Microsoft Admits That Third-Party Antivirus Is More Effective Than MSE


Recommended Posts

Well this seems to have gone round in circles a few times. Microsoft could easily make MSE nearer in detection rates to the other AV alternatives it`s just this would take a fair amount of resources. They would need a dedicated team scouring malware domains, testing, creating and releasing signatures on an hourly basis. Also people/automation working on better detection of malware families so specific sigs don`t need creating.

One thing to remember when talking about bloat, memory usage is only a small part of the story. Some AV`s will keep the majority of their sigs in memory if available (up to a certain amount) whereas others will have to access them from disc and we all know accessing something from memory is quicker! So just because your AV uses a miniscule amount of memory doesn`t mean it is light. Normally you`ll have to try it for yourself as different settings can also have a big impact, scanning on execution, reading, writing, etc, etc...

 

As has been said before the most important part of the whole equation sits right between your ears ;)

 

I do seem to have had to clean quite a lot of computers with MSE on lately, more so (it seems) than when it was first released. This may be due to the fact Defender is now included in 8/8.1 so the writers make sure it isn`t detected!

I'm talking about average users that use Windows not Linux users. :p

 

I know. I was teasing. I am still amazed that we need anti-virus in this day and time, regardless of the OS. I am sitting here at work on my Windows box now.  

That would be because people are scum bags. It's not a technical question.

 

If we want people to be able to do stuff with their computers, we have to deal with others being *******s.

I know. I was teasing. I am still amazed that we need anti-virus in this day and time, regardless of the OS. I am sitting here at work on my Windows box now.

Yeah I guess! It isn't really something that should be needed, but unfortunately it is due to virus writers and due to the fact that more than fifty percent of users don't take care when on the internet. :/

Yeah I guess! It isn't really something that should be needed, but unfortunately it is due to virus writers and due to the fact that more than fifty percent of users don't take care when on the internet. :/

 

I don't think it is needed. I'm of the opinion that a lot of what these anti-virus do is scam people into believing they need them. Also, people would rather have convenience over security. That said, Google makes Chrome OS so that it scans the system at startup and if any system file is not right then it gets replaced with the correct one. They all could do that.

That said, Google makes Chrome OS so that it scans the system at startup and if any system file is not right then it gets replaced with the correct one. They all could do that.

Interesting idea, but I see two flaws with that concept on a "full" desktop OS. One is the obvious, if malware takes that scanner out or tricks the scanner into thinking a file is good then it's rendered useless. For me the bigger problem would be performance though.. ChromeOS is basically a browser and is quite lightweight, so there wouldn't be that much to scan. Waiting on a complete system scan for a full blown desktop operating system is going to have a huge hit on startup time, regardless of which OS it is. I'd be willing to bet something that like would get disabled by the majority of users just because of the inconvenience of waiting for a few minutes for their system to boot versus a few seconds.

Interesting idea, but I see two flaws with that concept on a "full" desktop OS. One is the obvious, if malware takes that scanner out or tricks the scanner into thinking a file is good then it's rendered useless. For me the bigger problem would be performance though.. ChromeOS is basically a browser and is quite lightweight, so there wouldn't be that much to scan. Waiting on a complete system scan for a full blown desktop operating system is going to have a huge hit on startup time, regardless of which OS it is. I'd be willing to bet something that like would get disabled by the majority of users just because of the inconvenience of waiting for a few minutes for their system to boot versus a few seconds.

Windows 8 essentially does that with secure boot.

 

It checks that the files are signed etc >.< Has the same effect.

I don't think it is needed. I'm of the opinion that a lot of what these anti-virus do is scam people into believing they need them. Also, people would rather have convenience over security. That said, Google makes Chrome OS so that it scans the system at startup and if any system file is not right then it gets replaced with the correct one. They all could do that.

Suppose.

The only problem with that is since Windows Updates replace system files and it might mistakenly think the files replaced is bad, which would cause some problems. 

Windows 8 essentially does that with secure boot.

It's already been beaten, never mind that only somewhat helps systems that actually use it and have it enabled to begin with, namely people running into problems running a non-Windows OS.

Interesting idea, but I see two flaws with that concept on a "full" desktop OS. One is the obvious, if malware takes that scanner out or tricks the scanner into thinking a file is good then it's rendered useless. 

 

That's why the scanner doesn't need to be local but in the cloud, or at least somewhere that nothing can ever touch it.

 

 

For me the bigger problem would be performance though.. ChromeOS is basically a browser and is quite lightweight, so there wouldn't be that much to scan. Waiting on a complete system scan for a full blown desktop operating system is going to have a huge hit on startup time, regardless of which OS it is. I'd be willing to bet something that like would get disabled by the majority of users just because of the inconvenience of waiting for a few minutes for their system to boot versus a few seconds.

 

That's why I say people chose convenience over security. You only boot up once a day, so what if it takes a  few minutes?

That's why the scanner doesn't need to be local but in the cloud, or at least somewhere that nothing can ever touch it.

Brings its own overhead, never mind problems stemming from connectivity issues. If I take my laptop out of range from my network, how's that going to work? (Plus there's the usual "NSA backdoor!!" nonsense if somebody wants to go there, I don't but /shrug on here I'm not surprised by anything anymore, that's not directed at you.)

 

That's why I say people chose convenience over security. You only boot up once a day, so what if it takes a  few minutes?

Well that's purely personal preference of course. Me, I'll take my 15ish second boot time, and haven't had to deal with an oops as far as security goes in ~10 years, never mind it doesn't do jack for people who don't power down their system at all except maybe that once-per-month update. Out of about 15 desktop/server systems here only two ever actually get a full restart/powerdown as they don't have battery backups attached to them, barring a Windows/*Nix kernel update of course. Relying on protection that only runs once a month isn't terribly secure, especially for the malware that doesn't start up until after the system boots anyway, not all of them are rootkits.

I suppose admitting you've got a problem is the first step down the road to fixing that problem.

 

Maybe they'll devote a few more resources towards developing MSE now?

...., and haven't had to deal with an oops as far as security goes in ~10 years...

 

Same here. I rarely have any problems here at work on Windows. It's been years since we've gotten any viruses and we send and receive a ton of email every day and use a browser constantly. I've ran Windows 7 at home until recently and I've never had to install any anti-virus on it. That is what leads me to believe that a lot of this anti-virus scare is just that, a scare tactic.

If they couldn't write a secure OS, what makes you think they can plug the holes any better?

 

It's like asking an engineer why their building fell down. If they knew, they wouldn't have let it happen.

 

Also, I'm inclined to think there is some pressure to be had there >.>

Stop talking out of your ass. x86 systems by design allows any arbitrary code and deep system level access.

 

Can you write a virus for Windows RT?

 

MSE was one of the best antivirus when they put effort on it. Recently they are not focusing on it; that's why it has been going downhill. I think it is a bad decision on their part.

Did anyone really read the article? It mentions that the reason they've slipped on the tests, and why they're near the bottom is that they have shifted focus from the tests to real world threats and up and coming threats. Its says they spent a large amount of time and money on trying to pass those av tests to "look" good, while the software might actually not be that good in a real life situation.

 

So does make you think that some of the AV companies at the top may just actually be focusing on passing the tests, and dont give a crap about it working well in a normal day to day situation

I don't think MSFT ever intended MSE to replace, not even COMPETE with 3rd party AV. If we recall the dilemmas Microsoft was facing: bad publicity revolving around seemingly less secure OS than competitors and antitrust lawsuits.

 

MSE has been a very successful product for MSFT by reducing bad publicity and I think it has to stay marginal to save them from any further antitrust lawsuits.

Stop talking out of your ass. x86 systems by design allows any arbitrary code and deep system level access.

 

Can you write a virus for Windows RT?

 

MSE was one of the best antivirus when they put effort on it. Recently they are not focusing on it; that's why it has been going downhill. I think it is a bad decision on their part.

Yes you can you ignoramus ****wit.

 

You know how we know that? You can root the device, arbitrary code can then be executed.

 

More to the point, this has absolutely nothing to do with the instruction set the chip executes, otherwise Android would be malware free as well. Have I mentioned that there is Malware for ia86 chips also?

 

You are the worst kind of poster. You are simultaneously wrong and being an *******. Even better than that, you took something out of context to attack. My point was that there's a benefit to third parties being in control of the anti-malware work.

 

If Microsoft could have blocked it (or had thought to), they would have done it in their operating system. It's likely they will in future versions, but getting the people who wrote the OS to look for problems with the operating system, as I said, like asking an engineer why their building fell down. They wouldn't have built it that way on purpose.

 

Next time you want to take a swipe, at least be right.

 

  • 1 month later...

I'm not to concerned. In all the years I've been using computers, I've gotten 2 minor viruses which I've manually removed myself.

And I've been dealing with warez and such since 1995, and porn sites.

Although I in a porn sites aren't the culprits for viruses, many people think that's how you get them.

I feel very safe with MSE and Malwarebytes Pro, and my own brain. ;)

MSE/Defender is crap (and they still haven't fixed the bug that causes slowdowns in folders with a lot of EXE's after about 5 years), but it certainly beats having no antivirus at all, a lot of users are still plenty stupid and it's a good thing to have it in Windows out of the box. Of course I usually install Avast for anyone the moment they ask for my help but I can't help everyone :P

This topic is now closed to further replies.
  • Posts

    • 26H2 absolutely will support ARM Windows just not on devices that came with 26H1. This is evident by the fact I am running 26H2, which on my MacBook Neo and Surface Pro 12 (inch), within a VM.
    • Mp3tag 3.35 by Razvan Serea Mp3tag is a powerful and yet easy-to-use tool to edit metadata (ID3, Vorbis Comments and APE) of common audio formats. It can rename files based on the tag information, replace characters or words from tags and filenames, import/export tag information, create playlists and more. The program supports online freedb database lookups for selected files, allowing you to automatically gather proper tag information for select files or CDs. Mp3tag supports the following audio formats: Advanced Audio Coding (aac) Free Lossless Audio Codec (flac) Monkeys Audio (ape) Mpeg Layer 3 (mp3) MPEG-4 (mp4 / m4a / m4b / iTunes compatible) Musepack (mpc) Ogg Vorbis (ogg) OptimFROG (ofr) OptimFROG DualStream (ofs) Speex (spx) Toms Audio Kompressor (tak) True Audio (tta) Windows Media Audio (wma) WavPack (wv) Mp3tag 3.35 changelog: This version introduces a new Files options page, enhanced toolbar customization, support for RF64 WAV files, improved Discogs and MusicBrainz tag sources, and many other improvements and fixes. See the Release Notes for more details. Download: Mp3tag 64-bit | 5.7 MB (Freeware) Download: Mp3tag 32-bit | 5.2 MB Link: Mp3tag Homepage | Screenshot Get alerted to all of our Software updates on Twitter at @NeowinSoftware
    • The FIFA World Cup is not US centric.
    • It’s amusing how Microsoft is pushing IT admins as if this was a major, game-changing update. In reality, it’s just an enablement package that bumps the build number, which is disappointing compared to the more substantial 22H2 and 24H2 releases. Technically, 25H2, 26H1, and the upcoming 26H2 are essentially the same, differing only in support schedules. They could have included the Windows K2 improvements here, but chose not to. The era of Windows being in the backburner continues, and this 26H2 release feels like an afterthought. Shame, Nadella, shame.
    • Microsoft, totally not confusing /s 25H2 - Current for non-Arm based Windows 26H1 - Current for Arm based Windows 26H2 - Only for non Arm Windows
  • Recent Achievements

    • Week One Done
      AMV earned a badge
      Week One Done
    • One Month Later
      AMV earned a badge
      One Month Later
    • Collaborator
      ryansurfer98 went up a rank
      Collaborator
    • One Month Later
      Eurosoft10 earned a badge
      One Month Later
    • Week One Done
      Eurosoft10 earned a badge
      Week One Done
  • Popular Contributors

    1. 1
      +primortal
      523
    2. 2
      +Edouard
      172
    3. 3
      PsYcHoKiLLa
      78
    4. 4
      Steven P.
      72
    5. 5
      Michael Scrip
      71
  • Tell a friend

    Love Neowin? Tell a friend!