How do I allow programs that generate "high" or "severe" alerts in MS Security Essentials?

6

2

Microsoft Security Essentials seems to allow only quarantine or delete actions for program that it deems to have "high" or "severe" risk.

However, it also assigns these levels to what it considers to be "hacking tools".

Is there a way to override this nanny behaviour and force programs on the allowed list?

Here's a screenshot showing the lack of an "Allow" option in the drop-down list:

enter image description here

Alex O

Posted 2011-06-22T13:49:22.997

Reputation: 423

Not an answer to the question, but I found that if you quarantine it and then restore straight away, the file becomes unblocked. Having said that, this seems to suggest MSE is no better in terms of UI than all the other products... – RomanSt – 2012-11-01T10:00:07.310

Short answer: You don’t. – kinokijuf – 2012-12-12T19:59:51.817

Answers

2

Reinstalling the program solved the issue.

Alex O

Posted 2011-06-22T13:49:22.997

Reputation: 423

Which program? I tried re-installing MSE, but that hasn't changed anything. – EM0 – 2013-10-09T16:34:24.360

Uninstalling completely then reinstalling worked for me. Don't really know what the problem was. – Alex O – 2013-10-09T20:42:52.493

2

I also had this issue, but after changing each default action to "recomended action" (also made sure that the box to auto perform default actions was unchecked).

STILL no "allow". BUT, if you CHECK THE BOX next to the item in quarantine, THEN you can allow it.

I was very frustrated until I checked the box!

CALVIN

Posted 2011-06-22T13:49:22.997

Reputation: 21

1

  • When Security Essentials displays the notification, click the Show details link.
  • In the Potential threat details dialog box, select the program, click the down arrow in the Recommendation column, and then click Allow.
  • Click Apply actions. If you're prompted for an administrator password or confirmation, type the password or confirm the action.

EDIT:

If no "Allow" option is available. Submit your file to Microsoft: Open MSE. To the right of MSE is a down pointer. CLick on that and select submit malicious sample, and fill in the form with the appropriate information.

SOURCE

admintech

Posted 2011-06-22T13:49:22.997

Reputation: 6 970

I have found no way to undo this allow action, I have done this for a file or two and can find no way to reverse this decision, it does not put it in the allow list either. – Moab – 2011-06-22T15:08:47.037

3I would not be asking this question if "Allow" was on the list for such events – Alex O – 2011-06-23T04:46:23.500

@Alex O the allow option should be in the drop down box which in the screenshot displays "Quarantine" – admintech – 2011-06-23T07:49:48.127

Unfortunately, "Quarantine" is the only option in that dropdown. – Alex O – 2011-06-24T04:28:37.567

If no "Allow" option is available. Submit your file to Microsoft: Open MSE. To the right of MSE is a down pointer. CLick on that and select submit malicious sample, and fill in the form with the appropriate information. – admintech – 2011-06-24T07:43:10.987

-1: does not answer the question – EM0 – 2013-10-09T16:10:14.487

1

If you change the default action of severe alert level to "Recommended action" it will allow you to allow the "threat".

iddqd

Posted 2011-06-22T13:49:22.997

Reputation: 111

This doesn't work if MSE has already detected a "threat". It might work on new items, not sure yet. – RomanSt – 2012-11-01T09:57:18.043