Internet Explorer 9 SmartScreen Filter

 

Microsoft included SmartScreen Filter in Internet Explorer from version 8. It is a feature that helps in detecting malicious Websites and programs, so that the users can avoid socially engineered malware phishing websites and online fraud. It warns you, when you are about to visit a malicious Website or when you try to download a malicious program from the Internet.

How does it work

SmartScreen Filter works in a couple of ways. It first checks the address of the website you are visiting against a list stored on your computer that are believed by Microsoft to be legitimate. If its not in the list, it then uses a frequently updated online list of known malicious URL’s to check the Websites you visit.

It also checks the URL lists for reported malicious software sites, before a file download is commenced. In addition the SmartScreen Filter evaluates the characteristics of the web pages in the background to detect suspicious behavior and alerts the user if typical characteristics of an unsafe website is found.

internet explorer 9 blocking malicious site 590x328 Internet Explorer 9 SmartScreen Filter

SmartScreen Filter blocking a malicious site

internet explorer 9 file download block Internet Explorer 9 SmartScreen Filter

SmartScreen Filter blocking a malicious file download

Basically it checks the reputation of the URL’s, whether the computers hosting files at the URL are reported for phishing or known to distribute malicious content. If it finds a match, it will display a red warning message notifying that the Website has been blocked for your safety. A message to proceed with caution is displayed in case of a suspicious site.

According to Microsoft, SmartScreen Filter only blocks those sites that are verified as unsafe by reviewers at Microsoft and third party data providers.

File is not commonly downloaded and could harm your computer

internet explorer 9 not commonly downloaded 590x273 Internet Explorer 9 SmartScreen Filter

File not commonly downloaded warning from smartscreen filter.

If you see a message as above, it does not mean that the file is malicious or the Website is fraudulent. You are just cautioned against installing the software unless you trust the publisher and the Website. SmartScreen Filter checks the program with a list of most commonly downloaded software by other Internet Explorer users and also against a list of malicious software. If the program you are trying to download is not on either of the lists, Internet Explorer will display the “file not commonly downloaded” warning.

SmartScreen Filter Options

internet explorer 9 smart screen filter options 590x286 Internet Explorer 9 SmartScreen Filter

You can access SmartScreen Filter options by clicking on the Tools icon and then expanding the Safety menu item.

Check this Website: You can check any that you currently visiting by using this option.

Turn off/on SmartScreen Filter: Turn SmartScreen filter off or back on.

Report unsafe website: If you stumble upon a suspicious website, you can report that site to Microsoft.

What information are you sharing with Microsoft?

SmartScreen Filter uses a secure SSL (Secure Socket Layer) web connection to send website addresses to Microsoft.

If you opt in to SmartScreen Filter the following will be sent to Microsoft:

  • The address of the Website you are visiting
  • Referrer data, search term associated with the website
  • Standard computer information
  • SmartScreen Filter version number
  • Periodical information about your usage of SmartScreen Filter
  • Name, file path and file identifier of files downloaded

More Images of SmartScreen Filter

Sources of Information:

<think>好的,用户现在的问题是关于Smart Screen的功能或解决相关问题,但之前的对话历史显示他们之前讨论了C语言中的NULL指针,以及通过Wireshark诊断HTTP/1.1的队头阻塞问题。我需要先确认用户提到的“Smart Screen”具体指的是什么,因为可能有不同的解释。 首先,Smart Screen可能指微软的Windows SmartScreen,这是一种安全功能,用于保护用户免受恶意软件和钓鱼网站的侵害。它通过检查下载的文件和访问的网站的信誉来工作。用户可能遇到了与SmartScreen相关的误报问题,或者想了解如何配置或禁用该功能。 但用户之前的问题涉及C语言的NULL指针和网络诊断,可能这里的Smart Screen有其他上下文。比如,某些硬件设备如智能屏幕(例如智能显示器或物联网设备)也可能称为Smart Screen,但这种情况较少见。需要进一步确认,但根据常见情况,先假设是Windows SmartScreen。 接下来,检查用户提供的引用内容,其中讨论了NULL在C语言中的本质,以及宏定义的问题。这些可能与当前问题无关,但用户可能误将“Smart Screen”与编程中的NULL混淆,比如在代码中遇到SmartScreen相关的问题,或者想了解如何在编程中处理SmartScreen功能。 不过,用户的问题明确提到“我想了解Smart Screen的功能或解决与其相关的问题”,因此应优先解释Smart Screen的功能,可能的安全设置,常见问题及解决方法。需要确保回答结构清晰,分步骤说明,并提供相关问题以供进一步探索。 需要确认用户是否有特定的使用场景,比如开发中集成SmartScreen,或者遇到误报需要排除。根据之前用户对技术细节的关注(如Wireshark抓包、C语言底层),回答可能需要包含技术细节,如注册表设置、组策略配置或代码签名相关的内容。 此外,用户可能希望了解如何调试与SmartScreen相关的问题,例如应用程序被阻止,如何获取证书,或如何提交文件以解除误报。需要涵盖这些方面,并确保引用相关资源或官方文档链接,以增加可信度。 最后,生成的相关问题应引导用户深入了解SmartScreen的工作原理、配置方法、开发注意事项以及故障排除技巧。确保问题覆盖不同层面,帮助用户全面理解该功能。</think>### Smart Screen(Windows Defender SmartScreen)功能解析与常见问题处理 Smart Screen是微软Windows系统内置的安全防护功能,主要用于**防御恶意软件、钓鱼网站和不可信文件**。以下从功能原理、触发场景和调试方法三个方面进行解析: --- #### **一、Smart Screen的核心功能** 1. **文件信誉检查** - 当用户下载或运行未知来源的可执行文件(`.exe`、`.msi`等)时,SmartScreen会通过微软云数据库验证文件的**数字签名**和**下载历史信誉**。若文件未被广泛使用或无有效证书,会弹出警告弹窗[^1]。 - **技术实现**: 文件哈希值上传至微软服务器,匹配已知恶意文件库(类似杀毒软件特征库)。 2. **网页防护** - 在Edge浏览器中,SmartScreen会拦截已知的钓鱼网站或恶意域名,阻止用户访问[^2]。 - **过滤逻辑**:基于域名信誉数据库(实时更新)。 3. **开发者适配** - 若开发者发布的软件被误判,需通过**微软合作伙伴中心**提交文件进行人工审核,并申请代码签名证书(如EV Code Signing Certificate)提升信任度[^3]。 --- #### **二、典型问题与解决方案** 1. **误报问题(软件被错误拦截)** - **临时绕过**: 用户可通过右键点击文件 → *属性* → 勾选**解除锁定**(针对从网络下载的文件),或点击警告弹窗中的*更多信息* → *仍要运行*。 ```powershell # 管理员权限下禁用SmartScreen(不推荐) Set-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer" -Name "SmartScreenEnabled" -Value "Off" ``` - **开发者根治方案**: 为软件添加有效的代码签名证书(如DigiCert、Sectigo等机构签发)。 2. **企业环境配置** - 通过组策略管理SmartScreen行为: ```plaintext 路径:计算机配置 → 管理模板 → Windows组件 → 文件资源管理器 → 配置Windows Defender SmartScreen ``` 可选策略:**关闭**、**仅警告**、**阻止**。 3. **调试与日志分析** - 使用**事件查看器**定位拦截原因: 打开`事件查看器` → 定位到`Windows日志\应用程序` → 筛选事件来源为`WinDefend`。 - 关键事件ID: - `1116`(SmartScreen阻止应用程序执行) - `1117`(SmartScreen允许应用程序执行) --- #### **三、与开发相关的注意事项** 1. **代码签名证书类型** - **Standard Code Signing**:基础证书,需定期续订。 - **EV Code Signing**:需硬件令牌(USB Key),签名后立即获得微软信任,无需等待信誉累积[^3]。 2. **签名工具示例** ```powershell # 使用SignTool签名(Windows SDK内置工具) signtool sign /fd SHA256 /f "cert.pfx" /p "密码" "app.exe" ``` 3. **绕过SmartScreen的非法风险** - 修改文件哈希(如加壳、混淆)可能导致被标记为恶意行为。 - 禁用系统SmartScreen会显著降低安全性,需谨慎操作。 --- ### **相关问题** 1. 如何为开源软件申请免费的代码签名证书? 2. SmartScreen如何影响Windows Store应用的审核流程? 3. 在虚拟机环境中测试SmartScreen拦截行为需要注意哪些配置? 4. 如何通过注册表精确控制SmartScreen对不同文件类型的检查级别? --- 如需进一步分析具体场景(如错误代码、企业策略部署),可提供更多上下文信息。
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值