Microsoft's AntiSpyware Rebranded ' Windows Defender '

By Ryan Naraine
E week

Microsoft Corp.'s Windows AntiSpyware technology has been renamed "Windows Defender" and has been expanded to detect and remove rootkits, keystroke loggers and other forms of malware.

The revamped application will be bundled into the Windows Vista operating system, but users will be free to choose a competing spyware protection product from a redesigned Windows Security Center.
Jason Garms, group program manager for Microsoft's anti-malware technology team, made the announcement in a blog entry that also included confirmation that rootkit detection will be fitted into the product.

As previously reported, Microsoft will use rootkit detection technology from its Strider Ghostbuster research project.
Strider Ghostbuster is a prototype tool developed by Microsoft's Cybersecurity and Systems Management Research Group.
Click here to read more about Microsoft's rootkit detection technology.
"Our solution has really been about more than just the standard definition of spyware," Garms said.
"We've always said we will provide visibility and control, as well as protection, detection and removal from other potentially unwanted software, including rootkits, keystroke loggers and more."
For advice on how to secure your network and applications, as well as the latest security news, visit Ziff Davis Internet's Security IT Hub.
"Making the engineering change from 'Windows AntiSpyware' to 'Windows Defender' took a lot of careful coordination across our team to ensure that the strings in the UI got changed, the help files all got updated, registry keys, file names and properties, as well as a couple of images all got changed," Garms said.
The revamped product will be fitted with a new user interface and a significant change to the way malware signature updates are delivered.
Read more here about Microsoft's plans to bundle its anti-spyware software with Vista.

"The engine is now moved to a system service, and signatures are delivered over Windows Update. The detection mechanisms have also been radically improved by applying to spyware threats all the great detection technology we use in our anti-virus engine," Garms added.
Although the changes are being geared for Windows Vista, Garms said the enhancements will also be available to existing Windows XP users via a software refresh.
In Vista, users will be allowed to disable or turn off Windows Defender and install a third-party anti-spyware application.

The Vista Security Center will also be able to detect if an anti-spyware application such as Windows Defender is running and operating normally.

Source: E Week