Microsoft Security Essentials

From Infogalactic: the planetary knowledge core
Jump to: navigation, search
Microsoft Security Essentials
Logo of Microsoft Security Essential: A blue castle with a flag on the top and two gates
Product's main window
Microsoft Security Essentials version 4.0 running on Windows 7
Developer(s) Microsoft
Initial release 29 September 2009 (2009-09-29)
Stable release 4.9.218.0[1] / 23 February 2016; 8 years ago (2016-02-23)[2]
Preview release 4.8.203.0[2] / 14 April 2015; 9 years ago (2015-04-14)[2]
Development status Active
Operating system <templatestyles src="Plainlist/styles.css"/>
Platform IA-32 and x64
Size <templatestyles src="Plainlist/styles.css"/>
  • IA-32: 10.7 MB[4]
  • x64: 13.1 MB[4]
  • IA-32 definitions: 76.4 MB[5]
  • x64 definitions: 77.0 MB[5]
  • NIS definitions: 0.9 MB[5]
Available in 33 languages[6]
<templatestyles src="Template:Hidden begin/styles.css"/>
List of languages
English, Bulgarian, Chinese (Simplified), Chinese (Traditional), Croatian, Czech, Danish, Dutch, Estonian, Finnish, French, German, Greek, Hungarian, Italian, Japanese, Korean, Latvian, Lithuanian, Norwegian, Polish, Portuguese (Brazilian), Portuguese (Portugal), Romanian, Russian, Serbian (Latin), Slovak, Spanish, Swedish, Thai, Turkish, Ukrainian and Vietnamese
Type Antivirus and network intrusion detection system
License Freeware[7]
Website windows.microsoft.com/mse/

Microsoft Security Essentials (MSE) is an antivirus software (AV) product that provides protection against different types of malicious software such as computer viruses, spyware, rootkits and Trojan horses. Before version 4.5, MSE ran on Windows XP, Windows Vista and Windows 7, but not on Windows 8 and later, which have built-in AV components. MSE 4.5 and later do not run on Windows XP. The license agreement allows home users and small businesses to install and use the product free of charge. It replaces Windows Live OneCare, a discontinued commercial subscription-based AV service, and the free Windows Defender, which until Windows 8 protected users from only adware and spyware.

Built upon the same virus definitions and scanning engine as other Microsoft antivirus products, MSE provides real-time protection, constantly monitoring activities on the computer and scanning new files as they are downloaded or created and disabling detected threats. It lacks the personal firewall of OneCare or the centralized management features of Forefront Endpoint Protection.

Microsoft's announcement of its own AV software on 18 November 2008 was met with mixed reactions from the AV industry. Symantec, McAfee and Kaspersky Lab—three competing independent software vendors—dismissed it as an unworthy competitor, but AVG Technologies and Avast Software appreciated its potential to expand the consumers' choice of AV software. AVG, McAfee, Sophos and Trend Micro claimed that the integration of the product into Microsoft Windows would be a violation of competition law.

The product received generally positive reviews praising its user interface, low resource usage and freeware license. It secured AV-TEST certification on October 2009, having demonstrated its ability to eliminate all widely encountered malware. However, it lost the certificate on October 2012, having shown a constant decline in protection and repair scores. In June 2013, MSE achieved the lowest possible protection score, zero. According to a March 2012 report by anti-malware specialist OPSWAT, MSE was the most popular AV product in North America and the second most popular in the world, which has resulted in the appearance of several rogue antivirus programs that try to impersonate it.

Features

Microsoft Security Essentials is an antivirus software (AV) product that fights malicious software (malware), including computer viruses, spyware, Trojan horses and rootkits. It replaces Windows Live OneCare, a discontinued commercial subscription-based AV service, and the free Windows Defender, which until Windows 8 only protected users from adware and spyware. It automatically checks for and downloads the virus definitions it relies on from Microsoft Update, a web-based software service updated three times a day.[8] Users may alternatively download the updates manually from the Microsoft Security Portal website.[5] On 30 September 2011, a faulty definition update caused the product to incorrectly tag Google Chrome as malware. The issue was resolved within three hours.[9][10] MSE originally ran on Windows XP, Windows Vista and Windows 7,[3] although versions 4.5 and later do not run on Windows XP[11] and Microsoft stopped producing definition updates for Windows XP on 14 July 2015.[12]

MSE is built upon the same foundation as other Microsoft security products; all use the same virus definitions and anti-malware engine, known as Microsoft Malware Protection Engine (MSMPENG).[13][14] It does not have the personal firewall of OneCare or the centralized management features of Forefront Endpoint Protection.[15]

MSE provides real-time protection, constantly monitoring activities on the computer and scanning new files as they are downloaded or created.[16] It disables detected threats and prompts for user input on how to deal with them. If no response is received within ten minutes, suspected threats are handled according to the default actions defined in the application's settings. Depending on those settings, it may also create System Restore checkpoints before removing the detected malware.[16] As a part of real-time protection, by default, MSE reports all suspicious behaviors of monitored programs to Microsoft Active Protection Service (MAPS, originally Microsoft SpyNet[17]), a web-based service. If the report matches a newly discovered malware threat with an unreleased virus definition, the new definition is downloaded to remove the threat.[18]

Hardware requirements for the product depend on the operating system; on a computer running Windows Vista or Windows 7, it requires a 1 GHz processor, 1 GB of RAM, a computer monitor with a display resolution of at least 800 × 600 pixels, 200 MB of free hard disk space and an Internet connection.[3]

Development

On 18 November 2008, Microsoft announced plans for a free consumer security product, codenamed Morro.[19] This development marked a change in Microsoft's consumer AV marketing strategy: instead of offering a subscription-based security product with a host of other tools, such as backup and a personal firewall, Morro would offer free AV protection with a smaller impact on system resources.[20] Amy Barzdukas, senior director of product management for the Online Services and Windows Division at Microsoft, announced that Morro would not directly compete with other commercial AV software; rather it was focused on the 50 to 60 percent of PC users who did not have or would not pay for AV protection.[21] By 17 June 2009, the official name of Morro was revealed: Microsoft Security Essentials.[22]

On 23 June 2009, Microsoft released a public beta to 75,000 users in the United States, Israel, China and Brazil. Anticipated to be available in 20 markets and 10 languages, the product was scheduled for release before the end of 2009;[23] the final build was released on 29 September 2009.[24]

Version 2.0

Almost a year after the initial release, Microsoft quietly released the second version. It entered the technical preview stage on 19 July 2010,[25][26] and the final build was released on 16 December 2010. It includes Network Inspection System (NIS), a network intrusion detection system that works on Windows Vista and Windows 7, as well as a new anti-malware engine that employs heuristics in malware detection. Version 2.0 integrates with Internet Explorer to protect users against web-based threats.[27][28] NIS requires a separate set of definition updates.[5]

Version 4.0

Sixteen months after the release of version 2.0, Microsoft skipped version 3.0 and released Microsoft Security Essentials 4.0. A public beta program started on 18 November 2011, when Microsoft sent out invitations to potential participants without announcing a version number.[29][30] The first beta version was released on 29 November 2011,[31][32] and the final build on 24 April 2012.[17] Microsoft subsequently initiated a pre-release program that provides volunteers with the latest beta version and accepts feedback.[33]

Version 4.5

On 21 February 2014, version 4.5 entered beta stage.[34] On the same day, Microsoft announced that starting with this version, Windows XP would not be supported.[11] Older versions would continue to receive virus definition updates until 14 July 2015.[12]

Future

<templatestyles src="Module:Hatnote/styles.css"></templatestyles>

Main article: Windows Defender

Microsoft Security Essentials does not run on Windows 8 and later, which has its own security subsystem. On 13 September 2011, at Build conference in Anaheim, California, Microsoft unveiled the developer preview of Windows 8, which had a security component capable of preventing an infected USB flash memory from compromising the system during the boot process.[35][36] On 15 September, Windows 8 developer's blog confirmed that Windows Defender in Windows 8 would take over the role of virus protection. In an included video, Jason Garms of Microsoft showed how Windows Defender is registered with Action Center as an AV and spyware protection tool, and how it blocks drive-by malware.[37] On 3 March 2012, Softpedia reviewed the consumer preview of Windows 8 and noted the similarity in appearance of Windows Defender and Microsoft Security Essentials 4.0 Beta. According to Softpedia, Windows 8 Setup requires Microsoft Security Essentials to be uninstalled before upgrading Windows 7.[38]

Licensing

File:Microsoft Security Essentials Genuine Notification.PNG
A popup notification identifying a Windows license problem that will prevent Microsoft Security Essentials from working unless resolved

The product's license agreement allows home users to download, install and use it on an unlimited number of computers in their households free of charge, so long as each computer has a legitimately licensed copy of Microsoft Windows.[7] Since October 2010, small businesses have also been allowed to install the product on up to 10 devices,[39] but use in academic institutions and governmental locations is forbidden, as is reverse-engineering, decompiling or disassembling the product or working around its designed limitations.[7]

MSE requires no registration or personal information to be submitted during installation;[40] however, the validity of the operating system's license is verified during and after installation using the Windows Genuine Advantage system. If said license is found to be invalid, the software will notify the user and will cease to operate after a period of time.[7]

Reception

Industry response

The announcement and debut of Microsoft Security Essentials was met with mixed responses from the AV industry. Symantec, McAfee and Kaspersky Lab, three competing vendors, claimed it to be inferior to their own software.[41] Jens Meggers, Symantec's vice president of engineering for Norton products, dismissed it as "very average – nothing outstanding".[42] Tom Powledge of Symantec urged his customers to be mindful of what protection they chose, bearing in mind that OneCare offered "substandard protection" and an "inferior user experience".[43] Joris Evers, director of worldwide public relations for McAfee stated "with OneCare's market share of less than 2%, we understand Microsoft's decision to shift attention to their core business."[44] Justin Priestley of Kaspersky stated that Microsoft "continued to hold a very low market share in the consumer market, and we don't expect the exit of OneCare to change the playing field drastically."[44]

Avast Software said that it had an ambivalent view towards the product. Vincent Steckler, Avast Software CEO said "MSE is not the silver bullet but it is also not the bad sequel to One Care that some claim."[45] A representative of AVG Technologies stated, "We view this as a positive step for the AV landscape. AVG has believed in the right to free antivirus software for the past eight years."[44] However, AVG raised the issue of distributing the software product and said, "Microsoft will have to do more than simply make the product available,"[44] adding that integration of Microsoft Security Essentials with Microsoft Windows would be a violation of competition law.[46] McAfee, Sophos and later Trend Micro affirmed that an antitrust lawsuit would surely have followed if Microsoft had bundled the product with Windows.[47][48]

The announcement of Microsoft Security Essentials affected the stocks of AV vendors. On 19 November 2008, after Microsoft announced codename Morro, Symantec and McAfee shares fell 9.44 and 6.62 percent respectively.[21] On 10 June 2009, after announcing an upcoming beta version, Microsoft shares rose 2.1 percent. Symantec and McAfee shares, however, fell 0.5 and 1.3 percent respectively. Daniel Ives, an analyst with FBR Capital Markets, said that Microsoft Security Essentials would be a "long-term competitive threat", although near-term impact would be negligible.[49]

Reviews and awards

File:MSE Threat Alert.png
A pop-up notification that malware has been found

The public beta version received several reviews, citing its low resource usage, straightforward user interface and price point.[16][50][51][52] Brian Krebs of The Washington Post reported that a quick scan on a Windows 7 computer took about 10 minutes and a full scan about 45 minutes.[16] Ars Technica reviewed it positively, citing its organized interface, low resource usage, and its status as freeware.[53]

Nick Mediati of PCWorld noted MSE's "clear-cut" and "cleanly designed" tabbed user interface. He did, however, find some of the settings to be cryptic and confusing, defaulting to "recommended action", with the only explanation of what that action is to be found in the help file. He was also initially confused because the user interface failed to mention that Microsoft Security Essentials automatically updates itself, rather than having to be manually updated via the Update tab;[51] an explanation of this feature was included in the final release.[54]

Neil Rubenking of PC Magazine successfully installed the beta version on 12 malware-infected systems and commented on its small installation package (about 7 MB, depending on the operating system) and speedy installation. But the initial virus definition update took between 5 and 15 minutes, and the full installation occupied about 110 MB of disk space. Rubenking noted that the beta version sets Windows Update into fully automatic mode, although it can be turned off again through Windows Control Panel. Some full scans took more than an hour on infected systems; a scan on a clean system took 35 minutes.[50] An on-demand scan test Rubenking conducted in June 2009 with the beta version found 89 percent of all malware samples: 30 percent of the commercial keyloggers, 67 percent of rootkits, but only half of the scareware samples. The product's real-time protection found 83 percent of all malware and blocked the majority of it: 40 percent of the commercial keyloggers and 78 percent of the rootkits were found.[50]

File:AV-TEST.org - MSE results on chart.png
Results of AV-TEST antivirus software tests on Microsoft Security Essentials, between June 2010 to June 2013 in three categories: Protection, repair and usability

On 7 January 2010, Microsoft Security Essentials won the Best Free Software award from PC Advisor.[55] In December the same year, it secured the Bronze award from AV-Comparatives for proactive detection of 55 percent of new or unknown malware, the Silver award for low false-positives (six occurrences) and the Bronze award for overall performance.[56]

In October 2009, AV-TEST conducted a series of trials on the final build of the product in which it detected and caught 98.44 percent of 545,034 computer viruses, computer worms and software Trojan horses as well as 90.95 percent of 14,222 spyware and adware samples. It also detected and eliminated all 25 tested rootkits, generating no false-positives.[57] Between June 2010 to January 2013, AV-TEST tested Microsoft Security Essentials 14 times; in 11 out of 14 cases, MSE secured AV-TEST certification of outperforming AV industry average ratings.[58][lower-alpha 1] Microsoft Security Essentials 2.0 was tested and certified on March 2011. The product achieved a protection score of 2.5 out of 6, a repair score of 3.5 out of 6 and a usability score of 5.5 out of 6. Report details show that although version 2.0 was able to find all malware samples of the WildList (widespread malware), it was not able to stop all Internet-based attacks because it lacks personal firewall and anti-spam capabilities.[59] In an April 2012 test, version 2.1 achieved scores of 3.0, 5.5 and 5.0 for protection, repair and usability.[60] Version 4.0 for Windows 7 SP1 (x64) was tested in June 2012 and achieved scores of 2.5, 5.5 and 5.5 for protection, repair and usability.[61] In October 2012, the product lost its AV-TEST certification when Microsoft Security Essentials 4.1 achieved scores of 1.5, 3.5 and 5.5 for its protection, repair and usability.[62][63]

In AV-TEST's 2011 annual review, Microsoft Security Essentials came last in protection, seventh in repair and fifth in usability.[64] In the 2012 review, it came last in protection and best in usability; however, having lost its certificate, it was not qualified for the usability award.[65] In June 2013, MSE achieved the lowest possible protection score, zero.[66] In August 2015 for Windows 7 it was last, with 3 blobs out of 6 for protection. Performance—in the sense of speed—and usability were good.[67] MSE found 99.7% of "widespread and prevalent malware discovered in the last 4 weeks", slightly better than the industry average, but only 87.2% of "0-day malware attacks, inclusive of web and e-mail threats", against an industry average of 98.2%.[68]

Market share

On 29 September 2010, a year after its initial release, Microsoft announced that MSE had more than 30 million users.[69] The Security Industry Market Share Analysis report of June 2011, published by OPSWAT, describes it as one of the most popular AV products in the world,[70] with 10.66 percent of the global market[70]:5 and 15.68 percent of the North American market.[70]:4 The same report shows Microsoft as the number one AV vendor in North America with 17.07 percent market share,[70]:3 and the number four AV vendor worldwide.[70]:2

John Dunn of PCWorld, who analyzed the report, noted that the tendency to use free AV software is something new: "After all, free antivirus suites have been around for years but have tended to be seen as the poor relations to paid software." He named Microsoft Security Essentials as an influence on PC users to adopt free AV software.[71]

A September 2011 OPSWAT report found that MSE had further increased its market share to become the second most popular AV product in the world, and remained the most popular in North America.[72] OPSWAT reported in March 2012 that the product had maintained its position, and that Microsoft's market share had improved by 2 percent worldwide and 3 percent in North America.[73] Seth Rosenblatt of CNET News commented on how the product's share rose from 7.27 in 2010 to 10.08 in 2012, stating that "use of the lightweight security suite exploded last year".[74]

Impersonation by malware

The popularity of Microsoft Security Essentials has led to the appearance of malware abusing its name. In February 2010, a rogue security package calling itself "Security Essentials 2010" appeared on the Internet. Designated TrojanDownloader:Win32/Fakeinit by Microsoft, it bears no visual resemblance to the Microsoft product.[75][76] It reappeared in November 2010, this time calling itself "Microsoft Security Essentials 2011".[77] A more dangerous rogue appeared in August 2010. Designated Rogue:Win32/FakePAV or Unknown Win32/Trojan, it closely resembles Microsoft Security Essentials and uses sophisticated social engineering to deceive users and infect their systems, under the guise of five different fictional anti-malware products. It also terminates and prevents the launch of 156 different programs, including Registry Editor, Windows Command Prompt, Internet Explorer, Mozilla Firefox, Opera, Safari and Google Chrome.[78][79][80]

See also

References

Notes

  1. ↑ According to AV-TEST: "Jeder Unterpunkt der Hauptkategorien wird über den Testzeitraum monatlich bewertet. Die erreichte Leistung wird prozentual vom Industrie-Durchschnitt eingestuft. [...] Für den Privatanwenderbereich muss ein Produkt mindestens 10 der erreichbaren 18 Punkte erhalten sowie mindestens 1 Punkt in jeder Kategorie, um sich ein "AV-TEST CERTIFIED" zu verdienen." Translation: The performance level achieved is considered as a percentage of the industry average score. [...] Home-user products must achieve at least 10 of the 18 points available and at least 1 point in each category in order to earn an "AV-TEST CERTIFIED" seal of approval.[81]

Citations

  1. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  2. ↑ 2.0 2.1 2.2 Lua error in package.lua at line 80: module 'strict' not found.
  3. ↑ 3.0 3.1 3.2 Lua error in package.lua at line 80: module 'strict' not found.
  4. ↑ 4.0 4.1 Lua error in package.lua at line 80: module 'strict' not found.
  5. ↑ 5.0 5.1 5.2 5.3 5.4 Lua error in package.lua at line 80: module 'strict' not found.
  6. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  7. ↑ 7.0 7.1 7.2 7.3 Lua error in package.lua at line 80: module 'strict' not found.
  8. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  9. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  10. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  11. ↑ 11.0 11.1 Lua error in package.lua at line 80: module 'strict' not found.
  12. ↑ 12.0 12.1 Lua error in package.lua at line 80: module 'strict' not found.
  13. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  14. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  15. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  16. ↑ 16.0 16.1 16.2 16.3 Lua error in package.lua at line 80: module 'strict' not found.
  17. ↑ 17.0 17.1 Lua error in package.lua at line 80: module 'strict' not found.
  18. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  19. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  20. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  21. ↑ 21.0 21.1 Lua error in package.lua at line 80: module 'strict' not found.
  22. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  23. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  24. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  25. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  26. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  27. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  28. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  29. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  30. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  31. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  32. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  33. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  34. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  35. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  36. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  37. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  38. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  39. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  40. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  41. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  42. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  43. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  44. ↑ 44.0 44.1 44.2 44.3 Lua error in package.lua at line 80: module 'strict' not found.
  45. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  46. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  47. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  48. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  49. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  50. ↑ 50.0 50.1 50.2 Lua error in package.lua at line 80: module 'strict' not found.
  51. ↑ 51.0 51.1 Lua error in package.lua at line 80: module 'strict' not found.
  52. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  53. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  54. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  55. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  56. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  57. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  58. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  59. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  60. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  61. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  62. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  63. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  64. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  65. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  66. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  67. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  68. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  69. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  70. ↑ 70.0 70.1 70.2 70.3 70.4 Lua error in package.lua at line 80: module 'strict' not found.
  71. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  72. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  73. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  74. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  75. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  76. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  77. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  78. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  79. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  80. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  81. ↑ Lua error in package.lua at line 80: module 'strict' not found.

External links

Retrieved from "https://infogalactic.com/w/index.php?title=Microsoft_Security_Essentials&oldid=710700496"