 MSE provides real @-@ time protection , constantly monitoring activities on the computer and scanning new files as they are downloaded or created . It disables detected threats and prompts for user input on how to deal with them . If no response is received within ten minutes , suspected threats are handled according to the default actions defined in the application 's settings . Depending on those settings , it may also create System Restore checkpoints before removing the detected malware . As a part of real @-@ time protection , by default , MSE reports all suspicious behaviors of monitored programs to Microsoft Active Protection Service ( MAPS , originally Microsoft <unk> ) , a web @-@ based service . If the report matches a newly discovered malware threat with an unreleased virus definition , the new definition is downloaded to remove the threat . 
