Windows Defender and USB flash drives

Page 1 of 2 12 LastLast
  1. sportsfan148's Avatar
    Posts : 672
    Windows 10 Home
       #1

    Windows Defender and USB flash drives


    Ive read that Windows Defender doesn't automatically scan any attached removable drives such as USB flash drives when a Full Scan is performed.
    If that's correct. Lets say that you insert a USB flash drive that has somehow become unknowingly infected with malware. How does Windows Defender detect it and keep it from infecting your PC if it doesn't scan this flash drive immediately when it is inserted into a USB port on the PC?
      My ComputerSystem Spec

  2. NMI's Avatar
    NMI
    Posts : 236
    Windows 10 Pro, Version 1903
       #2

    Note:

    If real-time protection is enabled, files are scanned before they are accessed and executed. The scanning scope includes all files, including those on mounted removable devices such as USB drives.

    Configure Windows Defender Antivirus scanning options


    You can set a group policy that allows you to manage whether or not Windows Defender scans for malicious software and unwanted software in the contents of removable drives, such as USB flash drives, when running a full scan.

    Removable drives can always be scanned during a quick scan and custom scan.

    Enable Windows Defender Scan Removable Drives in Windows 10
      My ComputerSystem Spec

  3. sportsfan148's Avatar
    Posts : 672
    Windows 10 Home
    Thread Starter
       #3

    NMI said: View Post
    Note:

    If real-time protection is enabled, files are scanned before they are accessed and executed. The scanning scope includes all files, including those on mounted removable devices such as USB drives.

    Configure Windows Defender Antivirus scanning options


    You can set a group policy that allows you to manage whether or not Windows Defender scans for malicious software and unwanted software in the contents of removable drives, such as USB flash drives, when running a full scan.

    Removable drives can always be scanned during a quick scan and custom scan.

    Enable Windows Defender Scan Removable Drives in Windows 10
    Thanks for providing the links. I don't want to start making Group Policy changes etc. I prefer to leave those things well alone at their default settings. If I want to manually scan a USB flash drive I right click on the drive and select Scan with Windows Defender from the context menu. Ive never used the Custom Scan option and I never do manual quick scans either because Defender does automated quick scans itself. I perform a once weekly manual Full Scan.
    I always have Real Time Protection turned on which seems to mean, judging by those links you show, that when a USB flash drive is inserted into a USB port that Windows Defender will automatically scan the drive for malware. Have I got that right?
    I'd be interested to know how others use Windows Defender to protect their PC when real time protection is on 24/7 as in my case. When you have Real Time Protection turned on does that mean that all Removable Drives are automatically protected?
    Last edited by sportsfan148; 1 Week Ago at 13:53.
      My ComputerSystem Spec

  4. AndreTen's Avatar
    Posts : 18,175
    Windows 10 (Pro and Insider Pro)
       #4

    sportsfan148 said: View Post
    Thanks for providing the links. I don't want to start making Group Policy changes etc. I prefer to leave those things well alone at their default settings. If I want to manually scan a USB flash drive I right click on the drive and select Scan with Windows Defender from the context menu. Ive never used the Custom Scan option and I never do manual quick scans either because Defender does automated quick scans itself. I perform a once weekly manual Full Scan.

    I always have Real Time Protection turned on which seems to mean, judging by those links you show, that when a USB flash drive is inserted into a USB port that Windows Defender will automatically scan the drive for malware. Have I got that right?

    I'd be interested to how others use Windows Defender to protect their PC when real time protection is on 24/7 as in my case. When you have Real Time Protection turned on does that mean that all Removable Drives are automatically protected?

    No, You have the answer above:

    files are scanned before they are accessed and executed

    meaning, when you open that folder, files will be scanned (assuming default system options are set - no indexing of removable drives etc..)

    Edit:
    I'll leave that written above, to remind me about read more careful. WD will scan content, if real time is enabled...
    :end
    If you want to change that, set appropriate options, like shown in Tutorials posted in previous post.

    There is an app to set all the options in Windows defender via graphical interface, but non experienced user could get into some problems.

    It is called ConfigureDefender.
    Last edited by AndreTen; 1 Week Ago at 17:11.
      My ComputersSystem Spec

  5. sportsfan148's Avatar
    Posts : 672
    Windows 10 Home
    Thread Starter
       #5

    AndreTen said: View Post
    No, You have the answer above:

    files are scanned before they are accessed and executed

    meaning, when you open that folder, files will be scanned (assuming default system options are set - no indexing of removable drives etc..)

    If you want to change that, set appropriate options, like shown in Tutorials posted in previous post.

    There is an app to set all the options in Windows defender via graphical interface, but non experienced user could get into some problems.

    It is called ConfigureDefender.
    So in the case of a USB flash drive. If files are scanned before they are accessed and executed then you wouldn't know it had malware until you came to use the flash drive.
    Lets say the flash drive was your bootable Windows 10 installation media that you had created several months before. If you were going to now use it for a clean installation and it had somehow got infected with malware you wouldn't know until after the installation..unless you manually scanned the flash drive before using it
      My ComputerSystem Spec

  6. AndreTen's Avatar
    Posts : 18,175
    Windows 10 (Pro and Insider Pro)
       #6

    Without any special options.. any file would be scanned in the process of reading from original and writing.
    USB is also scanned in the moment of connection, but only the structure and files that are accessed (drive structure table and any files that are processed...

    If files would be altered after that, I'm not sure, but guess you're right.

    Admit, you got me to talk about things I'm not precisely familiar about.. There are some experts here..
      My ComputersSystem Spec


  7. Try3's Avatar
    Posts : 2,470
    Windows 10 Home x64 and Pro x86
       #7

    WD scans the whole of any connected drive if you leave it connected long enough.

    You can see this for yourself if your connected drive has an activity light. Connect it, do whatever job you wanted to do, leave it connected afterwards. The activity light will start blinking after a short period.

    Denis
      My ComputerSystem Spec

  8. AndreTen's Avatar
    Posts : 18,175
    Windows 10 (Pro and Insider Pro)
       #8

    Try3 said: View Post
    WD scans the whole of any connected drive if you leave it connected long enough.

    You can see this for yourself if your connected drive has an activity light. Connect it, do whatever job you wanted to do, leave it connected afterwards. The activity light will start blinking after a short period.

    Denis
    I think it is Search indexer that is accessing the drive.. as a consequence, WD will check the files that are accessed
      My ComputersSystem Spec

  9. Try3's Avatar
    Posts : 2,470
    Windows 10 Home x64 and Pro x86
       #9

    AndreTen said: View Post
    I think it is Search indexer that is accessing the drive.. as a consequence, WD will check the files that are accessed
    I never set indexing to include any external drives.

    I have experienced WD warning dialogs that it has found a malicious component within files on an external drive [often EaseUS installation files] proving that it is WD scanning them.

    Denis
      My ComputerSystem Spec

  10. AndreTen's Avatar
    Posts : 18,175
    Windows 10 (Pro and Insider Pro)
       #10

    Try3 said: View Post
    I never set indexing to include any external drives.

    I have experienced WD warning dialogs that it has found a malicious component within files on an external drive [often EaseUS installation files] proving that it is WD scanning them.

    Denis
    I have to correct myself. (Thanks Denis...) . this is where you get if trust third person Quotes (in second post)

    WD documentation says:

    If real-time protection is enabled, files are scanned before they are accessed and executed. The scanning scope includes all files, including those on mounted removable devices such as USB drives.
    But, I have this option enabled... default should be Disabled:

    Scan removable drives during full scans only Scan > Scan removable drives Disabled -DisableRemovableDriveScanning
      My ComputersSystem Spec


 
Page 1 of 2 12 LastLast

Related Threads
Is it safe to keep hard drives and flash drives connected all the time (Windows 10), even when shutting down everyday ... ? Or should I use the Eject feature to be safe ... ?
All of a sudden no USB flush drive (different makes) seem to be recognised by Windows but it does recognise USB external drive. I have uninstalled the flush drives in Device manager, power off the pc and power it on again and tried the flush drives...
Windows Defender real time scanning problem with USB flash drives? in AntiVirus, Firewalls and System Security
Has anybody else had any issues when using USB flash drives with antivirus real time scanning? Today I was putting my flash drive back to factory settings using Diskpart. Everything went as expected until after I completed the full format to FAT32....
Windows Defender scanning USB flash drive in the background in AntiVirus, Firewalls and System Security
Hi guys, Whenever I stick my USB flashdrive in my notebook, for some reason it will not paste my files there. The progress bar just says 0% when copying from my Documents folder and pasting to the USB stick. But sometimes. Especially when I leave...
My Windows 10 Home laptop will recognize all of my flash drives but won't recognize any of my external hard drives. They all use to show up but now they aren't. The hard drives show up in disk manager but won't show up in file explorer. I hooked...
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 15:43.
Find Us