Who gains from Microsoft's free Morro antivirus?
Summary
Topics
Microsoft recently announced it was doing away with its subscription-based consumer security suite, Windows Live OneCare. In its place, Microsoft plans a free, standalone antivirus product, code-named 'Morro', which, the company says, will meet the needs of emerging markets. Countries cited by Microsoft as being in this category include Brazil, China and India.
Microsoft's motives
Some have suggested poor market share is the driving force behind the decision. Others point to competitive motives, as Microsoft aims to put pressure on rival antivirus vendors Symantec and McAfee.
According to Microsoft, the move is much more altruistic. It is intended to "remove the barriers" that keep a large percentage of consumers from installing and using anti-malware protection. However, if protecting emerging markets really is the goal, the decision certainly doesn't appear to be tied to infection rates.
Less than two weeks before the OneCare announcement, Microsoft released its Security Intelligence Report, which identified China and India as among the 25 countries with the lowest infection rates. Brazil, conversely, had one of the highest. This inconsistency gives some credence to the poor-market-share argument. But, if poor market share is the reason, why bother with a free version? After all, at $49 (£33) for up to three PCs, OneCare was already one of the cheapest security suites on the market and free, standalone antivirus solutions are already available from other vendors.
Since the Microsoft announcement specifically mentioned Brazil, China and India, it's worth considering what these three countries have in common.
Counterfeit software
Each of the three has been identified as among the top countries for the trade in counterfeit software. And Microsoft chief executive Steve Ballmer has repeatedly blamed counterfeit software for poor Vista sales, with Brazil, China and India having been mentioned on several occasions.
Attempts to curb the counterfeit-software trade via Windows Genuine Advantage appear to have backfired in each of the three countries, eventually resulting in lowered prices for Vista. Yet, despite concerns over counterfeit software, Brazil, China and India were identified in Microsoft's 2007 annual letter to shareholders as countries with "impressive growth... which all delivered revenue growth that topped 40 percent".
It seems unlikely that Morro would be used as a tool against counterfeit software. Adoption rates would probably be a challenge when two out of the three countries mentioned have very low infection rates, according to Microsoft's data.
And building anti-counterfeiting functions into Morro would cause even more negative fallout than Windows Genuine Advantage. In any event, the entire emerging-market focus seems questionable.
Infection rates
The recent Microsoft Security Intelligence Report points out an inverse correlation between infection rates and internet use. According to Microsoft data, the higher the internet adoption rates, the lower the rate of infections; the lower the internet adoption rates, the higher the rate of infections.
One could safely assume that, in countries with high internet use, the level of computer knowledge and system-safety practices have increased, along with the adoption of antivirus software. If so, the emerging markets to which Microsoft refers should fall into the category of low internet use, high infection rates.
Yet the three countries specified in the OneCare announcement don't support this argument. Brazil, China and India all have below-average internet use, and both China and India have rates of infection well below the norm.
Perhaps the real reason OneCare is being unexpectedly retired is that it simply costs too much to support, both from a monetary and public-relations standpoint, and thus there's been no real return on the investment.
After all, most users view their antivirus software with some antipathy, and this could border on animosity where Microsoft is concerned.
Microsoft cutting losses?
Regardless of how invalid their argument may be, many might see Microsoft offering a paid antivirus solution as a form of extortion. In this time of belt-tightening, perhaps Microsoft simply decided to cut its losses on a product that hasn't provided high returns, monetarily or otherwise.
Viewed from this angle, a free antivirus offering actually makes sense.
The Microsoft Malicious Software Removal Tool (MSRT), which has been offered free since inception, is limited to a much smaller set of malware than the full Microsoft antivirus engine — or any other antivirus engine, for that matter.
And the MSRT lacks a real-time component, reducing its effectiveness for removal of infections and rendering it incapable of prevention.
Despite these limitations, by virtue of being pushed through Windows updates, the MSRT enjoys relatively widespread adoption and the reports it generates form the basis of much of the Microsoft Security Intelligence Report.
Providing a fully functioning antivirus scanner free of charge would eliminate the support, PR and adoption woes of Windows OneCare, while increasing Microsoft's insight into users' desktops.
The question then becomes: will it benefit users?
biography
Mary Landesman is the senior security researcher for ScanSafe.
Talkback Most Recent of 5 Talkback(s)
-
The worst detection rates by a mile ...
... when I last saw a comparison of AV products.
What they can do, being Microsoft, is start charging for a package that protects the AV software. No need to fix the original problem, nor problems in the AV that way.
The company is pathetic. Fix the code. Do it properly. Try putting users and technology first instead of forcing crap down peoples throats.
Oh they can't, they live to feed the greedy.
fr0thy21st Dec 2008 -
or open source the code and allow others to improve the thing?
since they are giving it away it might make sense to open source it.
markbn1st Dec 2008 -
Yeah. Right.
Oh, yeah, that'll happen...
mrkahatr2nd Dec 2008 -
Its Microsoft`s gain
I have a theory that explains why MS did that.
1. Windows Vista and the currently circulating build of Windows 7 have Windows Defender as a bundled application. It is a pure antispyware product. If you look at the current client security applications, there are actually only two products which exactly complement Windows Defender, without overlapping any of its detection capabilities. The products are Avira Antivir Personal Edition(Free Version) and McAfee VirusScan Enterprise Edition(without antispyware plug-in). As is evident from the following screenshot: http://cid-bbfd51ce0de5cde6.skydrive.live.com/self.aspx/Public/Avira.JPG . Now all other antivirus solutions namely avast, AVG, Norton, McAfee, NOD32, Norman, TrendMicro and even Live OneCare have antispyware capabilities built in. See http://cid-bbfd51ce0de5cde6.skydrive.live.com/self.aspx/Public/Avast.JPG . Many of them(including Live OneCare) even disable Windows Defender upon installation to avoid potential conflicts. Hence it does not make any sense in the first place to give users a free security tool that does half the job and interferes with the solution that the user tries to complement it with. So my take is that MS will eventually strip out Windows Defender from Windows 7. This approach is exactly in line with the work being done with stripping out Windows Mail, Movie Maker etc and replacing them with downloadable, unbundled "Live" applications, which is how Microsoft is pitching Morro too. It is a complete anti-malware application as opposed to Windows Defender.
2. Now why MS pulled the plugs on Live OneCare instead of simply making it freely downloadable along with other "Live" applications - the reason is again the same - to remove overlapping functionality. Lets look into it in detail - Live OneCare includes a firewall, antispyware component, defragmenter, backup tool, clean up tool which Vista and supposedly windows 7 already have; although some of the Live OneCare zealots may say that the versions of these tools in Live OneCare add more functionality than the versions in Windows Vista, but seriously do you expect these better versions not to natively find a place in Windows 7 when it gets released? I think and hope Windows 7 will surely improve further upon these tools, thereby nullifying the need for the current Live OneCare product.
iravgupta1st Dec 2008 -
RE: Who gains from Microsoft's free Morro antivirus?
The users, free market, everybody of course!
And in this special case as well a small tropical Paradise Island in Bahia - Brazil called "Morro de Sao Paulo".
To read more about the combination of this place to the name of the new Microsoft Antivirus Morro:
http://www.morro.travel/blog-morro-sao-paulo/microsoft-launchs-antivirus-in-tribute-of-morro-de-sao-paulo.htm
Fabab??o24th Jun 2009
Talkback - Tell Us What You Think
The best of ZDNet, delivered
ZDNet Newsletters
Get the best of ZDNet delivered straight to your inbox




