• On TechRepublic: Five super-secret features in Windows 7
November 18, 2008 2:28 PM PST

Microsoft to offer free consumer security suite

by Elinor Mills

Updated at 6:15 p.m. PST with Microsoft and McAfee comment, at 5:30 p.m. with Sophos comment, and at 4:40 p.m. with customer comment.

Windows Live OneCare logo

(Credit: Microsoft)

Microsoft on Tuesday said it is changing its strategy for offering PC antivirus software, with plans to discontinue its subscription-based consumer security suite and instead offer individuals free software to protect their PCs.

Code-named Morro, the new offering will be available in the second half of 2009 and will protect against viruses, spyware, rootkits, and Trojans, the company said in a statement.

With the arrival of Morro, Microsoft plans to stop selling the Windows Live OneCare service, although the two services are not identical. Morro lacks OneCare's non-security features, such as printer sharing and automated PC tuneup. Morro will, however, use fewer resources than the subscription-based offering, making it better suited to low-bandwith systems and less powerful PCs.

Microsoft decided to switch to a free product because there are still so many PCs out there that lack any antivirus software.

"Because they're not concerned about malware, the number of people who don't have antivirus software or don't keep it up to date exceeds 50 percent in developed markets, and it's worse in emerging markets," Amy Barzdukas, senior director of product management for the Online Services and Windows Division at Microsoft, said in an interview. "Live OneCare was tailored for developed markets with broadband...and it's not meeting the needs of a lot of customers."

Asked why the company wouldn't just offer both the free and subscription versions, Barzdukas said: "Having core anti-malware at no charge for consumers, we believe, we will protect more consumers that way." Consumers who want more than the features Morro will offer have "fine alternatives from third parties" to buy, she added.

Despite the fact that McAfee stands to lose paying customers to Microsoft's new free software, McAfee spokesman Joris Evers said the news signaled a defeat for Microsoft.

"Consumers have voted; OneCare, in its two years on the market, has achieved less than 2 percent market share," he said in an interview. "Microsoft is giving up and has defaulted to a dressed-down freeware model that does not meet consumer security needs. This is good news for McAfee."

Barzdukas dismissed the notion that Microsoft was responding to market share or competitive pressures. "If the current approach isn't working... (as far as protecting consumers broadly) we need to go with a new approach," she said.

Asked if Microsoft would ever consider bundling the security features into Windows, Barzdukas said: "I can't foresee such a time."

Representatives from Symantec could not be reached for comment Tuesday.

Graham Cluley, senior technology consultant at Sophos, said the news doesn't impact his security firm because it focuses on the enterprise market.

"I think this announcement may cause some sleepless nights for the chiefs at McAfee and Symantec--they've always done well out of the consumer anti-virus market, and with tougher financial times ahead of them (they) won't be pleased to see the possibility of that evaporating further," he wrote in an e-mail response to questions.

Microsoft had been selling Windows Live OneCare for $49.95 per year, which covered up to three PCs and offered centralized backup and optimization features in addition to security capabilities.

Windows Live OneCare will continue to be sold for Windows XP and Vista via retailers through June 30, 2009, and direct sales will be gradually phased out as Morro becomes available. "Microsoft will ensure that all current customers remain protected through the life of their subscriptions," the statement said.

Morro, which will be available for download over the Internet, will work on Windows XP, Windows Vista, and the upcoming Windows 7.

The news frustrated OneCare customer Cas Purdy who complained on Facebook: "I just paid for OneCare. I'm kind of bitter."

Purdy, who heads up public relations at security firm Websense, said in a follow-up phone interview that he paid for his OneCare subscription a few weeks ago for his home laptop. Websense does not compete with Microsoft on consumer software.

"I'm all for a free tool but given that I just paid for it...we'll see," he added.

Microsoft's Barzdukas said customers should contact customer support if they have a concern. "We will absolutely do the right thing by our customers, and if the customer wants to call our free phone support line we'll make sure they are happy," she said.

A posting on the Windows Live OneCare Team Blog has a detailed FAQ for customers.

Microsoft started selling OneCare in May 2006, three years after signaling its intent to enter the security software market with its purchase of Romania's GeCad.

Although OneCare received only mixed reviews, it significantly shook up the security software market, resulting in generally lower prices.

The software maker has also started selling its Forefront line of security software for businesses and indicated at its Microsoft Online launch on Monday that it plans to expand its lineup of hosted security services.

CNET News' Ina Fried contributed to this report.

Elinor Mills covers Internet security and privacy. She joined CNET News in 2005 after working as a foreign correspondent for Reuters in Portugal and writing for The Industry Standard, the IDG News Service, and the Associated Press. E-mail Elinor.
advertisement
Click here!
Recent posts from Security
Apple plugs holes for domain spoofing, other attacks
Microsoft launches Forefront Protection 2010
'60 Minutes'--Cyberwar: Sabotaging the system
Microsoft to fix holes in Windows, Office
Google privacy controls: Most people won't care
Zero-day flaw found in Web encryption
Mac Game: Art project or malware?
Corporate bank accounts targeted in online fraud
Add a Comment (Log in or register) Showing 1 of 3 pages (75 Comments)
by Vurk November 18, 2008 2:40 PM PST
Hopefully this will be more effectively than Windows Defender, which has been consistently rated by independent testing centers as "almost worse than nothing at all."
Reply to this comment
by Maxwell Studly November 19, 2008 7:34 AM PST
Windows Defender isn't an antivirus application in the traditional sense. Next time, don't try so hard to embarrass yourself by making comments to articles you don't really understand. Thanks! :)
by rmva November 18, 2008 2:58 PM PST
Live OneCare works great. Now it will be free!
Reply to this comment
by MSITHero November 18, 2008 7:48 PM PST
You miss read they are not giving all of the features of One Care for free Just AV, Malware. The rest of the functionality that I LOVE about OneCare are going away.
by Joe90210 November 18, 2008 11:01 PM PST
Windows Live OneCare will be discontinued:
http://windowsonecare.spaces.live.com/default.aspx
by slimbob1210 September 26, 2009 1:48 PM PDT
What is the link tweet me this link on twitter at thefreebe
by sanenazok November 18, 2008 3:10 PM PST
I can't wait for the jokes.
Dude: Hey Sue, it looks like your anti-virus software isn't running?
Sue: You mean it's off?
Dude: Yes, your Morro is off.
Sue: I'll turn Morro on
Dude: I know you are, but what am I?
Reply to this comment
by MafiaPenguin November 19, 2008 1:15 AM PST
Very funny. -.-

yeah, it was.

:P
by m.afshari November 19, 2008 2:52 AM PST
Nice one!
by dexter_birdbrain November 19, 2008 9:14 PM PST
Yeah...First thing came to my mind - "What the heck? 'Moron'? Hold on...that can't be true! Oh yeah...its actually 'Morro'!"
Funny thing that M$ should sell/provide an antivirus in the first place. Its almost like packaging a faulty product with the spares.

Disclaimer:- I am no M$ basher. I love Windows XP for its simplicity and serving all my needs.
by john55440 November 18, 2008 3:22 PM PST
Free-but-mediocre is better than nothing, but I would hate to see superior for-pay products driven out of the market.
Reply to this comment
by Renegade Knight November 19, 2008 7:09 AM PST
I paid for two "superior" products. Both failed. Norton's would forget I had paid every now and then and quit working. It would also decide I had too many installs and refuse to work at all. Given I didn't have too many installs, and I had paid. It's inexcusable to lose service like that. System Mechanic's suite...maybe didn't quite reach "superior" status but the problems were the same. Worse actually. I ended up disabling the firewall and antivirus. They never worked right.

Now i use free. It may not be as good as Nortons when it worked. But it has always worked.
by Heebee Jeebies November 19, 2008 12:58 PM PST
When Symantec has anything that is superior to anything that will be when hell freezes over. Symantec's products are just a smidge less than a virus themselves. McAfee is at best run of the mill though I would take them over Symantec any day of the week.

Robert
by Jon N. November 18, 2008 3:45 PM PST
Well, until June 2009, Download & install Comodo Pro Firewall (it's free), Free AVG Anti-virus, SpywareBlaster, and Spybot Search & Destroy. These can all be found at www.download.com . Also, Make sure you use Firefox Web Browser, Thunderbird Email Client, and OpenOffice.org. Don't use Internet Explorer for anything but windows updates. If you're brave, and want even more security, change your Operating System to Ubuntu Linux 8.10, and say goodbye to Windows altogether.
Reply to this comment
by gggg sssss November 18, 2008 5:49 PM PST
of course then you will have a hard time getting any real work done.
by eyeslave November 18, 2008 7:41 PM PST
Perfect suggestion!
by John Howell November 19, 2008 2:23 AM PST
Wow, Richard Stallman was right again. People are crazy to pay money to a company to run a critical service or store your data when they can just decide to stop provideing that service whenever they like and dissapear into the either.

What happens if you want some of your files back that were backed up by OneCare after 2009? Gone. The money spent on that protection wasted.

For me, I haven't had any troubles with viruses or spyware since I stopped using Windows. 8). Now if only there was an answer to SPAM.
by pmfjoe November 19, 2008 8:30 AM PST
@ John Howell

1) The backups are not online backups they are backups to customer owned CDs, DVDs, or external hard drives. 2) It is a backup not an original so even if they were online backups the people would have plenty of time to install a new online backup service.
by cary1 June 16, 2009 1:22 PM PDT
What a coincidence, I installed uBuntu yesterday in VirtualBox, wasted couple of hours before I could figure out how to change screen resolution. But it's a very good product. If I didn't live in real world, I would use it all the time
by El_Segfaulto June 16, 2009 2:23 PM PDT
Each OS has its place. I use Windows for my 3D modeling hobby, Photoshop, and games. I have Ubuntu with XBMC on my HDTV. It was simply astounding how everything was plug and play. I've been a Linux user for more than a decade now and Ubuntu 9.04 was the first install of any OS that I've ever used that didn't have me searching for drivers. Heck even my MPC remote control worked out of the box.
by retroboy77 November 18, 2008 3:49 PM PST
Oooooh! I love OneCare! This is exciting. I'll bet that Morro is just a codename though, although I hope that is isn't OneCare either.
Reply to this comment
by t8 November 18, 2008 4:03 PM PST
Boring.

Wow Microsoft are going to save Windows with their own version of antivirus. Noboday cares anymore. Windows and viruses are partners in crime. Better off using Firefox and AVG. Both are free. Firefox is more secure than IE, and AVG is up there with the best antivirus programs.

Better still, wait for Android. It will work on Laptops.
Reply to this comment
by ppgreat November 18, 2008 4:20 PM PST
"This is a real nice computer you got here. Be a shame if somethin' were to happen to it."

I'm just reminded of Elliot Carver in Tomorrow Never Dies, when he asks his computer company associate if they shipped the software with all the bugs intact so they can score more money on the fixes.

If it does become as effective as MacAfee or Norton (doubtful), then it's only as a result of 'insider coding'.
Reply to this comment
by paulopmx November 18, 2008 4:52 PM PST
'Morro' is a codename.
What a morro.
Reply to this comment
by chrisx1 November 18, 2008 4:58 PM PST
They didn't say it's going to be the same was what you get with OneCare.
OneCare is more than just an antivirus.
Reply to this comment
by timster799 November 18, 2008 5:51 PM PST
Good move. The name brand security suites out there are far too bloated to be useful anyway. I get McAfee free from Comcast, but choose not to download it, using AVG instead and windows firewall. And Norton's is major bloatware that will definitely slow any computer. Hopefully Microsoft will keep the security suite lite.
Reply to this comment
by TxTom21 November 18, 2008 6:10 PM PST
I think really that MS has seen that the free versions of other products (AVG, TrendMicro, Avast, Avira) have made a dent in the pay-for offerings and have chosen good will instead of greed for a change. I hardly know anyone who even know of 1-Care. By giving it away, they're actually showing good will for a change. If they offer the full suite for a fee, they'll do just like the other companies which give away the basic and charge for the deluxe. I think it's a good move.
Reply to this comment
by mariusthull November 18, 2008 10:14 PM PST
No, this is more like a case of embrace, extend, extinguish. Microsoft always misses the mark on the first couple of tries, which is the case with OneCare. It might not have been a bad product or service but it wasn't quite what the customer wanted. So now they come out with a second iteration of a security suite. When it's first intorduced it'll be an optional download, then it'll be rolled into a windows vista service pack. I won't be nearly as good as the other security software out there but it'll be free, easy to get, and it'll be good enough. I wouldn't be at all surprised if we see ms's antivirus, anti-malware, and anti-spyware built right into windows 7. Building an argument to support anti-virus as part of the os will be a lot easier than arguing that the browser is part of the os.
My Advice to anyone that owns shares in a company that sells a security suite is to sell them when they get to an acceptable price.
by El_Segfaulto June 16, 2009 2:24 PM PDT
I hope you're right. The question is how long until we see a EU lawsuit claiming that Microsoft bundling AV software is unfair to competitors.
by queticomn November 18, 2008 6:29 PM PST
I use McAfee Total security which has features many other anti-virus software applications do not have. As for windows, im migrating to SUSE Desktop Enterprise from Noell (a Linux distro) for my operating system. Check out SUSE Desktop 10 here, http://www.novell.com/linux/demos/desktop.html n more info here http://www.novell.com/linux/ Ububtu is the Linux version of windows. Real geeks use SUSE or OPEN SUSE :)
Reply to this comment
by jtjt145 November 18, 2008 6:34 PM PST
To Micro$oft: how about making safe software in the first place?
Users of Linux don't even know the word anti-virus.
Reply to this comment
by Alex Alexzander November 18, 2008 7:52 PM PST
When Linux has 95% of the desktop market you'll see viruses.

Alex Alexzander
by joshsc November 19, 2008 6:46 AM PST
Stupid comment
by KLR123 November 19, 2008 10:28 AM PST
jtjt145 has obviously never written a line of code in his life. If he had, he'd realize that there is no code anywhere that is bug free. Code is written by humans and humans make mistakes.

And I giggle at these people who say we should use everything that's non-Microsoft. It's the whole "hate Microsoft because they're the evil empire" mentality that just show's their ignorance and immaturity. There are products that are good and there are products that aren't. They're not all bad. Apple has had their own set of issues with their computers and iPhone. (I *hate* my iPhone and AT&T service.)

What most people don't realize is that Microsoft is made up of the most amazing, caring people. Not everyone is like that but many are. As a group, they do amazing things around the world for our communities and environment.

They don't always make the right decision. But I can point to Yahoo, Google, Linux, Apple and a whole slew of companies and say the same thing. We're all just people trying to make the best decisions possible. Sometimes they really suck. Sometimes they really work.

In the end, Microsoft has done some amazing things that has changed the world in which we live. It's not the same company it was in the 1980's. So, whatever their reason for ending OneCare service was (it worked great by the way and I NEVER had performance issues like I did with Norton and McAfee), whether it was because they didn't gain market share or whatever, they have made the choice to spend money on a regular basis to create and maintain an antivirus program so that more computers are covered. They could have just said, "nah, sorry, you guys are on your own. It's not profitable for us so we are getting out of the business." Instead they're spending resources to make sure more people are covered. I don't see McAfee and Norton doing anything close to that.

So keep on spewing all your venomous attacks at a company just because it's successful. There are plenty of us who love Microsoft and what they've done for us. I love their products and will continue to support them. You have every right to your opinion. There are plenty of us who love Microsoft and their products... obviously.
by chash360 November 19, 2008 12:18 PM PST
jtjt145, This is so true, its like creating the disease to sell you the cure. Now they want to give aware a psuedo-cure, when they should just quit making the disease.

KLR123 If you actually know anything about writing code you know that software has no moving parts, it does not wear out, flaws can be fixed (permanently) once found, and more importantly a flaw in code does not equate to a security risk. If your code has a bug in it (the typical human mistake) it by NO means, implies that it is a compromise of security. Your program, application, buggy code will simply crash, and if your kernel is properly written this does not leave you open to an attack, that exploits the 'crash'.

If they would follow the simple DOD protocols and standards set forth on the original internet, long before you ever heard of Micro$oft, there would not be such a security issue. That first rule of thumb, you never, ever execute arbitrary code from a remote source, period! Scripting, ActiveX, DCOM, these are all M$ 'innovations' (and others have followed suit) that have compromised the entire internet. If code executes in your process space, has access to your file system, utilizes network, device hardware, or memory resources, it had damn well better reside on your local computer as an installed and offline tested piece of software, or you are asking for trouble!

Linux will not ever see the amount of serious computer flaws that M$ Software has, because they actually, and honestly, address and fix flaws when they find them. They do not just move the security holes around with patches. They are not motivated by sales and greed to get you to buy the next version. The idea of planned obsolesence (obscene in my book) is not in their book at all! They would like to get some real work done with their computers instead of just figuring out how to make money selling the next version of computer stuff.

I don't want to bash indiviuals at any of these companies, I expect 80%-90% of them are honest, caring individuals who really do want their products to be great (especially their support depts), but if your entire business model relies upon growth of revenue, profit and sales of the next, latest and greatest version of stuff, regardless of what you have already done, then you are locked in to defeating and supplanting your own products.

Look at the auto industry, if they made a car that could last forever with only minimal maintenance, how would they sell sooo many cars every single year? Fortunately for them, those machines have moving parts, they do wear out, they do have to be replaced, for more reasons than just keeping up with the Jones' and making a fashion statement.

Tell me why this should be the case with software? I still have an original Windows 98 boot disk, and I can still use it to boot and install 'obsolete' or unsupported software on the absolutely latest, dual quad core server. Code never wears out, its support is just abandoned....

It really appears like the wolves are getting hungry, M$ can be greatly assumed to be the major facilitator to the spread of malware, for their complete disregard of computer and network security principles that are much older than the web itself. They have nearly created the whole industry of computer security (through their lack of quality either by incompotence or intention), and now the economy is fumbling, they see the opportunity to deal blows, and gain market share on more of the IT industry by giving away software (that others sell as a business), to address problems they created. If it works out the way they want, MacAfee and Symantec might be forced out of business, or relegated to obscurity (like Netscape was) and they will gain back significant control to which they can start abusing again.

M$ Business as usual. I hope the world wises up and moves to Linux which is not a business as usual. I wish major corperations that actually want to use all of the advantage that IT brings us would support it, with true earnest (and money). because something that is given away for free and is truly useful, is priceless.
by Penguinisto November 19, 2008 9:02 PM PST
Actually, I happily admit that I use ClamAV on Linux....


....to scan inbound emails for Windows malware before the users get it. :)

/P
by wolivere November 20, 2008 12:19 PM PST
Do you remember when the GNU Project servers got hacked and had stayed hacked for a while. And all the free software on them had been compromised with trojans? Yah Liunux is super secure.

How about when the Gentoo servers got hacked?

Or how about the time the Debian Project got hacked?

Or just a few months ago when some of the Fedora servers got hacked and Red Hat had to take them offline?

There is no OS that is not safe.
by cary1 June 16, 2009 1:25 PM PDT
I bet your girlfriend is made of plastic - no virus threats
by El_Segfaulto June 16, 2009 2:27 PM PDT
Linux (like OSX) has a better administrative elevated rights system. I will grant you that Vista has adopted this as well. The thing to remember is that for the majority of software in Linux you need to compile the code. I have a hard time imagining the average user doing this.

> ./configure
> make
> make install l33tV!ru5
by Technorth101 November 18, 2008 8:21 PM PST
Live OneCare actually worked just fine. My company, an OEM computer manufacturer, liked it a lot. We tried to make it our default security package. What killed it was the HORRENDOUS registration process. It took a long support session for almost every customer that didn't already have a Live account (most people). Hopefully Microsoft's next security package is as easy to install as it is to use.
Reply to this comment
by no_floaters November 18, 2008 8:34 PM PST
I say, "Thanks, but no thanks to that MS bridge." :) Couldn't resist!
I've used AVG, ZoneAlarm, and Firefox for over 2 years now on several computers and have never had any issues. The best part? They're already free to use!
I wish OpenOffice worked as well.
Reply to this comment
by chrisx1 November 18, 2008 8:37 PM PST
OneCare works pretty well. Microsoft needs to allow people who purchased Onecare to continue using all the functions like automated backups and tuneups after the OneCare subscription "expires."
There is no reason to enforce the end of the subscription now that they have stopped selling it and are offering free definition updates for the new product.
Reply to this comment
by perspectoff November 18, 2008 8:51 PM PST
Yeah, yeah, yeah. How many times do we have to hear this?

Windows Defender. Windows Malicious Software removal tool. Windows Firewall. None of them work very well, compared to non-Microsoft programs.

Why should we think that another promise of security will work? There's a special type of security practice needed to prevent rootkits, and the Windows OS intrinsically doesn't have it.
Reply to this comment
by Sumatra-Bosch November 18, 2008 9:30 PM PST
Pathetic. They have to pay people to use their pathetic search. And to get people to use their pathetic AV crapware, they have to give it away. I will use Vista if Ballmer comes and paints my house.
Reply to this comment
by BogusBasin June 16, 2009 1:55 PM PDT
Ever notice their new anti-Mac commercials? Yeah. They are giving away laptops to show how much more Macs cost. MS doesn't even make laptops. They compete with Apple on operating systems. But you don't see any MS commercials comparing the retail cost of Windows vs. Mac OS. Why is that? Because Windows cost so much more.

Flame on Wintards!
by El_Segfaulto June 16, 2009 2:28 PM PDT
@BogusBasin

"Flame on Wintards!"

With you to show them how, there's no limit to how well they can flame!
by AppleSuxLeo November 18, 2008 9:37 PM PST
A while back MSFT bought the company fonded by Mark Russinovich who is an Anti Rootkit genius. Good move on the part of the Softie.
Reply to this comment
by Renegade Knight November 19, 2008 7:12 AM PST
You would think MicroSoft would make it so you can't install a rootkit to begin with.
by The_happy_switcher November 19, 2008 8:19 AM PST
What color is the sky in your 'world?'
Showing 1 of 3 pages (75 Comments)
advertisement

After 5 years, Firefox faces new challenges

Mozilla helped reshape the Web since releasing Firefox 1.0 five years ago. Now it's got a reawakened Microsoft and Google Chrome to reckon with.

There's a map for that: GPS or smartphone?

Almost every handset comes with mapping software these days, but standalone GPS devices are becoming more affordable than ever.

About Security

Online security is threatened by more than hacking and phishing attempts. Check here for the latest updates on software vulnerabilities, data leaks, and rapidly spreading viruses--and learn how to protect your systems.

Add this feed to your online news reader

Security topics

advertisement
advertisement

Inside CNET News

Scroll Left Scroll Right