How good is Windows Defender in 2025?

About this video

• Video Title: How good is Windows Defender in 2025?
• Channel: PC Security Channel
• Speakers: Leo
• Duration: 00:09:38

Overview

This video tests the effectiveness of Windows Defender in 2025 by exposing a test system to over 2,000 newly collected malware samples. The test simulates real-world attack vectors, such as those used by ransomware, to evaluate Defender's defensive capabilities against the latest threats. The speaker aims to determine the baseline level of protection offered by Windows Defender to users running the latest Windows version.

Key takeaways

• Initial Detection: Windows Defender initially detected 100% of the malware samples.
• Malware Execution: Despite initial detection, a significant malware (identified as "unicorn") managed to download components, disrupt the system, and cause the detection rate to drop to 92%.
• System Inoperability: The malware caused the test system to freeze and eventually become inoperable, requiring a hard reset.
• Malware Analysis: Post-test analysis revealed numerous "unicorn" files and an update application, with the suspicious "unicorn" file having 56 detections on VirusTotal, indicating it is not a new threat.
• Defender's Performance: While Windows Defender's signature-based detection is comparable to other security solutions, its behavioral protection is noted as a weakness unless specifically configured. The reliance on cloud detection can also lead to delays.
• Advancements: Windows Defender in 2025 has significantly improved compared to its earlier versions.
• Zero Trust Approach: The video introduces Threat Locker as a sponsor, highlighting its "zero trust" or "default deny" approach to cybersecurity, which prevents the execution of untrusted software and offers behavioral threat detection.