{"id":4579,"date":"2016-11-14T14:21:54","date_gmt":"2016-11-14T08:51:54","guid":{"rendered":"http:\/\/198.58.113.91\/blog\/?p=4579"},"modified":"2019-05-12T02:53:06","modified_gmt":"2019-05-12T02:53:06","slug":"microsoft-security-essentials-adware-pua-protection","status":"publish","type":"post","link":"https:\/\/www.winhelponline.com\/blog\/microsoft-security-essentials-adware-pua-protection\/","title":{"rendered":"How to Enable Adware or PUA Protection in Microsoft Security Essentials"},"content":{"rendered":"

You can enable PUA or adware protection in Windows Defender using different methods explained in the article How to Enable PUA, PUP or Adware Protection in Windows Defender<\/a>. But, if you\u2019re still using Windows 7 and relying on Microsoft Security Essentials<\/a> (MSE) for real-time antivirus protection, this post has the info on how to enable adware, PUP or PUA protection in MSE.<\/p>\n

There are two methods (using the registry) for enabling PUP, PUA or adware protection in Microsoft Security Essentials. For MSE and Forefront client, you implement the registry value “PUAProtection” or “MpEnablePus” in a different branch than the one used for Windows Defender. And, the PowerShell method (Set-MpPreference<\/a> cmdlet) that I posted earlier doesn’t work in Windows 7<\/a>.<\/p>\n

Enable PUA Protection in Microsoft Security Essentials<\/h2>\n

Option 1:<\/h4>\n

Start the Registry Editor (regedit.exe) and go to:<\/p>\n

HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Microsoft Antimalware<\/pre>\n
Create a DWORD value named PUAProtection<\/strong> and set its data to 1.<\/p>\n
Exit the Registry Editor.<\/p>\n
Option 2:<\/h4>\n
Go to this registry key:<\/p>\n
HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Microsoft Antimalware\\MpEngine<\/pre>\n
Note:<\/strong> The key “MpEngine” need to be manually created as it doesn’t exist by default.<\/p>\n
Create a DWORD value named MpEnablePus<\/strong> and set its data to 1.<\/p>\n
\"enable<\/p>\n
Exit the Registry Editor.<\/p>\n
Update the definitions or restart Windows for the change to take effect.<\/p>\n
That should block adware or PUAs from being downloaded or run.<\/p>\n
\"enable<\/p>\n
\"mse-pua-3\"<\/p>\n
\"enable<\/p>\n
Yes. It does work — tested on Windows 7 with MSE — Microsoft Antimalware client version 4.10.205.0.<\/p>\n
Since Windows 7 still has the majority of the OS market share<\/a> (of 48%+) and MSE topped the antivirus product market share with 17% as of Jan 2015<\/a> (can’t find the latest  report for 2016, though), I hope many people would find this post useful.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"
You can enable PUA or adware protection in Windows Defender using different methods explained in the article How to Enable PUA, PUP or Adware Protection in Windows Defender. But, if you\u2019re still using Windows 7 and relying on Microsoft Security Essentials (MSE) for real-time antivirus protection, this post has the info on how to enable … Read more<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[9,11],"tags":[],"class_list":["post-4579","post","type-post","status-publish","format-standard","hentry","category-windows-7","category-windows-vista"],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack-related-posts":[{"id":4568,"url":"https:\/\/www.winhelponline.com\/blog\/defender-enable-pua-pup-adware-protection\/","url_meta":{"origin":4579,"position":0},"title":"How to Enable Scanning for PUA\/PUP\/Adware in Windows Defender","author":"Ramesh","date":"November 12, 2016","format":false,"excerpt":"Windows Defender can detect and remove malware and viruses, but it doesn't catch Potentially Unwanted Programs or crapware by default. However, there is an opt-in feature that you can enable to make Microsoft Defender antivirus scan and eliminate adware, PUAs, or PUPs in real-time. Potentially Unwanted Program (PUP), Potentially Unwanted\u2026","rel":"","context":"In "Windows"","block_context":{"text":"Windows","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2016\/11\/windows-defender-header.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2016\/11\/windows-defender-header.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2016\/11\/windows-defender-header.png?resize=525%2C300&ssl=1 1.5x"},"classes":[]},{"id":17759,"url":"https:\/\/www.winhelponline.com\/blog\/windows-defender-hostsfilehijack-alert-telemetry-block\/","url_meta":{"origin":4579,"position":1},"title":"Windows Defender “HostsFileHijack” alert appears if Telemetry is blocked","author":"Ramesh","date":"August 5, 2020","format":false,"excerpt":"Since July last week, Windows Defender started issuing Win32\/HostsFileHijack \"potentially unwanted behavior\" alerts if you had blocked Microsoft's Telemetry servers using the HOSTS file. Out of the SettingsModifier:Win32\/HostsFileHijack cases reported online, the earliest one was reported at the Microsoft Answers forums where the user stated: I'm getting a serious \"potentially\u2026","rel":"","context":"In "Windows 10"","block_context":{"text":"Windows 10","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/windows-10\/"},"img":{"alt_text":"defender hostsfilehijack","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2020\/08\/defender-hostsfilejihack-00.png?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]},{"id":8717,"url":"https:\/\/www.winhelponline.com\/blog\/enable-or-disable-defender-shortcut-command-line\/","url_meta":{"origin":4579,"position":2},"title":"Enable or Disable Windows Defender Using Shortcut or Command-line","author":"Ramesh","date":"April 18, 2019","format":false,"excerpt":"Windows Defender, the built-in anti-virus program in Windows, has useful features such as cloud-based protection, offline scanning, limited periodic scanning, tamper protection, controlled folder access, etc. Almost every aspect of Windows Defender can be managed or automated using the MpCmdrun.exe command-line tool and PowerShell cmdlets. There are times when you\u2026","rel":"","context":"In "Utilities"","block_context":{"text":"Utilities","link":"https:\/\/www.winhelponline.com\/blog\/category\/utilities\/"},"img":{"alt_text":"advancedrun command-line to disable defender","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2019\/04\/advanced-run-command-line-defender.png?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]},{"id":5125,"url":"https:\/\/www.winhelponline.com\/blog\/windows-defender-disabled-real-time-protection-virus\/","url_meta":{"origin":4579,"position":3},"title":"Microsoft Defender: “Managed by your administrator” or “Your IT administrator has limited access”","author":"Ramesh","date":"January 23, 2017","format":false,"excerpt":"In the aftermath of a malware attack, the Windows Defender Security settings page may show the message Some settings are managed by your organization\u00a0or This setting is managed by your administrator. The real-time protection and cloud-based protection options may remain disabled or grayed out. Here is what the Windows Defender\u2026","rel":"","context":"In "Windows 10"","block_context":{"text":"Windows 10","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/windows-10\/"},"img":{"alt_text":"Microsoft Defender Antivirus group policy settings","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2017\/01\/windows-defender-gpedit-ui.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2017\/01\/windows-defender-gpedit-ui.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2017\/01\/windows-defender-gpedit-ui.png?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2017\/01\/windows-defender-gpedit-ui.png?resize=700%2C400&ssl=1 2x"},"classes":[]},{"id":5610,"url":"https:\/\/www.winhelponline.com\/blog\/use-controlled-folder-access-windows-10-windows-defender\/","url_meta":{"origin":4579,"position":4},"title":"How to Configure Controlled Folder Access to Stop “Unauthorized changes blocked” Notifications","author":"Ramesh","date":"October 21, 2017","format":false,"excerpt":"Windows 10 and 11 include a beneficial security feature named Controlled folder access, which is part of the Microsoft Defender Exploit Guard. You may have noticed the Unauthorized changes blocked notifications. Microsoft Defender's Controlled folder access feature is the one behind those notifications. Controlled folder access helps you protect valuable\u2026","rel":"","context":"In "Windows 10"","block_context":{"text":"Windows 10","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/windows-10\/"},"img":{"alt_text":"defender controlled folder access - blocked apps list","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2017\/10\/wevtutil-defender-blocked-list.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2017\/10\/wevtutil-defender-blocked-list.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2017\/10\/wevtutil-defender-blocked-list.png?resize=525%2C300&ssl=1 1.5x"},"classes":[]},{"id":1051,"url":"https:\/\/www.winhelponline.com\/blog\/scan-drives-mse-autoplay-dialog\/","url_meta":{"origin":4579,"position":5},"title":"Scan USB Drives Using Microsoft Security Essentials via the AutoPlay Dialog","author":"Ramesh","date":"May 26, 2010","format":false,"excerpt":"We\u2019d like to share with you an interesting registry hack that adds a Microsoft Security Essentials AutoPlay handler so that you can thoroughly scan a CD\/DVD media or USB flash drive for viruses, via the AutoPlay dialog. See article Scan Your Thumb Drive for Viruses from the AutoPlay Dialog at\u2026","rel":"","context":"In "Windows"","block_context":{"text":"Windows","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]}],"_links":{"self":[{"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/posts\/4579","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/comments?post=4579"}],"version-history":[{"count":0,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/posts\/4579\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/media?parent=4579"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/categories?post=4579"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/tags?post=4579"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}