Follow Slashdot blog updates by subscribing to our blog RSS feed

 



Forgot your password?
typodupeerror
×
Windows Operating Systems Software Security The Internet

Microsoft Beta Includes Built-in Virus Scanner 867

Ethereal writes "InternetNews.com reports that Microsoft has begun beta-testing a built-in virus scanner for its Windows XP Service Pack 2 (SP2) that will be included in the final product in mid-2004. The tool is among the operating system enhancements the Redmond, Wash., company is developing as part of its Security Center initiative to rebuff viruses, worms, trojans and crackers. Microsoft will also provide free online training to help developers make the most of SP2's security features, Chairman Bill Gates said at today's RSA Security conference. It's the first time the company has offered training with a Windows service pack release."
This discussion has been archived. No new comments can be posted.

Microsoft Beta Includes Built-in Virus Scanner

Comments Filter:
  • this next service pack is going to seriously fuck up some software industries... a better personal firewall, a popup killer, and now antivirus, all now bundled with the OS? and free?!

    it's good that MS is being proactive (and i don't think they're doing this on purpose -- there is of course legitimate demand for these features), but it's chilling to see how they're capable of slaying entire software industries with the press of a button. this is going to RAPE antivirus/firewall/popup killing companies/industries, even if they have better products -- most consumers, and even a good chunk of small to mid-size businesses, only need a basic virus scanner, for example. and it's pretty fucking hard to compete with OS-preinstalled AND free.

    sigh. grab your ankles [yahoo.com].

    of course this doesn't apply to all software products, but, what's the incentive to create a clever software product anymore, especially a small but ingenious shareware-type app, if all it takes is for MS to assign a couple of lackeys in MS Research to duplicate your product and then preinstall it with the next version of the OS for free? obligatory examples are netscape and winzip but really they're innumerable.

    next on death row: spam stoppers, anti-spyware utils...

    they really ought to have split MS up.

    -fren
  • McAffee, Norton? (Score:5, Insightful)

    by nycsubway ( 79012 ) on Tuesday February 24, 2004 @06:38PM (#8378932) Homepage
    What happens with these programs? Does both the Windows virus scanner and the 3rd party work at the same time? Or is it something that you can set in the settings, like "default browser".

    Interesting!

  • by BigZaphod ( 12942 ) on Tuesday February 24, 2004 @06:38PM (#8378944) Homepage
    But a good idea, I guess. I'm kind of surprised they didn't get into the anti-virus biz a long time ago. Maybe they felt it would be an admission of weakness or something.
  • by Richard_at_work ( 517087 ) * on Tuesday February 24, 2004 @06:38PM (#8378950)
    Monopolistic overreaching of power, or fantastic move to combat viruses? It doesnt really matter, as MS is going to be both praised and sued for this move, even tho it may turn out to be a great one. You cant satisfy all of the people all of the time.
  • so... (Score:3, Insightful)

    by pvt_medic ( 715692 ) on Tuesday February 24, 2004 @06:39PM (#8378952)
    same thing as releasing security updates. But they can set it up to automatically update with this heading and people are less likely to disable it.
  • by LordKazan ( 558383 ) on Tuesday February 24, 2004 @06:39PM (#8378962) Homepage Journal
    I love the smell of Antitrust Lawsuits in the Morning.

    I bet the anti-virus software companies are really going to like this one.


    How long do you think it will take for Symantic, etc to file antitrust against microsoft. 6 months? 12 Months?

    How about not making it so easily vulnerable to viruses in the first place. This is like putting a band-aid on a arterial wound. Microsoft needs to get a clue.
  • by MagicM ( 85041 ) on Tuesday February 24, 2004 @06:39PM (#8378973)
    I'm sure the initial product will be free, but something makes me think that MS will be just as eager to charge you a monthly fee for Virus Definition Updates.
  • by lionchild ( 581331 ) on Tuesday February 24, 2004 @06:40PM (#8378983) Journal
    Well, perhaps this time around, we'll get it for free. However, how much will it cost us in the next versions lisence? Or when we renew corporate agreements? And support agreements? Oh, sure...it's just an extra $50/seat!

    I can see the hand writing on the wall now.
  • Re:Oh boy (Score:2, Insightful)

    by ScottGant ( 642590 ) <<TONten.labolgcbs> <ta> <tnag_ttocs>> on Tuesday February 24, 2004 @06:40PM (#8378984) Homepage
    Or how long will it take them to release a service pack to fix the anti-virus program that either deletes/quarentines legit applications or has so many security holes in it that it actually helps virus spread.
  • by pvt_medic ( 715692 ) on Tuesday February 24, 2004 @06:43PM (#8379044)
    before you know it you be paying monthly fees for a subscription based operating system. Just going to add fuel to the linux fire.
  • Re:Oh boy (Score:2, Insightful)

    by Blastrogath ( 579992 ) on Tuesday February 24, 2004 @06:44PM (#8379065)
    Do you want to trust Microsoft to stop viruses?

    Seems like a bad bet to me. If I want good anti-virus software I'm getting it elsewhere.
  • Public Relations (Score:3, Insightful)

    by Brahmastra ( 685988 ) on Tuesday February 24, 2004 @06:45PM (#8379073)
    They will probably avoid all the public relations nightmares surrounding security updates by embedding the security updates in the Virus definition updates. Then, it won't look like the OS is broke anymore.. It'll just be "Virus definition updates" everyday.
  • by Anonymous Coward on Tuesday February 24, 2004 @06:47PM (#8379106)
    you geeks are funny. you are all against government intervention until it comes to a company's right to sell its products.
  • by Malk-a-mite ( 134774 ) on Tuesday February 24, 2004 @06:49PM (#8379125) Journal
    "Another anti virus vendor cried "Anti-Trust!" and MS backed down"

    For some silly reason I don't think this would be the reason....
  • by NeoGeo64 ( 672698 ) on Tuesday February 24, 2004 @06:49PM (#8379129) Homepage Journal
    You're bitching because Microsoft finally added a popup blocker, a better firewall, and some AV utils?

    If Microsoft didn't include these items, you'd be the same one fucking bitching that they weren't securing their software good enough.
  • by thesolo ( 131008 ) * <slap@fighttheriaa.org> on Tuesday February 24, 2004 @06:50PM (#8379144) Homepage
    This goes back to Tim Bray's Sharecropper Analogy [tbray.org].

    Essentially, the idea is that if you're not developing for an open platform, you're a sharecropper. Your entire existance as a developer is predicated on the fact that you're working for someone else's platform that they own and control. If they decide that they like your product's functionality, they can either buy you out, or simply integrate it into the platform, most likely putting you out of business.

    Apple has does this in the past, with Watson & Sherlock, and Microsoft has done this many, many times. Netscape, Winamp, and now Norton & McAfee. Microsoft has a pattern of simply offering a product as an additional download, then tying it into the next version of the OS with no real way to remove it.

    What this means for Norton, McAfee, Trend Micro, and the dozens of other AV people is not exactly clear yet. But it's a good possibility that many of their employees will be touching up their resumes once this Service Pack gets released. Unless, of course, they sue MS. Either way, I see this as a major strain on their business relationships with Microsoft.
  • by Mike Hawk ( 687615 ) on Tuesday February 24, 2004 @06:51PM (#8379164) Journal
    How long do you think it will take for Symantic, etc to file antitrust against microsoft. 6 months? 12 Months?

    How about not making it so easily vulnerable to viruses in the first place. This is like putting a band-aid on a arterial wound.


    To make a silly point, that would also put the AV people out of business, except they wouldn't get one last blaze of lawsuit before they went away.

    Of course there will still be the hacks that rely on social engineering...
  • by Anonymous Coward on Tuesday February 24, 2004 @06:53PM (#8379189)
    I agree with the poster when he (or she) said Get a clue. Just because you can write code doesn't mean you understand economics.

    Anyone who can't see past the words anti and trust are missing the point completely. For too long, McAfee and Symantec have produced inferior, bloated, virus scanners. Combine their personal firewall and anti-spam software, along with one of their anti-virus packages, and you've just blown nearly 32 megabytes of RAM on UI enhancements.

    NOD32 works so much better, and in a smaller, less bloated interface. Yes, you also have to pay for it, and it's not a well-known big name company. However, you won't find a better anti-virus package on the planet. Check out their awards here [nod32.com].

    If Microsoft wants to bundle this stuff with SP2, then I'm all for it. Free, and forced down your throat so the majority of moronic users stop getting their boxes infected by the latest worm-du-jour.
  • by John the Kiwi ( 653757 ) <(moc.iwikehtnhoj) (ta) (iwik)> on Tuesday February 24, 2004 @06:53PM (#8379191) Homepage
    This is not a free service from Microsoft. It is a free update, but the cost of the service will be built into Windows, either through an update fee or with the Operating System tax that goes directly to Microsoft when you buy your computer.

    I think it's the only thing Microsoft can do to "make it right". After all, why should third parties be responsible for tracking viruses and such when it's Microsoft's fault for allowing them to exist in the first place?

    I am forever telling my customers to buy antivirus software and making sure that their definitions are up to date, this is an added tax that corporations should never have had to pay. It's rediculous that in order to run a Microsoft product less adept users are forced to pay $40 for antivirus software and then $20 a year to keep getting definition updates. It often seems like an added tax that you're forced to pay even after you've already paid Microsoft for the privilege of using Windows.

    So good for Microsoft. They've saved the bulk of their customers that much more money per annum and I think it is well past time they did this.

    John the Kiwi
  • Zonealarm and mcafee are shit (I've seen alot of viruses slip by mcafee), but Symantec really knows their business and I have nothing but respect for them. I trust them far more then MS.
  • by Richard_at_work ( 517087 ) * on Tuesday February 24, 2004 @06:56PM (#8379219)
    Problem is, once they start examining traffic for viruses, you get pressure groups wanting them to do the same for child pornography, spam etc. To retain the "common carrier" status they claim to have (im not sure if they have the same protections as telecoms companies to this regard), they need to exercise a hands off approach as much as possible. Also think of the outcry a false positive would bring, the ISPs would be sued of the face of the planet by certain people who think its their goddamn given right to do what they damn well please, damn everyone who gets in the way.
  • by El ( 94934 ) on Tuesday February 24, 2004 @06:56PM (#8379228)
    The difference is that McAffee, Norton, et. al. have a vested interest in there being lots of new viruses, which leads me to wonder if they don't also assist in creating them. Microsoft has a vested interest in not having their software be perceived as being susceptible to viruses, so this might actually be a feature best provided by the OS vendors themselves -- much as I hate to admit it.
  • by dfj225 ( 587560 ) on Tuesday February 24, 2004 @06:58PM (#8379252) Homepage Journal
    Still, even if Microsoft manages to plug all their holes in the recent SP, there will still be a need for virus protection. Just think of all the viruses that spread very quickly even though they are the type that the user has to intentionally run. I'm sorry, but if you run a file that happens to be a virus you have no one to blame except for yourself. It doesn't really matter what operating system you use, if you run an untrusted execuitable you could be in trouble. It just so happens that a vast majority of the uneducated users end up on Windows, so that is where you see email viruses spreading. I think that by including a virus scanner and moving very quickly on updates, MS may be able to prevent a large amount of viruses that spread in this manner. Of course, there will still be all the users who run earlier versions of Windows and who still don't know enough to not open every file that they get.
  • by Tweaker_Phreaker ( 310297 ) on Tuesday February 24, 2004 @06:58PM (#8379254)
    Has anybody actually been able to try this beta to see if there really is AV software included? The screenshots [neowin.net] I've seen of a slightly older build (2077) show that it's only recommending you to install AV, not that it already has it.
  • by DeVilla ( 4563 ) on Tuesday February 24, 2004 @06:58PM (#8379262)
    ...as MS is going to be both praised and sued for this move, even tho it may turn out to be a great one.

    And then again, it might not. One would have to assume that they would do a better job writting anti-virus software than they do writting virus proof software in order believe that this is a good move. Otherwise, everyone will run the bundled AV telling themselves their safe, while hackers (the blackhats) can focus on a single AV program to fool. It just means that the RPC virus needs to disable MSAV before uploading it's payload.
  • by LostCluster ( 625375 ) * on Tuesday February 24, 2004 @07:04PM (#8379318)
    The Anti-Virus makers have totally missed the entire spyware industry in their AV products, instead recommeding that you buy their whole suite that includes a pop up blocker, anti-spam filter, and firewall-for-newbies product. They then price that suite at three times the cost of the original AV program.

    The truth is, it'd be much easier if we just had one program-scanner that'd alert on both viruses and trojan horses, and the better spam products are coming from suppliers who don't have AV products, and firewalls are best built into routers anyway. So... uhm, we don't need the rest of the suite.

    Take the core product from the AV companies, and their other products won't have a leg to stand on anymore...
  • by Anonymous Coward on Tuesday February 24, 2004 @07:04PM (#8379326)

    Isn't it a really bad idea to have the primary defense mechanism INTEGRATED WITH THE OPERATING SYSTEM? What the hell?

    You mean like how Linux and the BSDs have firewalling built into their kernels?

  • by Uber Banker ( 655221 ) on Tuesday February 24, 2004 @07:05PM (#8379333)
    Unless MS choose the easy option and licence the existing AV products, like they did with WinZIP. This way Symantic/Norton could concentrare on the real AV stuff, have some bells-and-whistles premium products and soak up lots of cash for MS doing the retail side for them. In this scenario they'd be the last people to complain.
  • by drsmithy ( 35869 ) <drsmithy@nOSPAm.gmail.com> on Tuesday February 24, 2004 @07:05PM (#8379334)
    Persoanlly I think anti-virus software should run at the router of your ISP. That way PC's are never affected (or rarely).

    And that is why you are not a Network Engineer.

  • But.... (Score:2, Insightful)

    by shades66 ( 571498 ) on Tuesday February 24, 2004 @07:07PM (#8379359)
    Don't most of the virus out there attack vulnerabilities in Windows? McAfee/Symantec etc provide virus protection to stop the virus getting to windows in the first place? And now microsoft are going to package a virus killer into windows?

    Wouldn't it just be easier to write more secure software in the first place?

    And at the end of the day who in their right mind would trust a microsoft virus killer? If they can't secure their own software what chance do they have of writing a virus killer that stops vulnerabilities in their own software?

  • Re:Anti-Trust? (Score:5, Insightful)

    by dfj225 ( 587560 ) on Tuesday February 24, 2004 @07:08PM (#8379374) Homepage Journal
    This is really a tough one. Windows currently has a firewall included, which is not technically core to the operating system, but of enough importance, in my opinion, to be included with all operating systems. I think you can argue that anti-virus is along the same lines. If you think about this in terms of another product, say a car, it might be clearer. When cars were first invented they didn't have seat belts. Suppose there was a company that decided to sell after-market seat belts for the cars. Now today, every car has to have seat belts as required by law. When the change occurred do you think that the seat belt company should have sued the car makers? It is true that the belt is not required by the car to operate, but it is a safety feature that everyone should use. The same can be said about anti-virus. It is not necessary to the operating system, but seriously bad things could happen from not using an anti-virus system. I think that anti-virus is so core to the security of Windows that it should be included. Also, you have to note the fact that many users don't know enough or care enough to buy anti-virus or keep their system updated. I think that the world might be a better place if the users were taken out of the equation when it comes to anti-virus.
  • by Aneurysm9 ( 723000 ) on Tuesday February 24, 2004 @07:10PM (#8379395)
    I think you're the one who needs to buy a clue. Microsoft's bundling is not comparable to Ford putting carriage makers out of business. Killing the market for a competing product by producing a better, more efficient product is not a problem. What is a problem is killing the market for a competing product by using a monopoly product as a platform for distributing a knock-off of the competing product. It would be more like Ford, being the only maker of automobiles, including an in-dash navigation system using their own GPS satelite network in order to kill the market for aftermarket navigation systems. Add to that Ford taking measures to ensure that you can't remove the navigation system to replace it with another without rendering the entire vehicle useless even though the navigation system isn't strictly necessary to operate the vehicle and you've got a much better approximation of Microsoft's anti-competitive activities.
  • by divide overflow ( 599608 ) on Tuesday February 24, 2004 @07:10PM (#8379400)
    >A company does something to make it's customers happy, and you want government gangsters to split them up because they put someone else out of business? As a consumer, what entitles TrendMicro to my $$$ when I would rather give it to MS (or not give it - service packs are free.

    Yet, when Linus Torvalds offers a free Linux kernel to the world, SCO tells the U.S. Congress (your "Government Gangsters") that Linux is a threat to the security and economy of the U.S. Ironic, huh?
  • by Jade E. 2 ( 313290 ) <slashdot@perlstor[ ]et ['m.n' in gap]> on Tuesday February 24, 2004 @07:11PM (#8379408) Homepage
    Wow, I feel old now, nobody has mentioned yet that this isn't the first time MS has done this... Back in DOS 6.xx they included MSAV, a command line virus scanner, and VSAFE, a memory resident program that watched for suspicious activity (formatting drives, writing to the boot sector, etc.)

    I believe they were stripped down versions of Central Point Antivirus (which later got bought out by Symantec) in much the same way that the later DOS's SCANDISK and DEFRAG utilities were stripped down versions of the Norton's Utilites that performed the same functions...

    I don't see why MS would bother to write their own virus scanner this time around, either... I'd think either of the big 2 companies would jump at the chance to license MS a stripped down version of their product, with a convenient "Upgrade now!" button prominently displayed, of course. Or maybe even the full product, but you'd still need a definition subscription from them. Basically, whichever company did it, would put the other one out of the desktop market.

    I don't think either big player will go under, though, both McAfee and Symantec have well entrenched server markets... At one previous employer (Gov agency), the inter-departmental flame wars over what (if any) virus scanner to standardize on for departmental email servers reached a 'vi vs emacs'-like level.

  • by timmarhy ( 659436 ) on Tuesday February 24, 2004 @07:13PM (#8379429)
    *sigh* are you reading the posts? people are saying MS should be designing their OS to be less of a play ground for viruses, and to not ship yet another application which uses their monoply to stamp out competition. any fool can see 3 years down the track we will start paying annual fees to MS for virus updates if this is allowed to happen
  • by RadioActiveLamb ( 718177 ) on Tuesday February 24, 2004 @07:15PM (#8379444)
    Chances are that Microsoft is going to license the Antivirus technology from some little company that signed a big contract. Much of the tack-on technology in Windows XP wasn't created by Microsoft, but licensed from small companies. The zip functionality came from the makers of Winzip. The disk defragmenter came from Executive Software (makers of Diskeeper).

    As I recall, people were declaring the death of Zone Alarm and Black Ice when it was heard that XP would contain a firewall. I remember the predictions of Symantec's doom because Windows 95 had a disk defragmenter (3.1 and NT did not). The deaths of MusicMatch and REAL were all too.. er... real, when Media Player was to be included.

    These companies will either adapt, dissapear, license technology to MS, or create a product that is so much better than the included software that people will be willing to shell-out $$$ to make their OS better.

    I don't see Microsoft going out of business because Wordpad is included in Windows. Clearly, a direct competitor to Word and Works! Okay.. bad example.. but you get my point.
  • by NanoGator ( 522640 ) on Tuesday February 24, 2004 @07:17PM (#8379466) Homepage Journal
    "How long do you think it will take for Symantic, etc to file antitrust against microsoft. 6 months? 12 Months?"

    Boy, Microsoft can't win with you guys, can they? You bitch every single fucking day that there's some security exploit, and when Microsoft addresses that, suddenly you're crying anti-trust.
    It really is hard to take anything you guys say seriously when it's all about bringing Microsoft down.
  • by cyril3 ( 522783 ) on Tuesday February 24, 2004 @07:20PM (#8379501)
    Yeah, same goes for ambulances, and hospitals.

    And that guy who invented that polio vaccine, worst of the lot.

    I presume you have never used an anti-virus product. I have and I'm happy to pay to clean up the mess that other clueless idiots create with virii and worms etc.

    And now with one only analysis done on a virus and no competition to get the fix out how long do you think you will be safe.

  • by nightcrawler77 ( 644839 ) on Tuesday February 24, 2004 @07:22PM (#8379511)
    I'm always amazed at how much patchwork goes into securing the Windows desktop.

    An obvious first (and large) step would be to not have every user running with Administrator privileges. Has anyone heard of any initiative by Microsoft to change this unfortunate default?

    Wouldn't running your everyday apps (e.g. Outlook, IE) as a non-privileged user mitigate a lot of these worms? Some of the worms that just blast off a emails via script would be unaffected, but those that install SMTP servers and other backdoor processes would be stopped.

    The current setup seems just like giving everyone a key to your house and then hiring a team of live-in security guards.

    Too bad Microsoft's software features are ultimately dictated by their marketing department and not by the user community. I really feel they need to break backwards compatibility, force users (even so-called "Power Users") to use unprivileged accounts, and provide a convenient equivalent to Unix's "su".

    Sure, a lot of companies would have to release updates in order to cope with use by non-administrative users, but with the current hype around security these days, I would think most companies would be willing to do so for little or no charge. Most average Joes these days have heard of viruses, worms, etc...I think it would be really bad PR for a company to say, "well, MS improved the security of Windows, and it broke our software." Most, it seems, would rather say, "MS improved the security of Windows and our software is no exception...here's the free update you need."

  • by cens0r ( 655208 ) on Tuesday February 24, 2004 @07:24PM (#8379543) Homepage
    exactly how do you design an OS to stop users from clicking on an executable file that runs malicious code? 90% of the viruses I see are installed that way. Microsoft can't just make all their users stop being dumb.
  • It would be more like Ford, being the only maker of automobiles, including an in-dash navigation system using their own GPS satelite network in order to kill the market for aftermarket navigation systems.

    Kind of like what GM does with their OnStar system? And like every manufacturer is now doing with anti-theft devices (immobilizers, etc.)? Viruses in the Windows world is an everyday reality and this is a good step to take, just as vehicle theft is an everyday reality in the automobile world and the manufacturers have taken good steps to prevent theft.

    A business shouldn't be prevented from innovating simply because of the existence of third-parties which have profited from that business's lack of innovation in a certain area. If what they're doing is really so innovative, then they should get a patent and protect their innovation and license it back to the business. That's the purpose of patents.
  • Not me. Microsoft has the right to sell their own product just as the open source community is free to give away theirs.
  • by Anonymous Coward on Tuesday February 24, 2004 @07:28PM (#8379582)
    True enough; but the safeguards built into UNIX to protect it from mischievous and creative college students over the years give Linux a substantial head-start. I'm thinking user accounts, file/group permissions (esp. executable bit) and root-only-where-necessary.

    Yes, MS is doing better than it used to. XP is a far cry better than Win98. But they have to maintain as much backward compatability as possible and that's a fundamental problem that won't go away.
  • by Anonymous Coward on Tuesday February 24, 2004 @07:28PM (#8379592)
    How about not making it so easily vulnerable to viruses in the first place. This is like putting a band-aid on a arterial wound. Microsoft needs to get a clue.

    It's much easier, and more fun, to create a new product than it is to grind out the fixes to all the problems with your existing products. This is why Microsoft's Trustworthy Computing Initiative has been a complete failure thus far. Microsoft will add cheesy Anti-Virus, Personal Firewall, and Anti-Spam features to Windows that are "good enough", but will continue to have the same problems that they've always had due to their mediocrity.

    Bill Gates has stated that customers never buy upgrades to fix bugs. That thinking reveals quite a bit. He's right of course, but it's because customers feel that bug fixes are owed them as part of the original product purchase. He's wrong to believe that because there's little money to be made by fixing bugs that he shouldn't have to do it.
  • by Anonymous Coward on Tuesday February 24, 2004 @07:29PM (#8379608)
    > And if they can't keep up, then they deserve to lose out.

    And do you believe that to be the case for Windows Anti-Virus companies as well?
  • by PickyH3D ( 680158 ) on Tuesday February 24, 2004 @07:35PM (#8379683)
    I think it is a good idea. Not so much because of the Anti-virus software, but because people will go to update their anti-virus software and see Windows Updates.

    I have a feeling that this is an intentional side effect, as that is the real problem in the first place as far as worms go. In terms of viruses, it's the users fault for openning the stupid file.

  • by andy55 ( 743992 ) * on Tuesday February 24, 2004 @07:36PM (#8379702) Homepage
    Microsoft has a vested interest in not having their software be perceived as being susceptible to viruses, so this might actually be a feature best provided by the OS vendors themselves -- much as I hate to admit it.

    Well said. There's little hope for the future if the AV corps benefit from virus activity--MS defintely seems like the lesser of two evils here.
  • by LordKazan ( 558383 ) on Tuesday February 24, 2004 @07:36PM (#8379705) Homepage Journal
    I did not say whether or not they're right to do so - I am not expressing an opinion about that -- I am simply posing the question.

    I am [obviously] also saying microsoft should spend less time on a anti-virus program and more-time making it so those vulnerabilities are not there in the first place
  • by S.Lemmon ( 147743 ) on Tuesday February 24, 2004 @07:37PM (#8379708) Homepage
    No, but it is logical that a company who's product's image has suffered so heavily due to viruses would want to make sure all users have up to date software. I think it's actually of far more benefit to Microsoft to keep the updates free.
  • by terrox ( 555131 ) on Tuesday February 24, 2004 @07:38PM (#8379722) Journal
    a virus scanner does not fix an exploit.
  • well... (Score:2, Insightful)

    by mAineAc ( 580334 ) <mAineAc_____&hotmail,com> on Tuesday February 24, 2004 @07:39PM (#8379734) Homepage
    If it works as good as their firewall does, only halfway that is, then the antivirus companies have nothing ot worry about.
  • by Michalson ( 638911 ) on Tuesday February 24, 2004 @07:44PM (#8379793)
    So where does the line come between MS enhancing Windows and using Windows to force competitors out of the market?

    Should Windows not come with a firewall because someone else makes a firewall (Zone Alarm)? Should Windows not come with a browser, because someone else makes a browser(Netscape)? Should Windows not come with a TCP/IP stack, because someone else makes one(Trumpet)? Should Windows not include multitasking, a GUI or a memory manager because someone else makes those things? (DESQVIEW, Dr-DOS, QEMM)?

    As time marches on things progress. In 1993 it was perfectly acceptable for a computer to require $80 worth of additional software just to browse the Internet. In 1998 you expected to be able to plug in a brand new Windows machine, tell it the number of your ISP, and be browsing the web right away.

    Now if the only way you could buy Windows was by also buying Office that would be an abuse. But does anyone complain that a perfectly usable word processor, WordPad, is included with Windows? No, because it's a basic application. It's designed to give the casual, out of the box user the basic functionality they expect from their Windows computer. Windows XP included a basic firewall, the idea being that security was becoming a requirement rather then a luxury and so users should have something out of the box. Now is the included firewall very sophisticated? No. If you want a professional firewall you get one yourself. Same could be said for a lot of other features; you want a browser with tabs, popup blocking, automatic history on open, etc? Get a "professional" browser like Opera. The time has come that virus scanning is a requirement, not a luxury that only the 5% of users with a clue should have. MyDoom spread like wildfire, despite it being an easily detectable virus totally blocked by any version of Outlook updated in the last few years and requiring total user stupidity. MyDoom makes MS look bad because the child like masses expect someone else to take care of them. While some people want a professional virus scanner, the average 90% user wants it to be dealt with from the moment they turn on their Gateway machine.
  • Re:Virus Scanner (Score:3, Insightful)

    by Artemis ( 14122 ) on Tuesday February 24, 2004 @07:44PM (#8379795) Homepage

    As at least one comment in every other thread of this story has mentioned: Microsoft included MSAV (MicroSoft Anti-Virus) with DOS-6. This is is not new to them, they are simply bring the idea back. Your comment is entirely incorrect. Quit trolling against Microsoft I guess these days, its pretty common knowledge. Also, you meant to use the word "it's", the contract of "it is", not "its", the possesive form of "it".

  • Re:Anti-Trust? (Score:3, Insightful)

    by jesser ( 77961 ) on Tuesday February 24, 2004 @07:53PM (#8379937) Homepage Journal
    When the change occurred do you think that the seat belt company should have sued the car makers?

    No, because no car maker was a monopoly.

    I think that anti-virus is so core to the security of Windows that it should be included.

    IMO, anti-virus software (software that detects known viruses or detects unknown viruses based only on heuristics) is a bad workaround for insecurity, not a security measure.
  • by Mr. Underbridge ( 666784 ) on Tuesday February 24, 2004 @07:54PM (#8379943)

    No joke! I'm still angry about Henry Ford putting all those carriage makers out of business.

    Oh, you are being serious. A company does something to make it's customers happy, and you want government gangsters to split them up because they put someone else out of business? As a consumer, what entitles TrendMicro to my $$$ when I would rather give it to MS (or not give it - service packs are free.

    It makes a difference, legally. It remains to be seen whether MS uses its windows monopoly in an anticompetitive manner with regard to antivirus software, but it's something to consider. If they strongarm their OEMs into not bundling McAfee or Norton so as not to compete with their version, then they will likely run afoul of anti-trust laws. If they don't, they will be OK. I think what people on this site are saying is that MS has never passed over a chance to exploit their monopoly, which is why they've been in court so much.

    Get a clue. Just because you can write code doesn't mean you understand economics.

    Likewise, just because you understand economics doesn't mean you understand anti-trust law. [usdoj.gov]

  • The car vs carriage analogy isn't valid.

    The competitive advantage of cars over carriages is that cars are more useful than carriages.

    In this case, MS isn't providing a more useful virus scanner or a better product. Their virus scanner will arguably be less useful than existing offerings in the market. However, (and this is where my anticompetitive gripe comes from) they're able to instantly capture a majority stake of any given market just because they own the underlying platform, whereas other vendors are forced to blow millions on sales and marketing and trying to entice consumers to download and install their product. To add insult to injury, MS includes the product for free with the OS, knowing that given a free pre-installed product that's "good enough" the vast majority will be too lazy to look for better alternatives.

    -fren
  • by S.Lemmon ( 147743 ) on Tuesday February 24, 2004 @08:05PM (#8380080) Homepage
    Same as always. They'll probably add three more layers of bulbous bitmap GUIs, a larger splash screen, a few more systray icons, a sprinkle of dubious pop-up warnings saying you need the "pro" version, and lots of playskool animations of cartoon syringes chasing "virus monsters". Oh don't forget a custom toolbar or two, a IE hotbar and maybe a custom desktop theme - all with links to their website of course.
  • by RestiffBard ( 110729 ) on Tuesday February 24, 2004 @08:19PM (#8380238) Homepage
    Well, there would be a case for an antitrust suit, firstly.

    Second, we tear down MS because they do moronic things. Instead of including a Virus scanner how about just working to make virus infections less of an issue in the design of the OS?
  • Not so fast (Score:5, Insightful)

    by blunte ( 183182 ) on Tuesday February 24, 2004 @08:28PM (#8380331)
    It's not so simple.

    MS is more than welcome to make and SELL AV software.

    But by including it free, if that's what ends up happening, then they are exercising their monopoly (again) to drive competitors into bankruptcy.

    And even then it's not so simple. Obviously free software exists. But such software is not built into the OS.

    OS + free browser, then + free webserver, now + free AV.
  • by Cereal Box ( 4286 ) on Tuesday February 24, 2004 @08:29PM (#8380352)
    OK, I've heard a lot of rants about how evil Microsoft is for bundling a virus scanner (big surprise). They're going to put all these AV software companies out of business. OK. Well, let's imagine a very hypothetical situation: one day, Microsoft releases a service pack that renders all Windows operating systems completely immune to viruses and worms and we're to assume that new viruses and worms never appear. That's good, right? But wait -- those AV companies will go out of business! That's wrong and Microsoft is evil for patching up their operating system, right?

    Since that scenario clearly will never happen, Microsoft is instead opting to create a program that will, in theory, eliminate or significantly reduce the threat of viruses and worms on their operating system. The end result of either patching up the OS or creating a good, integrated AV program is the same -- significant reduction of viruses and worms, much to the detriment of existing AV software. What's the big deal?

    As much talk as I hear on Slashdot about how record companies are trying to cash in on a dead business model, I'm baffled that is hasn't occurred to anyone that AV companies are cashing in on a business model that, in theory, will completely dry up.
  • by Anonymous Coward on Tuesday February 24, 2004 @08:30PM (#8380358)
    It really is hard to take anything you guys say seriously when it's all about bringing Microsoft down.

    well, mr perfect, just take your ball and go read some other website then.

    eh?

    what's the problem?

    oh... you LIKE to get annoyed at how everyone else is such a jerk?

    well, then you've come to the right place.
  • Re:Oh boy (Score:3, Insightful)

    by Unregistered ( 584479 ) on Tuesday February 24, 2004 @08:31PM (#8380368)
    Yea, but those really bright people are working with legacy code that's been porely maintained for almost 20 years. I couldn't manage windows as well as they do, but it needs a rewrite as a networked os. As it stands now they can't do much better then they are doing now.
  • by BiggerIsBetter ( 682164 ) on Tuesday February 24, 2004 @08:40PM (#8380460)
    I'd imagine they will go with Symantec, and integrate similar to the way the took on Diskeeper for defragmentation. Which is nice for Symantec and easy for Microsoft, but it *completely* shafts every other antivirus vendor.
  • Re:Not so fast (Score:1, Insightful)

    by Anonymous Coward on Tuesday February 24, 2004 @09:23PM (#8380844)
    Saying that Microsoft cannot bundle an AV with their OS is like saying that Ford cannot bundle seatbelts with their cars.
  • Not my problem (Score:4, Insightful)

    by LordLucless ( 582312 ) on Tuesday February 24, 2004 @09:28PM (#8380889)
    I've seen a whole lot of people complaining about antitrust issues, but to be honest, that's not my problem with this issue. My problem is how much control I'm going to have over my own machine.

    I use a number of programs for which Microsoft has "integrated" alternatives. I use ACDSee Classic as an image viewer, I use Nero for burning CDs, I use WinRAR for archiving, I use Mozilla for web-browsing, I use Miranda for IM.

    But to get ACDSee to work, I had to wend my way through assorted registry entries to disable the MS integrated version (changing registered filetypes wasn't enough). To uninstall MSN Messenger, I had to fiddle around with an .ini file and then uninstall it, and the system now generates an error message when a new user logs on for the first time because it can't find MSN.

    If Microsoft bundled an AV solution with Windows, and included it in the "Add/Remove Software" selection, as every other application is, or provided an uninstallation tool, I wouldn't mind. But based on track history, I'm going to be stuck with a lump of code taking up at the least disk space, and probably memory space and CPU time, that I don't use, don't want, and can't get rid of.
  • by cjsnell ( 5825 ) on Tuesday February 24, 2004 @09:41PM (#8381001) Journal
    When Microsoft included a stripped-down version of the Diskeeper drive defragmenting software in Windows 2000, it hardly killed the disk defragmenting industry. The stripped-down version they included was absolutely sufficient but was not at all suited to enterprise users because it lacked the ability to schedule defrag runs and could not be fine-tuned.

    I would bet that Symantec and Norton's biggest and most profitable customer base is business customers. These are exactly the kind of customers who would want more fine-grained control over virus scanning and who would buy a commercial product that would let them deliver a customized product to their employees.

    Just a guess.
  • by Keebler71 ( 520908 ) on Tuesday February 24, 2004 @09:52PM (#8381125) Journal
    I can understand people bitching about the integration of IE or WMP into the operating system, but I can't think of any applications that I would rather have tightly integrated than a AV prog and a decent firewall.
  • Re:Not so fast (Score:5, Insightful)

    by Keebler71 ( 520908 ) on Tuesday February 24, 2004 @09:55PM (#8381154) Journal
    This isn't about bundling software, in which case I would agree. This is about integrating anti-virus and firewall software into the operating system. IMHO these belong in the OS much more so than say a calculator program of a freaking game of hearts. I want my OS to monitor the integrity of my critcal files (AV) and of my internet connections (firewall).
  • by macdaddy ( 38372 ) on Tuesday February 24, 2004 @10:08PM (#8381283) Homepage Journal
    They aren't fixing security wholes created by poor programming practices. They aren't even correcting thise poor programming practices. All they are doing by embedding an AV client into the OS is extending their monopoly further. What do you think a monopoly is? If they were fixing the problems then we'd be happy. They aren't. They are extending their monopoly, simple as that.
  • by macdaddy ( 38372 ) on Tuesday February 24, 2004 @10:13PM (#8381336) Homepage Journal
    I find it sad that so many people hold MS so incompetent as to not be able to write a simple anti-virus program without creating security holes.

    We can speak quite effectively and accurately from experience. Microsoft still manages to produce some of the most insecure operating systems after being in the biz for how many years now. They still manage to bork installations during minor little updates to things like Microsoft Office. Outlook, IE, and Exchange are still some of the most insecure pieces of software available for purchase today. We as IT professionals can speak from experience when we say that Microsoft will not be able to do this without borking something else.

  • Re:Virus scanner (Score:3, Insightful)

    by spectecjr ( 31235 ) on Tuesday February 24, 2004 @10:35PM (#8381598) Homepage
    Like we all remember about OS design: if the OS crashes, when a program is doing it's job, it's the fault of the OS.

    You don't seem to know what you're talking about. Virus scanners run kernel-side, as device drivers embedded in the file system.

    The system should already "isolate and warn"--when applications unexpectedly quit, guess what? This dosen't change a thing in that regard.

    Not if the code is running in kernel mode.

    I've used Norton, McAfee, and a number of other AV softwares, across hundreds of computers. I've never felt the urge to say they do it poorly at all. Perhaps McAfee is a bit more bloated than it needs to be, but It's probably better in almost any respect than what MS will put out.

    McAfee has been known to badly clean viruses, leaving the payload intact and causing new variants of the same virus to spread. Norton has problems with their software not updating its virus signatures other than on a weekly basis (again, something this API tries to fix). CA's EZ-AntiVirus has occasionally caused BSODs when using files over network shares.

    I've not crashed Norton yet, but I expect to be able to do it at some point. I've certainly had occasions where it has brought my system to a complete crawl.
  • Re:Not so fast (Score:3, Insightful)

    by Snarfy ( 27790 ) on Tuesday February 24, 2004 @10:44PM (#8381694)
    Please tell all Linux distributors to no longer bundle C and Fortran compilers into their Linux distributions because Intel actually SELLS their own version - and we wouldn't want the free nature of the GNU compilers to interfere with Intel's sales.

    Sorry... I really don't agree that an OS provider should not be allowed to bundle software. If a product is good enough, people will purchase it. If Norton and McAfee (or whoever) can create a virus scanner that is smarter or faster or in some-way better than Microsoft's free version, then people will buy it.
  • by CB-in-Tokyo ( 692617 ) on Tuesday February 24, 2004 @10:50PM (#8381750) Homepage
    As a consumer, what entitles TrendMicro to my $$$ when I would rather give it to MS (or not give it - service packs are free.

    That is exactly the point! You should be able to choose. But when Microsoft incorporates the product into the operating system, you have no choice. You are forced to pay for their product. If they package and sell it separately, then you have a real choice as to where to spend that money. Microsoft sure as hell isn't giving you a free Virus scanner (or service packs for that matter,) you and I and everyone who uses Windows are paying for it without choice.

  • by danielsfca2 ( 696792 ) on Tuesday February 24, 2004 @11:02PM (#8381918) Journal
    > I long for the days of NAV2002

    If you thought NAV 2002 was good, you should try Norton AV Corporate Edition, Version 7. Came out circa 1999. Designed for Win2k/NT. Works like a charm on XP. No stupid bloated interface with fuzzy yellow buttons. No "subscription" reminders to pester you (It just LiveUpdates, the defs and the engine, without bitching). I install it on every computer I build.

    If regular users understood the difference between an updated version of AV software and updated Virus Defs and Engine, Symantec/McAfee/etc would have no retail sales at all (they would only have the OEM market). I mean, in reality any old version of AV software will protect you from viruses just fine as long as you keep the defs and engine updated. People just buy the boxed versions because either:
    A. they think they have to in order to get new virus defs (this is the dumber group) or...
    B. their 1-year "free subscription" is over and they think they have to either buy a new box or subscribe in order to continue receiving virus defs. (Anyone smart could in most cases just remove said software and reinstall it to restore another 1-year "subscription.")
  • by Anonymous Coward on Tuesday February 24, 2004 @11:14PM (#8382055)
    If Microsoft really wanted to improve the product they wouldn't add an anti-virus software to it, they'd fix the core desing that allows virus to exist in the first place.

    Why don't they set proper privileges settings by default?
    Why don't they make it harder to open an e-mail attachment?
    Why not put activex programs in a sandbox (like java)?

    The problem is that from a security point of view, the OS desing has critical faults.

    And if bundling av software is the only way out, we know they'll do it just like they did with IE or WMP, making it almost impossible to compete with a similar product.

    And btw:
    put in virus and firewall protection and you know why? BECAUSE THAT KIND OF STUFF BELONGS IN THE OS!

    The only anti-virus I have in my OS is to scan e-mails to protect people from another OS. So I guess av software doesn't belong in the OS, at least not in mine.
  • by siphoncolder ( 533004 ) on Tuesday February 24, 2004 @11:17PM (#8382085) Homepage

    Bad example. Let me clean that up for you a bit.


    Imagine if seat belts were an aftermarket feature only, and then Ford (as per your example, the only car company in existence) goes ahead and puts them in standard.

    Gee, poor aftermarket companies! Who's Ford to make us buy cars safe from the start?

    Virii cost companies billions of dollars in damage. They cause Joe Average to throw out his computer in frustration. Virus scanners and updates (oh, fancy that - Windows Update) save money for companies like seat belts save lives. Get off your high horse - this is something that really should become a standard operating system feature.

  • by condosolon ( 707192 ) on Tuesday February 24, 2004 @11:39PM (#8382327)
    #1. Open source software kind of does the same thing. #2. Quite often, Microsoft buys the software rather than developing it. It's usually a pretty good payday for the developer. #3. Software, like manufactured goods, has a downward pricing slope, that soon reaches near zero. Make your money on the early releases, before the market scrapes bottom.
  • by Anonymous Coward on Wednesday February 25, 2004 @12:15AM (#8382620)
    Because working to make virus infections less of an issue in the design of the OS is a much more expensive and complex undertaking. Including a virus scanner is a fast and cheap solution that gets the job done. What is moronic about that?
  • by Cereal Box ( 4286 ) on Wednesday February 25, 2004 @12:52AM (#8382949)
    How? The result is going to be the same: AV companies will go out of business if the OS is more secure, regardless of the method used to achieve it. Read the other reply to my post -- he makes a good point. Microsoft integrated a TCP/IP stack, and that put a lot of companies out of business. But really, would you, in this day and age, ever think about having to buy a TCP/IP stack? No, it's something that should be integrated into the OS. Perhaps in a number of years we'll feel the same way about AV software.
  • by Anonymous Coward on Wednesday February 25, 2004 @01:02AM (#8383007)
    Who the hell are you to tell MS what they can or cannot bundle with their OS. And who the hell are you to force people to waste time downloading software if they would rather use what MS provides. Fascist.

    That's the point. If it comes bundled no one has a choice. Microsoft is not creating something new. They will probably deliberately undermine other companies to gain the competitive edge because most users simply will not bother to look for alternatives if Microsoft provides something bundled. If they shrink-wrap it in a different box from Windows and sell it or give it away for free that's their prerogative. When it becomes bundled, there's little incentive for people to get something better.
  • by therealsludge ( 442772 ) on Wednesday February 25, 2004 @01:14AM (#8383100)
    Lets deny MS the right to improve their OS then Linux will be the defacto OS -- but oh wait, gotta rip out the firewall because norton makes one, gotta rip out the browser because that would stomp on opera. Rip out that media player because we gotta make sure REAL makes money, oh lord we can't forget about real.
    You've got to be kidding... What you are suggesting is not improving their OS, but is in fact what is bloating it and making it easier to hack. They are including entirely too many applications that have no business being in the OS. Look at Linux, you can choose to load the base OS, nothing else, that's it. If you choose to install a browser, you can. If you choose to install a "media player", you can. If you choose to install anything, you can, and are not forced to install what is in the "OS".
    BECAUSE THAT KIND OF STUFF BELONGS IN THE OS! (WoW).
    Again, like I said above, This stuff does NOT belong in the base OS, and you should have the option to not install it. The only way that I've really been able to uninstall this "shit", pardon my use of language, is to modify multiple .INF files from a distribution sharepoint, or modify an unattend.ini file and load from a distribution sharepoint. I'm fairly fed up with all these little "Windows" kiddies (adults included) that have never used another OS other than Windows and think that by adding more software, it is somehow "improving" it.

    Don't get me wrong, I do think that XP is, by far, the most stable OS that Microsoft has developed since MSDOS 5.0 . It still does not mean that I have to agree with the BS they keep pushing on us.

    Here's an idea, how about Microsoft start by making tighter code, instead of this lame ass bloatware that they keep pawning off on the public. How about MS also start by understanding their code so that there are not as many "Buffer Overflow", and other gaping holes that have been produced in their "OS"

    Remember, half of the worlds population is below average intelligence.

  • Re:Oh boy (Score:3, Insightful)

    by Jarnis ( 266190 ) on Wednesday February 25, 2004 @02:11AM (#8383416)
    They only block the warezed copies of the uneducated masses. Anyone with any knowledge has fixed the system around their 'check' - usually by changing the volume license key used from the most common pirate key to another working key. If the blacklist yet another set of volume license keys, it takes about 30 minutes for another 'change key'-fix program to crop up. As long as they have 'corporate' versions with no activation and volume license keys, they can't win vs the sophisticated users.

    However, even the current tactics ARE working.

    Before WinXP SP1, lots of people skipped buying the OS as 'they could just borrow it from a friend' (when buying a whitebox computer). Nowdays the OEM OS sells surprisingly well - the fact that most don't have access to the 'proper' warez version without the activation already foils some of them. The rest are usually driven to purchase of the OEM copy due to the blocking of the first old non-SP1 corporate versions from Windows Update based on the widely distributed CD-key.

    The masses have learned that 'you cannot update the warez WinXP, and without updates your computer is insecure'. Everyone knows a friend who had the good old Devils0wn XP without SP1 or any other critical updates, and usually without any AV or firewall software - a friend who then promptly got hosed by the Blaster worm & endless reboots. This sells lots of operating systems, and I bet MS is happy. Heck, I'd say latest round of worms and viruses together with the common 'knowledge' that you 'cannot' patch warez XP is the best advertising campaing MS could have had for their product. Which is kinda funny...
  • Re:Oh boy (Score:3, Insightful)

    by Jarnis ( 266190 ) on Wednesday February 25, 2004 @02:19AM (#8383448)
    I agree. Lots of 'normal' people are royally pissed off when they find out that their bundled AV software only had a 90 day or 6 month 'trial' subscription, and that they get to fork out cash for continuing virus protection.

    Even more people are happy to find out that their 50+ euro boxed AV/Internet Security box is good for only 12 months. They pay, but they are making noises and considering the current AV companies to be vultures, basically extorting protection fees to fix a problem that should not be there in the first place.

    If MS AV/Firewall solutions are any good, AV vendors are *so* hosed with their current subscription models.

    Of course I fully expect MS to bundle the AV software and then charge for updates after a trial period. First baby steps towards 'subscription' OS purchase model... They want it, but so far they had no way to sell it to end users...
  • Re:Not so fast (Score:3, Insightful)

    by fitten ( 521191 ) on Wednesday February 25, 2004 @12:15PM (#8386894)
    So... damned if they do, damned if they don't?

    People on this board constantly complain that too many virii and worms infest Windows platforms and berate people who don't think/know to buy/download virus scanners. However, when an effort to make one included in the OS distribution, and therefore making it a standard and a standard component so that *everyone* will have one installed by default, which sounds like a pretty good idea, then you get mad at that too. I think the vast majority of users will like this "feature", personally and it might even cut down on the number of worms and the like that infest the 'net.
  • by drsmithy ( 35869 ) <drsmithy@nOSPAm.gmail.com> on Wednesday February 25, 2004 @05:14PM (#8390874)
    It would be good enough to add an option that disables execution of any code that is not signed by MS or by the customer.

    Won't work. Forcing a user to tick a box to "sign" the code that is supposedly going to show them t33n b00bi3s before running it will barely slow them down.

    Corporate environments would be very excited, since only official, trusted and licensed code runs.

    Corporate environments could probably do this right now with the existing technology simply by limiting execution permissions.

    MS already has this for the drivers, why not to extend it to .exe and make it changeable by admin only?

    Because for the vast majority of vulnerable and already affected machines, the ignorant user *is* the admin.

Those who can, do; those who can't, write. Those who can't write work for the Bell Labs Record.

Working...