Is Windows Defender/Microsoft Security Essentials Good Enough?

[Zoom7000]

Ever since Microsoft released MSE, I've not felt the need to install any 3rd party Anti-Virus protection. However, recently, I've started to read a lot of negatives both on forums online and in publications like Computer Active and PC Pro about MSE/Windows Defender that it was failing all the Anti-Virus tests and wasn't good enough protection against viruses. I've read counter arguments by Microsoft that the "hate" is simply because they aren't putting in the [wasted] resources to help MSE/Windows Defender pass these Anti-Virus tests/benchmarks to simply make it look good. I've always liked how MSE on XP/7 and Windows Defender on Windows 8.1 simply sits in the background, is very lightweight and doesn't bother me in any way whatsoever compared to a dedicated 3rd party Anti-Virus program. Conversely though, this does make you wonder sometimes if it is actually working!

 

So, the question is, who do we believe? Is MSE/Windows Defender still good enough protection against viruses or is it time to start looking at 3rd party alternatives?

[Trapper]

No.

 

I use Sophos from work with the LEAs off site update server. It has found a lot more than MSE.

 

It does, however, need to be balanced by the false-positives and the anti-piracy lobby. All keygens are viruses according to Sophos!

[disk]

I believe that MSE/Defender is a fine choice for AV, but I don't believe that it is a full solution. In our environment, we use Microsoft Endpoint Protection (same AV engine as MSE/Defender) but supplement with Malwarebytes Enterprise:

 

https://www.malwarebytes.org/business/antimalware/

 

They say it was designed as secondary protection and was designed to work in conjunction with your existing AV. It has really helped cut down on help desk tickets due to malware issues.

 

Most of our malware issues were due to running very outdated versions of Java (and not being allowed to update as we have enterprise software that requires an old vulnerable version). Malwarebytes certainly helped, but there are other products designed specifically to block these software vulnerabilities.

 

Malwarebytes Anti-Exploit (there is a pay for version and free version for personal use):

 

https://www.malwarebytes.org/antiexploit/

 

Microsoft has their own version (free) called Microsoft EMET:

 

http://www.microsoft.com/emet

 

If you are able to keep all of your software up-to-date (Windows, Office, Java, etc), I would say that MSE and one of the other security products listed above will make it very difficult to infect a workstation. If you are forced to run old vulnerable software (Flash player, Java, etc) then I think the perfect trifecta would be:

 

MSE + Malwarebytes Enterprise + EMET

 

or

 

MSE + Malwarebytes Enterprise + Malwarebytes Anti-Exploit