Windows Defender users have the option to join Microsoft SpyNet, an online network that lets users contribute information about the suspicious software found on their systems. SpyNet membership is free, and offers both basic and advanced memberships.
When you join SpyNet with a basic membership, you authorize Microsoft to collect basic information on what software Windows Defender finds and the action you chose to take. If you opt for an advanced membership, Windows Defender collects more detailed data on the software it finds, including file names and locations, as well as specifics about how the program works and how it's affecting your computer.
Microsoft uses data gathered via Spynet to help classify applications and determine what software it should investigate for possible inclusion in its spyware database. The idea is that monitoring how users deal with a particular program will allow Microsoft to react more quickly to potential threats.
The catch with SpyNet is that it's not entirely clear what personal information Microsoft might vacuum up from SpyNet members. In fact, Windows Defender makes contradictory claims on this point — when you first install Windows Defender, the default option is to join SpyNet with basic membership, and the install wizard explicitly states that no personal information is collected as a result.
But when you try to join SpyNet later from the Tools menu, the description for both basic and advanced membership states that, "In some instances, personal information might unintentionally be sent to Microsoft; however, Microsoft will not use this information to identify you or contact you."
Given the obvious discrepancy, if you have any privacy concerns you might want to avoid SpyNet at least until Microsoft clarifies what information is collected. It's also probably a good idea to study the Windows Defender privacy policy (a link is provided) carefully so you know exactly what you're agreeing to.
Software Explorer
Just because an application isn't harmful doesn't necessarily mean you want or need it on your system, and Microsoft's MSCONFIG utility has always been a useful tool for combating unwanted yet benign software by helping you identify — and disable if necessary — applications that automatically start each time you boot Windows. Windows Defender includes a tool called Software Explorer that gives you even more information and control — it not only puts you wise to startup programs, but can let you know about pretty much any program running on your system.
You can use Software Explorer to check up on four different categories of software — startup applications, currently running programs, network-connected software, and Winsock service providers. When you pick a category you get a split-pane view that provides basic information (the name of the program and how it's been classified by Microsoft) along with more detailed data including the program's location, size, the date it was installed, and whether or not it came with Windows. When you use Software Explorer to view network-connected programs, you get additional information like which network ports the application is using and remote IP addresses the app's connecting to.
In the case of startup programs, Software Explorer allows you to disable a program or remove it from the startup list entirely. For other types of applications, you can end the process or block it's ability to receive incoming network connections.
If you want additional information on a running application — like the amount of CPU or memory being consumed — a button is provided to take you to the Processes tab of Windows Task Manager. Unfortunately, it doesn't take you directly to the entry for the application you were viewing, so you have to find it yourself.
All in all, Software Explorer is much more useful than MSCONFIG for ferreting out startup stowaways, but there are still plenty of applications Microsoft hasn't yet classified, often leaving it up to you to figure out whether a unfamiliar program is friend, foe, or simply dead weight. We wish Software Explorer offered a way to automatically pull up a Google search (um, we mean a Windows Live search) for unfamiliar program entries.
The Bottom Line
There's probably no anti-spyware utility around that will remove 100% of infections 100% of the time, but that said, we feel that Windows Defender does as good a job of detecting, removing, and preventing infections as any utility we've used in the past. That fact, combined with the fact that it's free, makes Windows Defender worthy of a look.
Pros: Simple, straightforward, and easy-to-use interface, built-in Software Explorer provides detailed information on running apps
Cons: Doesn't scan browser cookies, SpyNet membership might collect personal data
