Print - Anti-Virus Vendors Prepare for War with Microsoft ... Again

When Microsoft announced its Windows Live OneCare security and PC health product over five years ago (as MSN OneCare), Symantec, McAfee, and the other consumer-oriented security vendors reacted with stunning vigor, attacking the software giant for intruding on their turf. (Symantec CEO John Thompson described OneCare, at the time, as "much ado about nothing.") They then set out to unabashedly imitate OneCare with me-too products such as Norton 360 and McAfee Family Protection.

Those efforts were ultimately quite successful. Microsoft never grew past single-digit market share, while Symantec finished 2008 with 22 percent of the market, compared to 10.9 percent for McAfee. So Microsoft changed course yet again. At the end of last year, the company announced that it would discontinue OneCare in 2008 and launch a free anti-malware product code-named Morro and, more recently, branded as Microsoft Security Essentials (MSE).

Microsoft briefly offered MSE as a public beta and the resource, so far, has been tremendous. Customers report that MSE is small, light, fast, and doesn't bog down PCs as do the top-heavy suites from Symantec and McAfee. Plus, MSE will be free. How will the security heavyweights of the world compete with free?

With more bluster, of course. This past week, Symantec Product Manager David Hall said that only using free anti-malware would put PCs at risk. "If you are only relying on free antivirus to offer you protection in this modern age, you are not getting the protection you need to be able to stay clean and have a reasonable chance of avoiding identity theft," he said. "Microsoft's free product is basically a stripped-down version of the OneCare product Microsoft pulled from retail shelves."

According to Symantec, the real issue is that most infections occur online now via so called drive-by downloads, typically via a web browser. (Microsoft's Internet Explorer 7 and 8 already both protect against such attacks, by the way.) But as is always the case, Windows users should look past the marketing bluster. While most PCs come with free trial versions of security products from Symantec, McAfee, and others, users of those products rarely upgrade them to full versions or keep their subscription activated. Thus, most users of these products are unprotected while online. A free product like MSE—along with some much-needed common sense—is a much better alternative to relying on a security product that expired some time ago.

Back in July 2003, I wrote an editorial called "Microsoft Should Offer Free Antivirus Technology to its Windows Customers," in which I argued that Windows users should come first and their security should take precedence over the needs of Microsoft's partners. This is more obvious today than it was at the time, given our ever-increasing reliance on connectivity. It's nice to see that Microsoft has finally come around to this notion as well, albeit six years later. But it's also unsurprising that security vendors, which grew fat long ago on Microsoft's security lapses and the ignorance of consumers, would fight this move kicking and screaming.

Let them scream, I say. As always, Windows users come first.

Related Reading:

Why doesn't McAfee and Symantec offer basic malware protection for about US$5/year? A basic offering might negate to need for customers to buy $60 suites that subsequently bog down the computers on which they're installed. I stopped using Norton once I realized it was responsible for making MS Word take about 60 seconds just to open. I'm using MSE, and it's terrific!

"According to Symantec, the real issue is that most infections occur online now via so called drive-by downloads, typically via a web browser. (Microsoft's Internet Explorer 7 and 8 already both protect against such attacks, by the way.) " This means FireFox is the weak link Symantexc is referring to and should be avoided. Use the new IE 8 instead, no drive-by downloads.

My experience has been whenever you install either Norton or McAfee be prepared for your PC to feel like it is 2 or 3 generations behind where it is currently at. Back in 1999 early 2000 my brother came over used yahoo messenger to chat met someone online talked with them for a few weeks, at the time I had a full updated version of Norton anti Virus on my computer. The woman after a few weeks asked him he would like a picture he said yes which he downloaded it ran a virus scan on it and went to open it. The next thing we both know there is sexual explicit sounds coming out of the PC. I ran another virus scan just to have Norton say their was nothing their, and whenever we would try and reboot the computer, it would lock up and the sounds would just play. I called a friend up who I knew had an extra copy of McAfee he should me how to use safe mode and tried using it and it as well claimed their was nothing their so both Norton and McAfee claimed nothing was their. My friend suggested at the time was new to me an anti virus called AVG which we installed which is completely fee. To our surprise avg found the virus removed it put it into it's own virus fault and gave us the option sending a report to their people to review and or delete etc. I will say this I do not use illegal programs or go to illegal websites to download music, software or movies and I feel with a free anti virus such as AVG and free malaware programs such as Lava soft Adaware and Spy-bot search &destroy I am secure more than Norton or McAfee could offer and my PC runs at full speed. I am aware and not an idiot not just to trust one Anti Virus if I feel the need I can go to both Norton and McAfee websites and do a complete free virus scan their so they contradict themselves with saying free is not any good, just thought I would offer my opinion and my 2 cents worth.

I don't give a rip who puts out the antivirus, be it Microsoft or someone else. I just want my computer protected. Oddly enough, I just finished installing AVG on the computer I'm using to type this message. I've heard good things, but believe me, if there's something better, I'll be all over it like butter on toast.

"I just want my computer protected. Oddly enough, I just finished installing AVG" Such irony. *snicker* "I've heard good things, but believe me, if there's something better, I'll be all over it like butter on toast." That's a scary picture - a buttered up losta *cringe*.... According to the latest rounds of AV-Comparatives, practically everything is better than AVG. Avast and Avira are better. Microsoft came out on top too. Softpedia has downloads of MSE (illegitimately), but you can still download the OneCare trial, which has the same level of protection (Microsoft uses the same engine and definitions for all of their antimalware security products).

"Why doesn't McAfee and Symantec offer basic malware protection for about US$5/year?" Because they already charge about $35US/yr for basic protection.

lotsa: "'I've heard good things, but believe me, if there's something better, I'll be all over it like butter on toast." I've found the last version of AVG to be a pig (as in memories of Norton 2000) and have switched over to AntiVIR: http://www.free-av.com/ It's pretty good so far.

@RTE: I'd still recommend getting MSE or OneCare. AV-Comparatives May testing shows that Microsoft's malware protection scored the second highest of active detection rates, but had the fewest number of false positives which put it in a class by itself. Aside from Microsoft, only ESET NOD32 and Kaspersky had "Advanced+" certification by AV-Comparatives, but they had worse results. All the Microsoft products have the same engine, but the product they tested was OneCare.

To Waethorn and other Windows sufferers, this should cheer you up and give us all something to look forward to. http://news.bbc.co.uk/1/hi/technology/8139711.stm

@il: It affects me or my clients in absolutely no way possible. None of my business clients use Google search or products because of privacy issues. It won't make a dent in the existing base of Linux + browser options available on the market, which is still in single-digit shares. This has already been done: http://www.thinkgos.com/cloud/index.html

I can't stand how WSE pops up a new downloaded definition through Windows Update twice a day. WSE should auto-install it without notifying me. I'd rather not have a Windows Update icon in my systray unless it's a real Windows Update that I should pay attention to. This is with the standard auto-install at 3:00 AM setting. Norton Antivirus went through it's weight gain period and it's back to being slimmed down, so I may just stick with it. I also would go with Trend Micro before I went with the more obscure brands.