How does Microsoft identify Malware and Potentially Unwanted Applications

One of Microsoft's main goals for all Windows users is security, and it would be interesting to know how Microsoft identifies malware and potentially unwanted applications. We recently talked about blocking potentially unwanted applications in Edge, and that is one of the ways to keep the Windows experience safe.

How Microsoft identifies malware and PUPs

The four main bases or criteria for Microsoft usage classifications are:

1. Malware or malware
2. Unwanted software
3. Consumer comments
4. Potentially unwanted applications (PUA) or potentially unwanted programs (PUP).

Some software is not necessarily dangerous, but it does ruin the Windows experience. They do this by installing apps without the users' knowledge or by broadcasting advertisements without consent.

1) Malware

These are applications and software that compromise user security. They can steal your personal information, your credit card information and even lock your files. The last one is called Ransomware, which is one of the worst forms of malware we have seen in recent years. This is one of the reasons why Windows Security has introduced access to the controller folder and OneDrive Personal Vault.

Here is the list of methods or processes classified by Microsoft to identify software as malware:

• Back door
• Downloader
• Dropper
• Feat
• hacktool
• Macro virus
• obfuscator
• Password thief
• ransomware
• Rogue security software
• Trojan
• Trojan horse clicker
• Earthworm.

Related: Difference between virus, Trojan horse, worm, adware, spyware, rootkit, malware, backdoor, etc.

2) Unwanted software

It is software that is disrupting your Windows experience. According to Microsoft, software should allow the user to stay in control, not the other way around. Depending on the behavior, Microsoft may identify and then notify the user of any unwanted applications that fall into these categories.

• Lack of choice
• Lack of control
• Installation and removal
• Advertising and advertisements.

Lack of choice

Software with no clear intention, transfers data in the background, installs or removes software, user skins fall into this category. Microsoft also classifies unwanted software if it triggers false alarms on your device's health or requests payment to fix it. There are tons of software out there that claim to speed up your computer. They do this by creating false statements and then offer to buy the pro version to fix it.

Lack of control

Any software that supports the browser experience, modifies search parameters, redirects web traffic without consent, or modifies content without user consent. We saw a lot of software that allowed you to change the default search engine or install toolbars during installation. Probably one of the most annoying problems.

Bad installation and uninstall experience

Some apps are not completely uninstalled even when you uninstall them manually. They are leaving behind programs that continue to do something red to the system. Some of them do their best not to be uninstalled by hiding from Add / Remove programs or deceptive prompts or pop-ups when trying to uninstall it.

Advertising and advertisements

Although it is acceptable to advertise, this should take the consent of the user. Some apps advertise their internal software or third-party software to earn money. The worst part is that they make you click on such an advertisement by downloading files or by opening a web page. They even block the entire view, and chances are you'll never find a close button for such ads.

3) Consumer comments

If you see or encounter such software, you can always submit software for analysis. Microsoft also uses Windows security in conjunction with this, which makes it easy for consumers to report such applications. If many users report software more than once, it will raise a red flag.

A classic example is CCleaner. At one point, it was a must have app for all Windows users. Later, many users reported that the utility could no longer be recommended. Microsoft Answers CCleaner blacklisted links.

4) potentially unwanted application (PUA)

Potentially unwanted apps are not malware, but Microsoft blocks the download of any apps or software that fall into the above categories and more. PUAs are applications that exhibit the following behaviors or fall into these categories:

I hope the message helped you understand what it takes to Microsoft or possibly any security company to identify malware and potentially unwanted applications.