Slashdot Mirror


Microsoft's Free AV App May Be a Non-Starter

CWmike writes "Microsoft is preparing to launch a public beta of Morro, the free anti-malware it announced last November, according to reports. Morro will use the same scanning engine as Windows Live OneCare, the software that the free software will replace and Microsoft's first consumer-grade antivirus package. OneCare is to get the boot as of June 30 (along with finance app Microsoft Money). John Pescatore, an analyst at Gartner, has questioned whether users would step up to Morro even if it was free. 'Consumers are hesitant to pay for a Microsoft security product that will remove problems in other Microsoft products,' he said. 'Think of it this way. What if you smelled a rotten egg odor in your water and the water company said, "Sure, we can remove that, but it will cost you $50." Would you buy it?' Not surprisingly, competitors have dismissed Morro's threat to their business. 'We like our chances,' Todd Gebhart, vice president in charge of McAfee's consumer line, said when it was announced OneCare was a goner. 'Consumers have already rejected OneCare,' added Rowan Trollope, senior vice president of consumer software at Symantec. 'Making that same substandard security technology free won't change that equation.'"

44 of 251 comments (clear)

  1. As long as.. by NervousNerd · · Score: 5, Insightful

    As long as it doesn't suck as much as Norton (slow, hard to remove), I'll take a look at it. Right now I'm running ClamWin, and I'm looking for a better (free) anti-virus.

    1. Re:As long as.. by ShieldW0lf · · Score: 4, Funny

      Motive: They're trying to seize control of their botnet back from the Chinese.

      --
      -1 Uncomfortable Truth
    2. Re:As long as.. by PhracturedBlue · · Score: 5, Interesting

      According to a-v comparatives:
      http://www.av-comparatives.org/comparativesreviews/corporate-reviews

      Microsoft's AV software is very good. It has low false-positives and generally scored quite well. If the same capability is free, I don't see a reason not to recommend its use. I certainly don't work for a-v comparatives, but they were around before Microsoft was in AV business, and their top rated software changes pretty freqeuntly. I'd call them reasonably unbiased, but judge for yourself.

    3. Re:As long as.. by Zxarr · · Score: 5, Informative

      Avast Antivirus is pretty good too. It's free, but you need to register yearly.

    4. Re:As long as.. by GordonCopestake · · Score: 2, Funny

      "Microsoft's AV software is very good. It has low positives and generally scored quite well."

      There fixed that for you

    5. Re:As long as.. by Opportunist · · Score: 4, Funny

      Well, to give Norton some credit, they've been working on their removal procedure and it's now easier to remove.

      So (since my boss once said "if you can't say anything good about your competitor, say nothing"), I can now not only say "Norton has a good looking box", I can also say "It's fairly easy to remove it".

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    6. Re:As long as.. by Opportunist · · Score: 2, Funny

      That's something that puzzles the whole industry. But not to a degree that we care too much about it.

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
  2. Am I missing something? by Raindance · · Score: 5, Interesting

    I'm not the biggest Microsoft fan out there, but this summary feels a little over the top.

    'We like our chances,' Todd Gebhart, vice president in charge of McAfee's consumer line, said when it was announced OneCare was a goner. 'Consumers have already rejected OneCare,' added Rowan Trollope, senior vice president of consumer software at Symantec. 'Making that same substandard security technology free won't change that equation.'"

    How can you say that with a straight face? The difference between for-pay and free is huge. And rebranding can make a big difference-- look at the recent success of Bing, for instance.

    Personally, I think people are aching for alternatives to the current big players like McAfee. I'm reminded of this recent slashdot story-

    "'Security firms Symantec and McAfee have both agreed to pay $375,000 to US authorities after they automatically renewed consumers' subscriptions without their consent.' The two companies were reported to the New York Attorney General after people complained that their credit cards were being charged without their consent. The investigators found that information about the auto-renewals was hidden at the bottom of long web pages or buried in the EULA."

    I think something that's free and easy to use can compete very well against this sort of customer abuse.

    p.s. anyone else find the quotation by John Pescatore completely unintelligible? Either he's very confused with his analogies or was misquoted.

    1. Re:Am I missing something? by drinkypoo · · Score: 2, Interesting

      Personally, I think people are aching for alternatives to the current big players like McAfee.

      I'm aching for alternatives to bloatware like AVG, actually.

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    2. Re:Am I missing something? by houstonbofh · · Score: 4, Interesting

      It gets confusing when Norton and McAffe are the evil entrenched duopoly, and Microsoft is the plucky young upstart. Reminds me of the early 80s.

    3. Re:Am I missing something? by Deathlizard · · Score: 4, Insightful

      what bothers me most about this article is this line

      'Consumers are hesitant to pay for a Microsoft security product that will remove problems in other Microsoft products,'

      At this point, most malware doesn't hack Windows, it hacks your brain. It tricks you into executing it. The only vector that is even being used extensively anymore is Office, Acrobat, and Flash, MS has been phasing out older formats and patching up the holes and Adobe is finally waking up and doing something about their security issues. even in those programs, most of the time a Trojan file is involved.

      On top of that, the most recent malware doesn't even need administrative privlages. It simply installs in your user account directory and starts up when you login. I see absoletly no reason why this method of execution wouldn't work in any other OS, Be it Linux, OSX, or BSD regardless of security settings.

    4. Re:Am I missing something? by aj50 · · Score: 4, Insightful

      A huge advert window opens, minimising the fullscreen game that I'm playing to tell me to buy their product.

      This must be some use of the word "non-intrusive" which I am not aware of.

      Admittedly, I didn't have any problems with it as an anti-virus package, it was much better than bloated "full protection" software packages from Symantec and McAfee but I feel it's cheating somewhat to advertise your product as "free anti-virus" and then use it as a platform to advertise the pay-for versions which just have more features that I don't want.

      --
      I wish to remain anomalous
    5. Re:Am I missing something? by Corporate+Troll · · Score: 2, Insightful

      It's non-intrusive though. You click OK, and it goes away. No more for two days. It's preferable to the alternatives that are out there.

      and then

      I ended up buying a 3 year license for $129.99(US).

      So, the system works? You bought from them, that's the whole point...

    6. Re:Am I missing something? by Kamokazi · · Score: 2, Interesting
      I agree. It's one thing to call out Microsoft for their many mistakes, but it's comepletely different to be so rabidly anti-MS that you start making yourself appear stupid. I really thought this statement kind of shows what kind of an idiot this guy is:

      'Consumers are hesitant to pay for a Microsoft security product that will remove problems in other Microsoft products,'

      Most malware is not something that exploits vulnerabilities inherent in the product, they exploit the easiest vulnerability of all: the user. A lot of what AV programs do is protect stupid users from infecting their own PCs. Really, it doesn't remove any problems in other products...the patches and updates available for free do that. It will look for known malware that exploits those vulnerabilities if left unpatched, however.

      --
      As our way of thanking you for your positive contributions to Slashdot, you are eligible to disable Slashdot 2.0.
    7. Re:Am I missing something? by VertigoAce · · Score: 2, Interesting

      Morro (and OneCare) are for unmanaged computers (home users, perhaps small companies). Forefront Client Security is the anti-malware software intended for business use. Both will use the same anti-malware engine, but FCS has all of the manageability and reporting that you would expect in an enterprise.

      I don't really see Morro as an attempt to compete in the home anti-virus market (in other words, Morro is not intended to take sales away from any of the other vendors). The real goal is to try to have anti-virus on all PCs worldwide. There are a number of large markets outside the US where few PCs have anti-virus software. And it wouldn't surprise me if the US market has a fair number of PCs where the trial/subscription for whatever the OEM installed has expired.

    8. Re:Am I missing something? by dtfinch · · Score: 2, Informative

      For one, it creates lots of temporary files for every file it scans, trying to extract them like an archive whether they really are or not. That's why it scans so slowly, and will thrash your hard drive even if you're scanning files elsewhere, like over the network.

    9. Re:Am I missing something? by Blakey+Rat · · Score: 3, Informative

      And rebranding can make a big difference-- look at the recent success of Bing, for instance.

      Bing is, technically, far superior to Live Search. It's not just a re-branding.

      (With one exception: people raving about Bing's image search UI obviously never used Live Image Search, which is nearly identical UI-wise. Bing still returns better, more relevant, results though.)

  3. You gotta love it by Rosco+P.+Coltrane · · Score: 4, Interesting

    Microsoft, the virtual inventor of buggy bananaware and OS monoculture that enables mass distributable malware gets into the A/V market. Sounds like Typhoid Mary selling antibiotics...

    --
    "A door is what a dog is perpetually on the wrong side of" - Ogden Nash
    1. Re:You gotta love it by L4t3r4lu5 · · Score: 2, Insightful

      Hey, when you have direct access to the source of infection, you're almost guaranteed to produce the best cures...

      Unless you're Microsoft.

      --
      Finally had enough. Come see us over at https://soylentnews.org/
    2. Re:You gotta love it by plague3106 · · Score: 2, Insightful

      I suppose most Microsoft programmers are fundamentally honest, so they surely don't want to produce bad code. But they do, so they must possess a certain degree of incompetence. Do I trust incompetents to correct their own mistakes? If they could, they wouldn't have made them in the first place.

      What cereal box did you get your CS degree from? Making a mistake does not make on incompetent. All complex systems have some flaws.

    3. Re:You gotta love it by plague3106 · · Score: 2, Insightful

      Get off it already. Do you have something more recent than five years ago?

    4. Re:You gotta love it by Bert64 · · Score: 2, Informative

      Which is where linux has several inherent advantages over windows....

      A trusted package repository - if you can, try to get all your software from the repository, it will be signed by your distro and therefore somewhat trusted, and is much easier to maintain (update) etc... Users are far less likely to be downloading and running random arbitrary binaries.

      Files being executable are based on file permissions rather than the name, a malicious file being delivered by a website can easily control the filename, but it cannot control whether your system gives it execution rights or not, that you have to do yourself creating an extra step in the process.

      Extra to the above, linux does not hide file extensions in the same way windows does by default, on windows icons are stored in the executables themselves, so its possible to create an executable with the same icon as a more innocuous file, eg a jpeg picture... then you can call it "blah.jpg.exe" and windows will hide the .exe part by default, making it look exactly like a jpeg picture in explorer.

      Linux users won't have root privileges by default, so a piece of malware needs to elevate privileges first before it can do serious damage or try to hide itself thoroughly, windows (and shoddy third party apps) has always encouraged users to run as admin, although vista is trying to address this.

      Linux has no concept of autorun, windows will automatically execute files on inserted media by default, some malware takes advantage of this to spread.

      Diversity - there are many versions of linux with various differences between them, even including processor differences (linux/ppc on ps3 or old macs, arm or mips based netbooks etc), meaning that a piece of malware written for ubuntu/x86 may not operate correctly on fedora/x86 and certainly won't run on yellowdog/ppc... for instance the init scripts differ between fedora and ubuntu, so the malware may have difficulty configuring itself to start at boot....

      This isn't a comprehensive list, and it certainly isn't flawless, but it highlights several things that make linux a tougher proposition than windows for malware authors.

      --
      http://spamdecoy.net - free throwaway anonymous email - avoid spam!
  4. Bad Analogy by Colonel+Korn · · Score: 4, Insightful

    'Think of it this way. What if you smelled a rotten egg odor in your water and the water company said, "Sure, we can remove that, but it will cost you $50." Would you buy it?'

    This analogy is just dumb. This is a free product. Obviously the analogy would have the water company saying, "Sure, we can remove that for free."

    Not to mention 'Consumers are hesitant to pay for a Microsoft security product that will remove problems in other Microsoft products,' which is a stupid point to make about a free product.

    Furthermore, MS's security "problems" are over a billion installs. As we see every year when they tie Linux as the most secure system in pwn2own, they've got nothing to be upset about on the technical side of things.

    And finally, "added Rowan Trollope, senior vice president of consumer software at Symantec. 'Making that same substandard security technology free won't change that equation'" is pretty funny from a guy representing a company that actually charges for substandard security technology.

    --
    "I zero-index my hamsters" - Willtor (147206)
  5. Missing some info from the summary by sqlrob · · Score: 5, Interesting

    I'm surprised a quote from this article didn't make it in:

    Morro will work by routing all of a users Internet traffic to a Microsoft datacenter, where the Morro application will process the traffic and identify and block malware in real-time, by examining all of the rerouted traffic

    How many people want all of their traffic explicitly going through Microsoft?

    1. Re:Missing some info from the summary by drooling-dog · · Score: 4, Insightful

      How many people want all of their traffic explicitly going through Microsoft?

      On the other hand, it might be an effective way to protect users from the likes of Linux, Firefox, etc...

    2. Re:Missing some info from the summary by DarthBender · · Score: 2, Insightful

      Wow, I was actually thinking to try it until I saw that. That's huge, and something I want nothing to do with.

  6. Re:Viruses Aren't a Problem in Linux by sqlrob · · Score: 2, Informative

    Right, there's no way you could have, say, a malicious perl script.

  7. Car Analogy by Anonymous Coward · · Score: 3, Insightful

    I have to use a bad car analogy. If I buy a BMW and it breaks down, I take it to the BMW dealer to work on it. Some people obviously opt for third party repair, but a lot trust the manufacturer, even though it is often design problems that caused the breakdown. I understand that people have unreasonable expectations that their purchases don't have vulnerabilities and will last forever, but the other 95% of the population recognizes that complicated systems need repairs and protection.
    I don't know if this will be successful, but to think that it should not be trusted or immediately dismissed is ignorant. That being said, I don't use Microsoft products, largely because I don't like AV. Linux FTW!

  8. No thanks by ZOMFF · · Score: 2, Informative

    If it's anything as effective as One Care, I'm going to stay away. I received a free 1 year subscription to One Care at a Microsoft event about 2 years ago and ran it until it expired. After removing it and re-installing my previous Symantec product, it detected around a dozen viruses and malware infections that One Care did not notice. Since then I've kept my distance from any Microsoft AV type product.

    --
    Launch every sig.
  9. I always use Antivirus 2009! by erroneus · · Score: 2, Funny

    It works on everything I try it on! It works on Windows and Linux and Mac OS X! I just have to go to a web page and it scans my machine and tells me how many viruses I have.

  10. The Microsoft Ethical Problem by artgeeq · · Score: 2, Insightful

    "'Consumers are hesitant to pay for a Microsoft security product that will remove problems in other Microsoft products,"' Well, yes. But it is not just that. We already pay for Microsoft product defects in other ways too. Let's say you are doing a major rollout of Active Directory or Exchange. Sometimes, the only way you get a bug fix is to get a support contract from Microsoft or hire a company that has a support contract. Any Exchange administrator of a good size organization can tell you that Exchange has more than its fair share of bugs, and this new one, Exchange 2007, is no exception. Which leads to the question, where is the incentive on the part of Microsoft to produce really good software? Why not just produce mediocre software and then ask people to pay more money to fix it?

  11. And to top it off by xednieht · · Score: 2, Funny

    There's a type in the product name - they forgot the 'n' at the end.

    --

    Hope is the currency of fools
  12. Bad analogy by recoiledsnake · · Score: 4, Informative

    'Think of it this way. What if you smelled a rotten egg odor in your water and the water company said, "Sure, we can remove that, but it will cost you $50."

    I think that analogy is broken. Very few malware use the holes in MS software these days. Most of the viruses spread by user error, email, IM, flaws in Flash/Acrobat etc. MS is offering a service to clean them up and does provide free fixes for bugs in their software. Obligatory car analogy, car company sells insurance for breakins and accidents and charges extra. Why not pay for it if the deal is good?

    --
    This space for rent.
  13. The discussion misses the point (maybe) by MarcAuslander · · Score: 2, Insightful

    Infected windows machines are a plague on the internet. Many of these presumably have no useful anti-malware running. Microsoft takes lots of heat, as the comments above prove. So Microsoft decides that trying to sell anti-malware won't work, but maybe giving it away, and I assume bundling it, will get it widely deployed. And take some heat off Microsoft for shipping vulnerable stuff. If this happens, and it works at all, it will be a great improvement to the current mess. To put it differently - it's clearly impossible to make an OS bug proof - so an OS ought to contain defenses against malware out of the box.

  14. better analogy by viralMeme · · Score: 2, Interesting

    "I think that analogy is broken. Very few malware use the holes in MS software these days. Most of the viruses spread by user error, email, IM, flaws in Flash/Acrobat etc"

    Defects in application or 'user error' shouldn't lead to the OS being compromised or the consumers having to pay the sellers more money to fix their defective product.

    1. Re:better analogy by recoiledsnake · · Score: 3, Insightful

      "I think that analogy is broken. Very few malware use the holes in MS software these days. Most of the viruses spread by user error, email, IM, flaws in Flash/Acrobat etc" Defects in application or 'user error' shouldn't lead to the OS being compromised or the consumers having to pay the sellers more money to fix their defective product.

      Name a OS where user error can't lead to the OS being compromised. Maybe only in a very locked down system like a kiosk , but a kiosk is not every useful and the user won't have any freedom. If you can install Firefox, you can install a virus. Unless there's a whitelist, but would you trust a whitelist maintained by MS? An alternative is total application virtualization, but given the fact that applications need to talk to each other and be able to access user files make it tough.

      --
      This space for rent.
  15. sulfurous water analogy by viralMeme · · Score: 2, Insightful

    The water company advertised spring water filtered through volcanic rock from water frozen in glaciers milena ago. We called them and told them about the 'rotten egg odor'. They then offer to license a charcoal filter to us for $50.00 a year, to be fitter on premises at another $40.00. If we used any other charcoal filter, they advised us that we might be violating some other company's patents. They reassure us that if we buy their charcoal filter they will give us patent protection against getting sued by this other company. The water company hold a financial interest in the other company. They don't ever offer to indemnify us against getting sued for getting sulfur in our water. Even though they are the only water company that sells sulfurous water. The media invariable refer to 'sulfurous water', instead of $company sulfured water ?

  16. Latest AV-Comparatives report.. by Henk+Poley · · Score: 2, Informative

    As much I would like to bash Microsoft from time to time. latest AV-Comparatives report has them up there with ESET NOD32. With Microsoft you never know if that included some sums of money, but yeah.

  17. Beware the closed source by MaerD · · Score: 2, Insightful

    I can't believe the biggest focus out of all this is on the "evolution" (or whatever) of their anti-virus, with little mention of the end of the Money product line.

    I feel for all the people who have been locked in to MS money, like the one in the article. Hopefully it will drive him to open source... however I haven't really been able to find a good alternative to Money and/or Quicken for Home/SMB finance.. any suggestions?

    --
    I put on my robe and wizard hat..
  18. Microsoft's disjointed AntiVirus strategy by Gary+W.+Longsine · · Score: 4, Informative

    Microsoft has, for years, maintained three separate tools in this space (that I know of, there might be others). They change the names of them periodically, to confuse their hapless victims.

    Microsoft Windows Malicious Software Removal Tool
    You gotta read this page. They release a new version every month. It apparently cannot remove viruses which are not actively running. Why is this tool not built in to Microsoft Windows Defender?

    Windows Live One Care
    This link shows a forum moderator, chastising a poor infested user for asking a question about a different Microsoft antivirus product -- Microsoft Windows Defender. Why are these separate products, again?

    Microsoft Windows Defender
    Formerly known as Microsoft AntiSpyware.

    These should be one product. The fact that Microsoft maintains three separate products to deal with this problem is, itself, an indication of a very serious ongoing problem at Microsoft. As a company, they still don't take this seriously.

    --
    If you mod me down, I shall become more powerful than you could possibly imagine.
    1. Re:Microsoft's disjointed AntiVirus strategy by glennpratt · · Score: 2, Insightful

      This is idiotic, have you seen how many products other companies produce?

      I'll just give you some example analogs off the top of my head:

      Symantec Virus Removal Tools

      Symantec Antivirus

      Norton Internet Security

      And in response to your questions.

      Malicious Software Removal Tool is targeted at the biggest threats and designed to be distributed via Windows Update, it helps protect unmonitored PCs from the biggest threats. Live One Care is an antivirus suite that is, or at least wasn't free, so of course it was a different product. Windows Defender is antimalware, not antivirus. Almost every security company has a similar product matrix.

    2. Re:Microsoft's disjointed AntiVirus strategy by DragonWriter · · Score: 4, Funny

      Microsoft Windows Malicious Software Removal Tool

      Whenever I see that name, my mind initially takes it as a Software Removal Tool that is Malicious rather than a tool for removing malicious software.

    3. Re:Microsoft's disjointed AntiVirus strategy by Z34107 · · Score: 4, Informative

      The "Malicious Software Removal Tool" is pushed through Windows Update. It's not meant to be a full-blown virus scanner, just an install script that will neuter a few of this month's viruses. It's created for the computer illiterates with no virus scanner in the hopes that they left Automatic Updates on.

      Windows Defender was supposed to be a very basic, lightweight application to provide some warning that you're infected It's part of Windows Vista, installable on Windows XP, and has some nifty functions that fall between msconfig and HijackThis. I can't speak to it's detection rate, but our help desk has gotten a few calls from people who didn't realize they were infected until Windows Defender told them so.

      Windows Live OneCare was their attempt at competing with Symantec or Network Associates. They bought the basic engine from some other company, saw that the entire thing was written in VB 6, facepalmed, and rewrote it as OneCare. It also helps with remote backups and whatnot.

      They really shouldn't be all one product, as they serve completely different purposes. Although if they made Windows Defender a bit more powerful, they'd have an uninstallable version of Live Care.

      --
      DATABASE WOW WOW