If you’re anything like me and you love XBOX and IT as much as I do, you’ll get a kick out of this video. Trevor and Sam are back for their 3rd installment in the Talkin’ IT series. This time Sam has a “spinning green doughnut” that is taunting him. It’s the Great Master Russinovich and SysInternals to the rescue! Will Sam downgrade to Windows XP? Will he learn how to cut the fat from his MSCONFIG files? Will Trevor figure out what’s up with Mr. Canfield’s toupee? Watch and find out!

(Yes, we like to have a little fun as we attempt to inform IT professionals like yourself about Windows 7.)

If you aren’t familiar with Talking About Windows.com, Brandon did a piece on our first viral video here. But in all seriousness, we have a lot to say about the performance enhancements in Windows 7. OS optimization has been a key area of focus for us her at Microsoft.

Watch for new videos next week from key members of the engineering team and from IT pros like yourself.

So keep the comments coming and don’t forget to ask your questions to our Windows 7 Engineering team by joining the conversation at Talking About Windows.com

As you all know, Microsoft released a beta of its free antivirus and antispyware utility today once code named 'Morro'. Microsoft Security Essentials is a free product for Windows 7, Vista and XP customers. Back in 2006 Microsoft introduced its security service suite Windows Live OneCare. Microsoft recently decided that they would discontinue Live OneCare in June 2009 and replace it with Security Essentials. Based on Microsoft's own Forefront 2.2 enterprise security technologies, the aim of Security Essentials is to provide an economically friendly way to encourage protecting your Windows PC. A lot of computer users who buy a new PC often get a free trial period version of popular security utilities. When they expire, the user tends to not purchase a full license but continue using the expired software. There are persons who out right consciously decide they are not going to purchase additional security software. For users like that, Microsoft has an answer, its called Security Essentials.

So, its free, but there are other free Antivirus products out there such as Free AVG and countless others? Microsoft does not have a problem with that, they are not competing with either commercial or free Antivirus products. The focus of Security Essentials is for those persons who do not have any security software installed on their Windows systems at all or don't keep security software updated.

Installing Microsoft Security Essentials (click image to enlarge)

Installation

Quick and easy is how I would describe the installation process. I was very surprised at how small the setup file is too. For persons on a slow Internet Connection, downloading Security Essentials will be a breeze. The 3.7 MB executable for Windows Vista and 7 x64 is the smallest out of all the platforms its available for, which range from 4.7 to 7 MBs. The install wizard requires that you have a genuine installation of Windows before you can install the software. Security Essentials encourages that you remove any currently installed Antivirus and AntiSpyware products before installing it as this can result in conflicts and performance issues. I already had Kaspersky beta for Windows 7 installed. I was still allowed to install MSE and I was able to remove Kaspersky after installation. MSE also disables the bundled Windows Defender AntiSpyware utility that comes with Windows 7 and Vista. After completing the installation, you can immediately download signature updates and scan your PC for malicious software.

Microsoft Security Essentials user interface

Anything special

Just like most Antivirus utilities, Microsoft Security Essentials scans your PC's hard disk, other storage devices and main memory to detect viruses and spyware and also deletes or quarantines them. It scans disk drives for signature characteristics strings by known viruses. Security Essentials also looks for suspicious behavior, such as attempts to erase or alter areas of your system. The interface is a very slick presentation that provides a cohesive tabbed layout of activities, history and settings, which is quite similar to Windows Defender if you have ever used it. I was hoping that the software though would display information like how old the Antivirus and AntiSpyware signatures were since they were last updated although the software indicated clearly that it needed an update based on a orange banner and computer display icon. I was also informed by Action Center in Windows 7 that the program is out of date.

Checking for virus and spyware definitions

Microsoft Security Essentials indicating its Updated

I noticed that Security Essentials refused to give me access to both History and Settings area of the utility. I suspect this is to prevent malicious programs from infiltrating the program and disabling it. Once I successfully updated MSE, I was granted access to those areas of the utility. Updating MSE is clearly emphasized with tips about why it is important to do so. For a new computer user, this definitely takes the complexity out of using security software with well explained information. Concerning updating, I hope Microsoft provides an online repository similar to Symantecs SARC where I can manually download the latest definition files and apply them on PC's that might not have reliable Internet access with MSE installed, especially for persons who might be on slower connections, this will be a handy convenience.

Running a Scan, a screenshot of MSE's memory usage in Task Manager (right)
(Click image to enlarge)

Microsoft should add a tab specifically for scanning, I notice the Scan execution is not well thought out and might trigger some sense of confusion. I would like a Custom Scan area with Scan tab that allows me to select the drives that I want to scan, instead of me clicking Custom, click Scan and it brings up a separate dialog. I notice when I select 'Full Scan' and click 'Scan' it scans the system partition first. I am currently running Windows 7 on a logical partition, I would prefer if MSE scans that first or ask me, would you like to scan these drives too.

The History tab provides a centralized location for managing malicious threats

Users can also take advantage of options such as contextual scan menu in Windows Explorer shell for on the fly scanning of folders and drives. I notice that MSE's Help Menu features an option to upgrade the program which suggest that the latest version of the utility can be easily kept updated and easy to install all from within the program.

Settings area for Security Essentials

Maintenance and Configuration

MSE integrates nicely with Windows 7's Action Center Security area, providing centralized links to quickly update the program without having to do so through the utility itself. Security Essentials Settings are organized into a well thought out list of options and settings that allows the user to easily customize the the utilities functionality. A list view of options include the following:

Scheduled scan: Here you schedule when you would like MSE to scan your PC for threats in addition to checking for virus and spyware definitions.

Default actions: Lets you decide how to handle detected threats, by letting you define the default action for each alert level such as Severe, High, Medium, or Low.

Real-time protection: Alerts you when viruses, spyware or other potentially unwanted software attempts to install itself or run your computer.

Excluded files and locations: When you run a scan or use real-time protection, you can exclude certain files and locations.

Excluded file types: You can exclude certain file types. Excluding certain file types can help speed up the scan, but may leave your computer less protected.

Excluded processes: Allows you to exclude certain processes that run on your PC, examples include .cmd, .bat, .pif, .scf, .exe, .com or .scr.

Advanced: Provides a wide grouping of options for scanning archived files such as .ZIP and .CAB. You can optionally choose to scan removable drives (unchecked by default). Apply a system restore point before applying actions to detected items and allow users with limited privileges on the PC to view Detected items in the History tab.

Microsoft SpyNet: Just like Windows Defender, MSE includes support for Microsoft's online community for responding to potential threats.

Once installed Security Essentials will disable Windows Defender if its installed

Scanning Experience

Scanning your computer is probably a very mundane task. As with Security Essentials, there is no glitz or glamour, its quite reminiscent of using Windows Defender. I notice that when I started scanning a 2 GB USB Thumb drive, the system started feeling sluggish. Although I understand that this is still a beta, it was quite noticeable and I started hearing my computer fan spinning up loudly. I checked Task Manager to see how much memory MSE was consuming and I was quite surprised by how little it was, a total of 4 MBs. The scanning process took approximately 11 mins to complete. I went ahead and did a scan of my local disk which took approximately 40 mins (20 GBs). Overall its good and the memory usage is quite impressive.

Conclusion

What I like most about Microsoft Security Essentials apart from being free is the focus on simplicity with substance. The interface features a clean, well organized design that's easy to work with and maintain. Integration with Windows technologies like Security Center in XP/Vista and Action Center in Windows 7 will provide the cohesive experience that users expect from security utilities such as this. When combined with Windows 7's rich suite of security technologies already built in such as UAC, DEP, Patch Guard, Safe Unlinking and ASLR, users will certainly enjoy an even more complete security experience. Its early days yet, but Microsoft is doing something I believe that's right for both Windows and its user base. Personally, I wouldn't mind if Windows came with a program like Security Essentials already built in. With a strong brand identity behind it and I am sure strong marketing, this will encourage users to ensure that their Windows PC is protected.

Availability

Microsoft is providing Security Essentials as a limited beta open to 75,000 potential testers in the following countries: United States, United Kingdom, Israel (English only), People’s Republic of China (Simplified Chinese only) and Brazil (Brazilian Portuguese only).

Related

Download Microsoft Security Essentials Link should be live at 12 ET
Introducing 'Microsoft Security Essentials'
Microsoft Windows Defender Beta 2 Preview

Resources

Security Changes to AutoRun in Windows 7
Windows Security Blog: Windows 7 Security: Helping Enable the Mobile Workforce
Windows Team Blog: Windows 7: A New Approach to Securing Today’s Enterprise
Enhanced Security features in Windows 7

W32/AntivirusPlus.BZ is a trojan. The trojan will infect Windows systems.
It displays an attractive interface to entice the user to click on it.

This trojan Copies its files to Program Files\Antivirus Plus, Windows\system, Documents and Settings\Default User\Local Settings\Temporary Internet Files as hidden files or active non-hidden files.
This trojan information updated on June 12, 2009.
Other names of W32/AntivirusPlus.BZ Trojan:
This trojan is also known as Win32.TRCrypt.XPACK, TrojanDownloader:Win32/Renos.BAO, Fraudtool.AntivirusPlus.V.

Damage Level : Medium/High
Distribution Level: Medium
W32/AntivirusPlus.BZ Trojan Manual Removal Instructions
Recommend Removal from Safe Mode:
How to Start in Safe mode:
Restart your Computer, Press F8 Repeatedly, when your Screen turns on, Select Safe mode, press enter.

• [ Kill the Process, Use Killbox if your Access Denied ]

[In Windows Vista Run As Administrator, After Execution System Will Restart]

• %Windows\System\kernel32.exe
• %Windows\System\dop.exe
• %Windows\System\svchost.exe
• %Program Files\Antivirus Plus\AntivirusPlus.exe
• %Windows\System32\InternetExplorer.dll
• %Documents and Settings\Default User\Local Settings\Temporary Internet Files\InternetExplorer[1].dll
• %Documents and Settings\Default User\Local Settings\Temporary Internet Files\AntivirusPlus[1].exe
• %Documents and Settings\Default User\Local Settings\Temporary Internet Files\se[1].exe
  [ No Exact Information about Files, search above related files in Program files Folder ]
  If you have any of these files in running process from task manger, end the process before removal.
  Note: if task manager is disabled, Download the following file, Click to Download - Enable Registry.reg [ Right Click - Save Target As/Linked Content As ]
  Open it with Regedit.exe [%system32\regedit.exe], then it Confirms Add to registry Yes or No, Confirm Yes, then click Ok.

Welcome to yet another Windows 7 Taskbar post. In the previous post, Developing for the Windows 7 Taskbar – Get to Know Your Application ID , we introduced a very important component of the underlying architecture of the Taskbar, the Application ID (AppID), which is the key controller of how different applications are grouped under the same Taskbar button. The AppID also has a direct affect on how Jump List items are aggregated and populated in the Jump List.

Microsoft designed the Windows 7 Taskbar to provide users with quick and easy access to those “things” they use most frequently. “Things” can be any type of content such as pictures, music, word documents or links and shortcuts to applications or folders, or any other type of “clickable” item in Windows. By quick and easy access, we mean the ability to access commonly used programs with a single mouse click or with a significantly reduced number of clicks per operation. Quick and easy access also means users should be able to “jump” directly to those things they want to work with and start working with them in a single mouse click. To provide this functionality, the Windows 7 Taskbar introduces the concept of “Jump Lists.” More info about the reasons and background for creating the Taskbar Jump List can be found in Chaitanya’s Engineering Windows 7: The Windows 7 Taskbar post, and Windows 7 New Taskbar - An Overview video on Channel 9.

As much as I love talking about the reasons for creating the new Taskbar (since I love user functionality and usability in general) I am going to focus on the API for using the Taskbar. As a developer, you should think of a Jump List as your application's own mini Start Menu. Jump Lists bring to the surface commonly used destinations (nouns) and tasks (verbs) of a program. This enables easy user access to destinations by eliminating the need to launch the application and then load the relevant content, or by performing common tasks without launching the application in advance. The following picture illustrates how Jump Lists work with Microsoft Office Word 2007. You can see that under the “Recent” category, there is a list of recent documents that I’ve used with Office Word. Clicking on one of the items in the “Recent” list will launch Office Word with the relevant document already loaded.

We previously identified Word 2007 as an example of an application that “plays” nicely with the Windows 7 Taskbar even if that application was released a long time before the Windows 7 Taskbar was available. The Taskbar buttons are all grouped under the same Taskbar icon and the Jump list is automatically populated with the most recently used Word documents. In the next post, I will explain in detail how Jump List are populated automatically like Office Word 2007 and word documents. For this post, let’s focus on the different Jump Lists players.

The default Out-of-The-Box tasks that are shipped provide the means to launch a new instance of the application, to pin or unpin an application to the taskbar, and to close the application. You can access the Jump List by right clicking on an application icon in the Taskbar. However, as the following picture illustrates, you can opt to take more control of the Taskbar experience by customizing the context of the Jump List for your application.

Definitions from the Windows 7 SDK:

”… Destinations are items that appear in the Recent, Frequent, or custom categories (the 'Important' category in the diagram above), based on the user’s item usage. Destinations can be files, folders, Web sites, or other content-based items, but are not necessarily file-backed. Destinations can be pinned to or removed from the Jump List by the user. They are generally represented by IShellItem objects, but they can also be IShellLink objects…”

”…Tasks are common actions performed in applications that apply to all users of the application regardless of the individual usage patterns. Task can’t be pinned or removed. Tasks are represented by IShellLink objects because they are actually links (with parameters – optional) to commands – 'Actions'…”

As developer, you can:

1. Control Application Destinations (that is control the items you want users to be able to “Jump” directly into and start working on)
   1. Destinations can be any one of the known categories such as Recent or Frequent.
   2. The Custom category is just like any other Destination category, except that it allows you to create a new name for that category as well as populate it with items of your choice.
   3. The Pinned category is provided for pinned items that users want to keep permanently in their Jump Lists. Please note: ONLY users can pin items in the Jump List, there is NO supported programmatic way that you, as developer, can pin an item.
   4. You can completely remove the Pinned category from the Jump List so the user cannot pin items – but you might want to think twice before preventing users from pinning items in your application.
2. Define Common User Tasks
   1. The Taskbar surfaces its own out-of-the-box tasks such as launching, pinning/unpinning, or closing the application. As developers we have no control over the Taskbar Tasks. However, we do control the User Tasks.
   2. User Tasks are common tasks the application developer wants to surface at the Jump List level that will enable users to perform a task directly from the Jump List (for example, Play all music in media player without switching to media player). Usually, this will result in launching an instance of the application and performing the task, or launching another application, like Internet Explorer, when clicking on the “Go to MSN Home Page” task in the Windows Live Messenger Jump List as shown in the next picture. Again, all of the above Jump List functionality saves time and reduces the number of clicks needed to achieve the user's end goal, thereby making the user happy.

In the next post, we will dive into the Taskbar Jump List API. But first, we need to address the Taskbar programming model. The Taskbar exposes its set of APIs like any other Windows Shell component, through a set of COM interfaces. However, there are a few actions we developers can do even before starting to use the Windows Taskbar COM APIs.

Here is my formal review of Windows 7 Release Candidate just published on ActiveWin.com. Although the RC has been out a good while now, its still a great read that takes a hard look at some of the other deep innovations and benefits this release of Windows introduces.

What can I say? Windows 7 just keeps getting better. It’s been a long pause since January 7^th 2009, but Microsoft has finally quenched our thirst with a brand new build of the next version of the Company’s desktop operating system and not just any build either. Release Candidate signifies Microsoft is on the road to RTM. A Release Candidate build often gives a hint of a development release that could potentially become the final product. Microsoft has also confirmed that Windows 7 will be finalized in the second half of July, with General Availability expected by October 22^nd 2009. I have covered Windows 7 since the early alpha build 6801 released to attendees at the Professional Developers Conference late October 2008. I am not going to go over everything, just some technologies and components that I never got to look at in build 7000 and some of the improvements Microsoft has made since the last build and a look at some scenarios such as in-place upgrading and Anytime Upgrade.

Read the entire preview here

Related

ActiveWin.com: Microsoft Windows Live Essentials - Review