eWEEK content and product recommendations are editorially independent. We may make money when you click on links to our partners. Learn More.
Microsoft Corp.s Windows AntiSpyware technology has been renamed “Windows Defender” and has been expanded to detect and remove rootkits, keystroke loggers and other forms of malware.
The revamped application will be bundled into the Windows Vista operating system, but users will be free to choose a competing spyware protection product from a redesigned Windows Security Center.
Jason Garms, group program manager for Microsofts anti-malware technology team, made the announcement in a blog entry that also included confirmation that rootkit detection will be fitted into the product.
As previously reported, Microsoft will use rootkit detection technology from its Strider Ghostbuster research project.
Strider Ghostbuster is a prototype tool developed by Microsofts Cybersecurity and Systems Management Research Group.
“Our solution has really been about more than just the standard definition of spyware,” Garms said.
“Weve always said we will provide visibility and control, as well as protection, detection and removal from other potentially unwanted software, including rootkits, keystroke loggers and more.”
“Making the engineering change from Windows AntiSpyware to Windows Defender took a lot of careful coordination across our team to ensure that the strings in the UI got changed, the help files all got updated, registry keys, file names and properties, as well as a couple of images all got changed,” Garms said.
The revamped product will be fitted with a new user interface and a significant change to the way malware signature updates are delivered.
“The engine is now moved to a system service, and signatures are delivered over Windows Update. The detection mechanisms have also been radically improved by applying to spyware threats all the great detection technology we use in our anti-virus engine,” Garms added.
Although the changes are being geared for Windows Vista, Garms said the enhancements will also be available to existing Windows XP users via a software refresh.
In Vista, users will be allowed to disable or turn off Windows Defender and install a third-party anti-spyware application.
The Vista Security Center will also be able to detect if an anti-spyware application such as Windows Defender is running and operating normally.