Thank you for the validation Umbra. So SmartScreen Fliter combined with other native security would appear to be a very useful security feature. ;-)
indeed, this feature was never truly understood, because it often works silently or people disable it.
 

Umbra

Level 61
Content Creator
Verified
May 16, 2011
17,471
30,678
Operating System
Windows 10
Installed Antivirus
Default-Deny
#16
My SmartScreen Filter sometimes block when I try to update Foobar 2000 among others, and I only got windows 8.1,and I use Google Chrome as default browsero_O
if the legit apps, doesn't possess a valid and up to date certificate, it may be not whitelisted by MS.
 
Last edited:

HarborFront

Level 36
Content Creator
Oct 9, 2016
2,543
6,439
#17
if you download exes deemed as legitimate and safe , you won't see it. now disconnect internet and you will see it. since smartscreen is a cloud-like reputation feature.
Hi

I just tried. Downloaded AppCheck, switch off my internet, install AppCheck and no action from smartscreen except alerts from CFW.

I supposed AppCheck for now may not even be in MS cloud server as it's a Korean software.
 
Last edited:
Jan 27, 2017
143
393
Operating System
Windows 10
Installed Antivirus
Default-Deny
#18
I supposed AppCheck for now may not even be in MS cloud server as it's a Korean software.
Thank you for sharing your test. What would one expect to happen if it was in the MS cloud server?
 

Umbra

Level 61
Content Creator
Verified
May 16, 2011
17,471
30,678
Operating System
Windows 10
Installed Antivirus
Default-Deny
#19
Hi

I just tried. Downloaded AppCheck, switch off my internet, install AppCheck and no action from smartscreen except alerts from CFW.

I supposed AppCheck may not even be in MS cloud server as it's a Korean software.
sorry i mispelled, i meant if the software isn't whitelisted (hash different from legit one) or haven't a valid certificate or the publisher is unknown; Smartscreen should alert it.

i just did the test with the latest foobar 2000 version, i downloaded it from the site, saved on desktop, disconnected internet; then executed it, smartscreen did alert me.

then i reconnected internet, smartscreen went silent
 
Likes: harlan4096