This Windows 10 antivirus update will automatically block potentially unwanted apps

security
(Image credit: Shutterstock / Magura)

Microsoft has announced that Windows 10 will start automatically blocking Potentially unwanted applications (PUAs) in early August. 

This feature was actually included in the Windows 10 2004 May update, but has been disabled by default (unless you're an Enterprise customer) since its release.

However Microsoft Defender will soon instead proactively block PUAs, with a support update from the company announcing the feature noting that, "Potentially unwanted applications (PUA) are a category of software that can cause your device to run slowly, display unexpected ads, or at worst, install other software which may be more harmful or annoying. PUA isn’t malware, but it is software that you often don’t need and probably don’t want."

"In the Windows 10 May 2020 Update we added Potentially Unwanted App blocking for everyone running Windows 10, but customers who wanted to use it still had to turn it on."

"Starting in early August 2021 we’ll begin turning it on by default to make it easier for you to keep your systems performing at their best."

Windows 10 antivirus upgrade

As Microsoft mentioned in its bulletin, PUA's (also dubbed PUPs, or Potentially Unwanted Programs) aren't technically malware, but they're certainly not something you want on your device as they bring the risk of introducing spyware and other security risks to your computer. Not all PUAs are harmful, but some can be a nuisance by generating pop-up ads or slowing down the performance of your device. 

Classification is broad, but it can take the form of adware, invasive programs and browser extensions. Microsoft has its own specified definitions of what it considers to be a PUA. We've outlined them below, but you can read more on how it identifies malware and other security risks on the threat protection section of the Microsoft website.

  • Advertising software: Software that displays advertisements or promotions, or prompts you to complete surveys for other products or services in software other than itself. This includes software that inserts advertisements to webpages.
  • Torrent software (Enterprise only): Software that is used to create or download torrents or other files specifically used with peer-to-peer file-sharing technologies.
  • Cryptomining software: Software that uses your device resources to mine cryptocurrencies.
  • Bundling software: Software that offers to install other software that is not developed by the same entity or not required for the software to run. Also, software that offers to install other software that qualifies as PUA based on the criteria outlined in this document.
  • Marketing software: Software that monitors and transmits the activities of users to applications or services other than itself for marketing research.
  • Evasion software: Software that actively tries to evade detection by security products, including software that behaves differently in the presence of security products.
  • Poor industry reputation: Software that trusted security providers detect with their security products. The security industry is dedicated to protecting customers and improving their experiences. Microsoft and other organizations in the security industry continuously exchange knowledge about files we have analyzed to provide users with the best possible protection.

Analysis: Should you enable/disable the feature?

For the vast majority of Windows 10 users, this update is nothing but good news. After all, nobody wants spammy applications plaguing their device.

There's a small risk that legitimate software could get swept up alongside PUA's though, particularly if you use your computer to mine for cryptocurrencies or work in an industry that uses torrenting software.

Luckily, it's easy to toggle PUA blocking should you need to.

  • Select Start > Settings
  • Go to Update & Security and select Windows Security
  • Activate the "Open Windows Security" button
  • Select App & Browser Control > Reputation-based Protection
  • Toggle Potentially unwanted app blocking to turn the feature on or off

You can also create exclusions within Windows Defender to prevent specific files or applications from being scanned.

  • Select Start > Settings
  • Go to Update & Security and select Windows Security
  • In the Windows Security windows, click on Virus & Protection
  • From there, head into Manage Settings and location Exclusions. 
  • Hit Add or remove exclusions

From here, you can just add the files you want to exclude from Windows Defender, allowing you to keep the new automated PUA blocker enabled. This is preferable to disabling the feature entirely given how malicious PUA's could be. With any luck, Microsoft's proactive approach should hopefully encourage other antivirus providers to take similar action.

Via Bleeping Computer

Jess Weatherbed

Jess is a former TechRadar Computing writer, where she covered all aspects of Mac and PC hardware, including PC gaming and peripherals. She has been interviewed as an industry expert for the BBC, and while her educational background was in prosthetics and model-making, her true love is in tech and she has built numerous desktop computers over the last 10 years for gaming and content creation. Jess is now a journalist at The Verge.

Read more
Phone scammer
Microsoft thinks it could stop this dangerous scam forever
Malwarebytes
Malwarebytes Antivirus solutions review
"Best Free Antivirus Software" next to a laptop being opened
Best free antivirus in 2025
Copilot on a laptop
Microsoft quietly updates Copilot to cut down on unauthorized Windows activations
Woman using a Windows computer with Microsoft Edge
Don’t panic – Microsoft’s Edge browser isn’t about to subject you to a flood of unblocked adverts (not yet, anyway)
PIA running on a laptop
What is PIA's MACE feature?
Latest in Security
Isometric demonstrating multi-factor authentication using a mobile device.
NCSC gets influencers to sing the praises of 2FA
Sam Altman and OpenAI
OpenAI is upping its bug bounty rewards as security worries rise
A stylized depiction of a padlocked WiFi symbol sitting in the centre of an interlocking vault.
Dangerous new CoffeeLoader malware executes on your GPU to get past security tools
China
Notorious Chinese hackers FamousSparrow allegedly target US financial firms
A digital representation of a lock
NYU website defaced as hacker leaks info on a million students
NHS
NHS IT supplier hit with major fine following ransomware attack
Latest in News
Nintendo Switch 2 Joy-Con up-close from app store
Nintendo's new app gave us another look at the Switch 2, and there's something different with the Joy-Con
cheap Nintendo Switch game deals sales
Nintendo didn't anticipate that Mario Kart 8 Deluxe was 'going to be the juggernaut' for the Nintendo Switch when it was ported to the console, according to former employees
Toni Collette in Hereditary
Everything leaving Netflix in April 2025 – from the scariest movie ever made to a beloved DreamWorks animation with 99% on Rotten Tomatoes
Three angles of the Apple MacBook Air 15-inch M4 laptop above a desk
Apple MacBook Air 15-inch (M4) review roundup – should you buy Apple's new lightweight laptop?
Witchbrook
Witchbrook, the life-sim I've been waiting years for, finally has a release window and it's sooner than you think
Close up of Leica M11-P viewfinder
I wince at the prospect of the rumored Leica M11-V – here's why