main

Microsoft Anti-Virus?

Mr magoo   on 08 May 2004 - 11:06 · 63 comments & 3483 views

Advertisement (Why?)
Microsoft's plans to improve the security of Windows through the purchase of an anti-virus company almost a year ago appear to be stuck in limbo. The software giant entered the AV market with the surprise acquisition of little known Romanian AV firm GeCAD Software for an undisclosed sum in June last year.

At the time Microsoft said it would use GeCAD's expertise and technology to "enhance the Windows platform" and extend support for third-party antivirus vendors. "The knowledge and experience acquired from GeCAD will contribute to Microsoft's understanding of how systems are attacked, enabling Microsoft to more effectively focus on platform improvements," it said.

Speaking at the recent Infosecurity Europe show Jonathan Perera, Senior Director at Microsoft's Security Business and Technology Unit, said the company is not ready to announce a product strategy for GeCAD almost a year after the acquisition. GeCAD's technology is been used in programming interfaces to make it easier to plug anti-virus software into Windows, he said.

That covers "extending support for third-party antivirus vendors" but it doesn't cover the "platform improvements" Microsoft promised. Since the purchase of GeCAD we've had Blaster, MyDoom, NetSky and now Sasser so Microsoft is not exactly short of reasons to push on with improvements. So why the apparent lack of progress?

View: Story @ El Reg


"Getting wider buy-in for the project wasn't just about ROI, it was about fitting in with the values we seek to embody as an HR consultancy. Having said that we've seen a 10% increase in billable hours with our consultants, as they have been able to utilise that dead time that traditionally existed when travelling."


Nigel said that the technology had personally benefited him recently. He explained: "I flew from London to Manchester and spent an hour catching up on all of my correspondence. This meant that when I arrived at the meeting I was up to speed with all the developments. We're now developing profiling tools that will see staff issued with Windows Mobile-based devices or laptops depending on how they work."


Post a comment · Send to friend Comments · There are 63 additional comments
(12 replies) #1 Knight' on 08 May 2004 - 11:37
QUOTE
"The knowledge and experience acquired from GeCAD will contribute to Microsoft's understanding of how systems are attacked,


Shouldn't MS know by now how their OS is attacked?
#1.1 hardgiant on 08 May 2004 - 12:09
Haha that is exactly what I was thinking
#1.2 STV on 08 May 2004 - 13:59
if it is possible to know, then why are there a bunch of patches for many other pieces of software?

not everyone knows everything, not even microsoft.

STV
#1.3 PseudoRandomDragon on 08 May 2004 - 14:18
omfg STV
#1.4 markjensen on 08 May 2004 - 14:26
I have a small but steady stream of patches and updates to software on my Linux box. People who run web/mail/ftp/etc servers from their boxes probably have many more patches.

To me patches are good. They indicate that a problem is being solved.

While the number and frequency of patches aren't relevant to AV, per se, the fact that STV pointed out that everyone updates and fixes their software shows that people aren't perfect. Flaws will get by.

In fact, the biggest problem in virus and worm propogation is people! The compromized systems are rarely the ones that are kept updated.
#1.5 STV on 08 May 2004 - 14:42
double post, sorry.

STV
#1.6 STV on 08 May 2004 - 14:43
QUOTE (#1.3)
omfg STV

...care to explain, what you mean?

STV
#1.7 Kevine on 08 May 2004 - 18:36
STV

Syrian Television

Scottish Television

Star Trek: Voyager

Straight to Video
#1.8 STV on 08 May 2004 - 19:41
damn you are good Kevine. it is one of those. if you have seen my posts around then you know which one it is.

come on, which one seems to be the likely one?

STV
#1.9 JaggedFlame on 08 May 2004 - 21:18
Syrian Television, definitely.
#1.10 PseudoRandomDragon on 08 May 2004 - 21:26
QUOTE (#1.6)
...care to explain, what you mean?

My apologies. Here is what I mean:

Oh my ****ing god, STV.
#1.11 brew crew on 08 May 2004 - 23:56
some teen virgin
#1.12 STV on 09 May 2004 - 08:33
come on guys, you dont have to make fun of me, even though you want to.

it is Star Trek: Voyager

STV
(5 replies) #2 markjensen on 08 May 2004 - 11:51
The really odd part here is that The Register didn't come up with the conclusion that Microsoft did this just to buy and kill the largest source of Anti-Virus software for Linux & Novell systems. news article

Perhaps that is what the final line of the article referenced when it said
QUOTE
Now where the hell did I put my tin-foil hat?
#2.1 Octol on 08 May 2004 - 12:29
QUOTE
The really odd part here is that The Register didn't come up with the conclusion that Microsoft did this just to buy and kill the largest source of Anti-Virus software for Linux & Novell systems.


So why do you care?

All you worshippers at the altar of Open Source keep telling us that Linux is totally secure and invulnerable to attack—unlike the spawn of the Great Satan Micro$haft.

Why would a totally secure OS need antivirus protection in the first place?
#2.2 markjensen on 08 May 2004 - 12:36
QUOTE (#2.1)
So why do you care?

All you worshippers at the altar of Open Source keep telling us that Linux is totally secure and invulnerable to attack—unlike the spawn of the Great Satan Micro$haft.

Why would a totally secure OS need antivirus protection in the first place?

First, there is no need to jump in with a hostile tone for no reason...

Secondly, as any admin of a mixed network will tell you, you use anti-virus on a Linux mailserver to protect those Windows machines connected to it that may be unpateched and vunerable (laptops seem to be expecially prone to this, as some users don't boot up but a few times a year).

So, just step back a bit, take a few breaths and chill... Your question was valid, but the tone was unnecessary.
#2.3 Octol on 08 May 2004 - 13:44
QUOTE
So, just step back a bit, take a few breaths and chill... Your question was valid, but the tone was unnecessary.


The question wasn't meant to be a valid one.

My purpose was to launch a totally uprovoked, unwarranted, and pointless attack on the Open Source community for no good reason.

Just trying out my troll skills in case I lapse into a state of total insanity.

#2.4 markjensen on 08 May 2004 - 13:50
lol
#2.5 PseudoRandomDragon on 08 May 2004 - 14:21
rofl!
(4 replies) #3 Webgraph on 08 May 2004 - 12:14
I remember the days when Microsoft AntiVirus was on Windows 3.1! God, that program sucked! I just hope Symantec and McAfee don't end up going down the tubes because of MS's plans by integrating the antivirus directly into Windows!
#3.1 PseudoRandomDragon on 08 May 2004 - 14:22
ZoneLabs is still here, so I think they are OK.
#3.2 WindowsNT on 08 May 2004 - 17:14
That's true but windows Firewall is only a basic package. Professionals would not rely on basic protection anyway. so Sygate and Za will be ok.

I belive MS are only doing what they are doing with Win Firewall just to limit the amount of attacks that are going about that home users dont know about.

I cant wait for MS to add a basic AV scanner to warn home users of threats.
nothing like McAfee just to warn them.

dont flame me, i just want somthing that i can say you were warned by Windows kind of thing
#3.3 JaggedFlame on 08 May 2004 - 21:19
QUOTE
I remember the days when Microsoft AntiVirus was on Windows 3.1!


Wasn't that IBM Antivirus?
#3.4 Skyfrog on 08 May 2004 - 22:27
Microsoft Anti-Virus for Windows
Copyright 1993 Central Point Software
#4 cork1958 on 08 May 2004 - 12:51
I would prefer MS to just stay out of this as far as trying to integrate it or anything. Sure, please do learn how the system is attacked, seeing as they seemingly don't know how yet, but leave the AV stuff up to Norton, Kaspersky, Grisoft and the likes.
#5 EnIgMa-PenGuIn on 08 May 2004 - 12:57
*sees an anti-trust hearing on the horizon* ahoy maties
but it depends if they ship it with their os' , if they do you can be sure symantec and and the makers of mcaffe and the sorts will go
"aahh excuse me.. anti competition" in some country and yet another case will begin
(1 reply) #6 mentas on 08 May 2004 - 13:50
Linux is totally insecure and vulnerable to attack!!! (and more easy to do)

When attacks move to linux... then cause more damage.

#6.1 markjensen on 08 May 2004 - 13:55
Your post has nothing to do with Microsoft's Anti-Virus company purchase.
You state an inflammatory opinion with nothing to back up your claim.
You draw a conclusion out of thin air.

Obviously, you are trolling here...
(6 replies) #7 STV on 08 May 2004 - 13:57
they obviously plan to do something with the code that they bought, right?

so...what can they do?

1) include it with the OS.
2) include it with their shrink-wrapped, boxed OS, and send the OEM a non-AV included OS version.
3) sell it in stores
4) make it a free AV

those are th ones that i can think of off the top of my head.

STV
#7.1 markjensen on 08 May 2004 - 14:00
Well, they have already done something with the company.

First order of business was to put a halt to RAV's Linux & Novell products.
#7.2 STV on 08 May 2004 - 14:03
why do you need to say this? how do you know 100% with out a doubt that this was Microsoft's plan? as you may know by now, when ms buys something, they buy something small, and that company was small.

STV
#7.3 markjensen on 08 May 2004 - 14:14
I was merely stating that they bought it a year ago. It was a small company (by Microsoft Standards), but the largest AV for Linux. They immediately stopped their Linux & Novell products.

Now, they are sort of stuck. If they add AV into Windows, they will get sued. If they don't people will bitch and complain that they aren't doing enough. Surely, they were aware of this situation before buying the company.
#7.4 PseudoRandomDragon on 08 May 2004 - 14:24
They will get sued, but by who? The DOJ?
#7.5 markjensen on 08 May 2004 - 14:29
McAfee/NetworkAssociates or whatever they call themselves now. Symantic/Norton. Anyone who makes AV products will JUMP on the chance to sue Microsoft! It's like a lottery to them!

It is one area where I feel sorry for Microsoft's prediciment (arguing about who's fault they are scrutinized aside). They are damned if they do, and damned if they don't. :|
#7.6 shao on 09 May 2004 - 01:00
you're right.. it might seem like there's no quick win for windows here... too many bitchy, and lets be fair, crappy AV products out there that want a peice of the 'boxed with windows' pie..

see my post below on a possible solution
(4 replies) #8 sumeet on 08 May 2004 - 14:21
Well this is another MS thing im not going to buy
#8.1 STV on 08 May 2004 - 14:40
thats is good and all, but why did you need to say that? they still dont know exactly what they want to do with it.

please have something to add on your next post.

all i can say, is that if they do plan to sell it in stores, I will have to check it out, if the price is right. I use norton, but that costs a lot when you buys it in stores. so, if it is cheap and proves its worth then ill use it, plain and simple.

but i dont think that they even know how they can use it without getting screwed by some other company (like someone said, damned if they do, damned if they dont).

STV
#8.2 sumeet on 09 May 2004 - 14:31
Every M$ product isn't cheap, when XP first came out it was $500, so i don't see why this anti-virus won't be cheaper than norton
#8.3 STV on 09 May 2004 - 16:59
yeah, and...how does th $ help your position?

STV
#8.4 PseudoRandomDragon on 09 May 2004 - 20:07
$500???? ummm, no. $200 is more like it.
(2 replies) #9 dotRoot on 08 May 2004 - 15:07
MS did do something, they added the AV API. That will make scans faster, able to scan those quirky hidden files some AVs have problems with, able other applications to auto-scan on error or whatever. It will also make things like email, IM clients, IRC clients, and even third party web browsers (some of the biggest sources of virii respectively) able to scan on demand or use hueristics, etc. Just an AV API would be nice. And if they've done that, than I think that's fine.

As for the Linux/Novell arguments. Well for one: there are lots of companies that offer gateways for email servers and such and most companies will use them. I don't see this buy out of this AV company effecting much that way.
#9.1 briley on 08 May 2004 - 15:22
I'm with dotRoot - the way I see it, the platform improvements that The Reg insists haven't been delivered is the better tie-in for third-party AV software. It lets the AV people do what they do best better, which in my mind is an improvement.
#9.2 L0cke on 10 May 2004 - 05:16
"and even third party web browsers (some of the biggest sources of virii respectively)"

excuse me? what was that?

I don't remember Firefox, Opera or Mozilla even supporting ActiveX, let alone automaticly running software without the user knowing.
#10 Dale on 08 May 2004 - 15:52
reminds me of that old MS DOS 6.2 ANTI-VIRUS :p
#11 Nodiaque on 08 May 2004 - 16:02
I think that the AV API stuff would just be another security flaw the way dotroot explain. Having an api to quickly scan hidden files and such, a virus infect this files (like a virus infect an anti-virus) and spread faster and easier that way...

Just a little comment, something that every anti-virus software forgot... cleaning the registry after easing a virus... At my job, I saw like 20 laptops a day all infected and when I finished scanning with whatever anti-virus, I gotta scan the registry and find those registry key that aren'T supose to be there because of the virus...
#12 chaos945 on 08 May 2004 - 17:41
(3 replies) #13 The Beav on 08 May 2004 - 17:43
i remember beta testing the MS anti-virus it was called PC Satisfaction, it was terribly slow, i haven't heard much about it since then
#13.1 mipra on 08 May 2004 - 19:02
that just breaks my expectation of MS
#13.2 gameguy on 08 May 2004 - 20:48
It wasn't beta testing, it was alpha, hence all the bugs...

The Security Center in SP2 came from the PC Satisfaction Trial, sans the anti-virus.
#13.3 briangw on 10 May 2004 - 12:12
QUOTE (#13.0)
i remember beta testing the MS anti-virus it was called PC Satisfaction, it was terribly slow, i haven't heard much about it since then

What were the specs on your Pc, because it ran fine on mine. The only complaints I sent to MS were their idiotic use of suggesting how to backup your PC. Not everyone wants to waste a blank CD every week to backup your PC.
(1 reply) #14 doubledragonxz on 08 May 2004 - 17:44
Antivirus bundleled with windows? I see a tide of lawsuits coming
#14.1 alpoinacan on 08 May 2004 - 18:24
Ya, you are most probably right, but too bad its true.

IE, Media Player, Firewall, burner software, compression software, all bundled with Windows and I don't use them. If they bundled an AV product I wouldn't use it either.
I prefer to use software that I wish to use and although I'm glad they incorporate those features its nice to have an alternative.
(2 replies) #15 Shining Arcanine on 08 May 2004 - 18:57
From my understanding, they are using their technology to better understand how to make it easier for 3rd party AntiVirus software to work with Windows. I believe they are creating new AntiVirus APIs in Longhorn, I'm not sure if they are adding them in Windows XP SP2 as well.
#15.1 mipra on 08 May 2004 - 19:01
Well...that will violate the antitrust law
#15.2 Shining Arcanine on 09 May 2004 - 00:51
QUOTE (#15.1)
Well...that will violate the antitrust law

How would making it easier for 3rd party AntiVirus software to find viruses violate an AntiTrust law?
#16 mipra on 08 May 2004 - 19:00
Say what? MS Anti-Virus?
#17 jkeyes on 08 May 2004 - 19:20
When I see this I keep rambling how MS has already made it remember the PC Satisfaction Trial? There you go, the matter is if they want to release it or not.
(1 reply) #18 thexfile on 08 May 2004 - 22:03
I hope MS sales it's AV separately.
#18.1 Shining Arcanine on 09 May 2004 - 00:53
QUOTE
I hope MS sales it's AV separately.


From my understanding, Microsoft isn't even planning to have an AntiVirus (although I am telling them that they should intergrade a basic definition only AntiVirus that updates inself automatically with Windows for the people who don't care enough to buy an AntiVirus and keep it up to date), Microsoft is planning on making it easier for 3rd party AntiViruses to kill viruses.
#19 Mystnight on 08 May 2004 - 22:32
Microsoft should be careful on this move, it could end them in court over a monoply again, remeber the whole netscape, internet explorer thing back in 99?
#20 supersaiyanjericho on 08 May 2004 - 23:10
make it as an option
#21 shao on 09 May 2004 - 00:58
i thought the whole idea behind this (and i'm sure i read this somewhere... like... neowin, or some other site that refers to other sites' with actual content was that microsoft were going to create an os level api into which any AV product could operate.. whether that be mcafee, norton, sophos,.. or microsoft's [bought in] product.

lets face it, the os needs built in av support, but microsoft know if they just bolt one in whether that's their own, or a 3rd party's straight out of the box some whining bitch will complain about it. The only solution is to make it open - but also to provide their own engine to plug in to it.

a bit like how dvd play back in media player operates, but better obviously.
#22 JoDaddy on 10 May 2004 - 02:49
Microsoft includes Cd-R software in their OS, but it uses Roxio technology, if I'm not mistaken. When they had Antivirus software in their computer they used CPS's, this means they pay royalties, which should keep these guys off their backs. If they include AV again, they should do the same thing.
Also, I think it would be as simple to disable/bypass as the included CD-R software in XP.

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.

Advertisement (Why?)