{"id":15987,"date":"2020-09-19T00:39:23","date_gmt":"2020-09-18T22:39:23","guid":{"rendered":"http:\/\/159.69.82.204\/win\/?p=15987"},"modified":"2021-04-12T11:07:32","modified_gmt":"2021-04-12T09:07:32","slug":"microsoft-defender-download-feature-wieder-weg","status":"publish","type":"post","link":"https:\/\/borncity.com\/win\/2020\/09\/19\/microsoft-defender-download-feature-wieder-weg\/","title":{"rendered":"Microsoft Defender: Download Feature removed &#8230;"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" style=\"float: left; margin: 0px 10px 0px 0px; display: inline\" src=\"https:\/\/www.borncity.com\/blog\/wp-content\/uploads\/2015\/01\/win102.jpg\" width=\"58\" align=\"left\" height=\"58\">[<a href=\"https:\/\/www.borncity.com\/blog\/2020\/09\/19\/microsoft-defender-download-feature-wieder-weg\/\" target=\"_blank\" rel=\"noopener noreferrer\">German<\/a>]But that was only a very short guest performance. Microsoft had added this 'cool' download feature to its Defender. But security experts wasn't amused about that. All of a sudden the download feature is gone again &#8230;<\/p>\n<p><!--more--><\/p>\n<h3>Defender Download-Feature, that's what we are talking about<\/h3>\n<p>For those blog readers who have not followed it closely, a few short sentences. Microsoft had given Defender a way to download arbitrary files. You can use the command:<\/p>\n<p>C:\\ProgramData\\Microsoft\\Windows Defender\\Platform\\4.18.2008.9-0\\MpCmdRun.exe&nbsp; -DownloadFile -url &lt;url&gt; -path &lt;local-path&gt;  <\/p>\n<p>as administrator to download any file with Windows Defender. Microsoft had described the whole thing in <a href=\"https:\/\/web.archive.org\/web\/20210215024924\/https:\/\/docs.microsoft.com\/en-us\/windows\/security\/threat-protection\/microsoft-defender-antivirus\/command-line-arguments-microsoft-defender-antivirus\" target=\"_blank\" rel=\"noopener noreferrer\">this support article<\/a> in mid-August 2020.  <\/p>\n<p>However, this download feature caused more headaches than enthusiasm among security experts. This is a nice feature for malware authors to download their malicious functions. In early September 2020, I addressed the issue in the blog post <a href=\"https:\/\/borncity.com\/win\/2020\/09\/06\/sicherheitsbedenken-wegen-microsoft-defender-download-feature\/\">Security concerns about Microsoft Defender download feature<\/a>.  <\/p>\n<h3>It's gone again &#8230;<\/h3>\n<p>I just read at <a href=\"https:\/\/www.bleepingcomputer.com\/news\/microsoft\/microsoft-removes-windows-defender-ability-after-security-concerns\/\" target=\"_blank\" rel=\"noopener noreferrer\">Bleeping Computer<\/a> that Microsoft has removed this feature in the Antimalware Client Version 4.18.2009.2-0 just released.&nbsp; The help does not show the command anymore and when using the option an error is reported. No idea what caused the developers to take this step. <\/p>\n","protected":false},"excerpt":{"rendered":"<p>[German]But that was only a very short guest performance. Microsoft had added this 'cool' download feature to its Defender. But security experts wasn't amused about that. All of a sudden the download feature is gone again &#8230;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[580,2],"tags":[773,76],"class_list":["post-15987","post","type-post","status-publish","format-standard","hentry","category-security","category-windows","tag-defender","tag-windows-10"],"_links":{"self":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/15987","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/comments?post=15987"}],"version-history":[{"count":0,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/15987\/revisions"}],"wp:attachment":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/media?parent=15987"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/categories?post=15987"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/tags?post=15987"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}