Windows Live OneCare

Windows Live OneCare

A screenshot of Windows Live OneCare 2.5.2900.03
Developer(s)	Microsoft
Discontinued	2.5.2900.30 / March 6, 2010; 20 months ago (2010-03-06)
Development status	Discontinued
Operating system	Windows XP (32-bit), Windows Vista (32-bit or 64-bit)
Platform	IA-32 and x86-64
Type	Antivirus software Backup software Personal firewall
License	Proprietary commercial software / Software as a service
Website	onecare.live.com

Windows Live OneCare (previously known as Windows OneCare Live and formerly code named A1) was a computer security and performance enhancement service developed by Microsoft for Microsoft Windows. A core technology of OneCare was the multi-platform RAV (Reliable Antivirus),^[1] which Microsoft purchased from GeCAD Software Srl in 2003,^[2] but subsequently discontinued.^[3] The software has been available as an annual paid subscription, which could be used on up to three computers.

On 18 November 2008, Microsoft announced that Windows Live OneCare would be discontinued on 30 June 2009 and will instead be offering users a new free anti-malware suite called Microsoft Security Essentials to be available before then. However, virus definitions and support for OneCare will continue until a subscription expires.^[4] In the end-of-life announcement, Microsoft noted that Windows Live OneCare would not be upgraded to work with Windows 7 and would also not work in Windows 7 XP Mode.^[5]

History

Microsoft designed OneCare as part of a cloud-based computing service named Windows Live (see official ideas website). Windows Live OneCare entered a beta state in the summer of 2005. The managed beta program was launched before the public beta, and was located on BetaPlace, Microsoft's former beta delivery system. On 31 May 2006, Windows Live OneCare made its official debut in retail stores in the United States.^[6]

The beta version of Windows Live OneCare 1.5 was released in early October 2006 by Microsoft. Version 1.5 was released to manufacturing on 3 January 2007 and was made available to the public on 30 January 2007. On 4 July 2007, beta testing started for version 2.0, and the final version was released on 16 November 2007.

Microsoft acquired Komoku on 20 March 2008 and merged its computer security software into Windows Live OneCare.^[7]

Windows Live OneCare 2.5 (build 2.5.2900.28) final was released on 3 July 2008. On the same day, Microsoft also released Windows Live OneCare for Server 2.5.

Features

Windows Live OneCare currently features an integrated anti-virus, firewall, backup and restore utility, and a tune-up utility with the integrated functionality of Windows Defender for malware protection. The future addition of a registry cleaner was considered^[8] but not added because "there are not significant customer advantages to this functionality".^[9] Version 2 has features such as multi-PC and home network management, printer sharing support, start-time optimizer, proactive fixes and recommendations, monthly reports, centralized backup, and online photo backup.^[10]

Windows Live OneCare is built for ease-of-use and is designed for home users. OneCare also attempts a very minimal interface to lessen user confusion and resource use.^{[citation needed]} It adds an icon to the notification area that tells the user at a glance the status of the system's health by using three alert colors: green (good), yellow (fair), and red (at risk).^[11]

Compatibility

Version 1.5 of OneCare is only compatible with the 32 bit versions of Windows XP and Windows Vista.^[12] Version 2 of OneCare supports 64 bit compatibility to Vista. In version 2.5, Microsoft released Windows Live OneCare for Server which supports Windows Server 2008 Standard 64-bit and Windows Small Business Server 2008 Standard and Premium editions. No edition of OneCare operates in safe mode. Windows Live OneCare will not support Windows 7 as its development has been discontinued and replaced by Microsoft Security Essentials.

Activation

Windows Live OneCare requires users to activate the product if they wish to continue using it after the free trial period (90 days). This can only be achieved by having a valid Windows Live ID so that an association can be made between the account and the subscription to OneCare which has been purchased. When the product is activated, the grey message bar at the top of the program disappears, and the subscription is fully activated for 1 year from the date of activation. Users can check the status of their subscription on the Billing page at http://billing.microsoft.com/

Windows Live OneCare does not require the operating system to be checked with Windows Genuine Advantage before, during or after installation. The program can simply be installed from a stub downloaded from the http://onecare.live.com/ website or as CD media.^[13]

Protection

Windows Live OneCare Protection Plus is the security component in the OneCare suite. It consists of three parts:

• A two-way firewall blocking both incoming and outgoing traffic, as opposed to that of Windows XP pre-service pack 2 that blocks only incoming traffic. A two-way firewall protects against trojan or other viral infections running on the local computer.
• An anti-virus tool that uses regularly updated anti-virus definition files.
• An anti-spyware tool that uses the Windows Defender engine as a core. In version 1.0, this required the separate installation of Windows Defender and was not integrated into the OneCare interface (although it could be managed and launched from OneCare). Version 1.5 integrated the Windows Defender engine into OneCare and no longer requires separate installation.

From Windows Live OneCare 1.5 onwards also monitors Internet Explorer 7 and 8 security settings and ensures that the automatic website checking feature of the Phishing Filter is enabled.

Performance

Windows Live OneCare Performance Plus is the component that performs monthly PC tune-up related tasks, such as:

• Disk cleanup and defragmentation.
• A full virus scan using the anti-virus component in the suite.
• User notification if files are in need of backing up.
• Check for Windows updates by using the Microsoft Update service.

Backup

Windows Live OneCare Backup and Restore is the component that aids in backing up important files. Files can be backed up to various recordable media, such as external hard disks, CDs, and DVDs. When restoring files, the entirety or a subset of them can also be restored to a networked computer, as long as it's running OneCare as well. The Backup and Restore component supports backup software features such as incremental backups and scheduling.

Criticism

Windows Live OneCare tied for the fewest false positives

Windows Live OneCare has been criticized from both users and competing security software companies.

Microsoft's acquisition of GeCAD RAV, a core technology of OneCare, and their subsequent discontinuation of that product, deprived the GNU/Linux platform (and others) of one of its leading virus scanning tools for e-mail servers, bringing Microsoft's ultimate intentions into question.^[3]

On 26 January 2006, Windows Live OneCare was criticized by Foundstone (a division of the competing McAfee antivirus) for the integrated firewall having default white lists which allow Java applications and digitally signed software to bypass user warnings, since neither of those applications carry assurances that they will not have security flaws or be written with a malicious intent.^[14] Microsoft has since responded to the criticism, justifying their decision in that Java applications are "widely used by third party applications, and is a popular and trusted program among our users", and that "it is highly unusual for malware to be signed."^[15]

Windows Live OneCare has also been criticized for the lack of adherence to industry firewall standards concerning intrusion detection. Tests conducted by Agnitum (the developers of Outpost Firewall) have shown OneCare failing to detect trojans and malware which hijack applications already resident on an infected machine.^[16]

In February 2007, the first Windows Vista anti-virus product testing by Virus Bulletin magazine (a sister company of Sophos, the developers of Sophos Anti-Virus) found that Windows Live OneCare failed to detect 18.6% of viruses. Fifteen anti-virus products were tested.^[17][18] To pass the Virus Bulletin's VB100 test, an antivirus product has to detect 100% of the viruses.

AV-Comparatives.org also released results that placed Windows Live OneCare last in its testing of seventeen anti-virus products.^[19][20] In response, Jimmy Kuo of the Microsoft Security Research and Response (MSRR) team pledged to add "truly important" ("actively being spread") malware as soon as possible, while "[test detection] numbers will get better and better" for other malware "until they are on par with the other majors in this arena." He also expressed confidence in these improvements: "Soon after, [other majors] will need to catch up to us!"^[21]

As of April 2008, Windows Live OneCare has passed the VB100 test under Windows Vista SP1 Business Edition.^[22] As of August 2008, Windows Live OneCare placed 14th out of 16 anti-virus products in on-demand virus detection rates. On the other hand, as of May 2009, Windows Live OneCare placed 2nd in a proactive/retrospective performance test conducted by AV-Comparatives.^[23] AV-Comparatives.org, the test issuer, denotes that it had "very few false alarms, which is a very good achievement." The publisher also points out that false positives can cause as much harm as genuine infections, and furthermore, anti-virus scanners prone to false alarms essentially achieve higher detection scores.^[24]

See also

Computer security portal

• Windows Live collective brand name for a set of services and software products
• Windows Live OneCare Family Safety

References

1. ^ "Microsoft: OneCare should not have been rolled out". CBS Interactive Limited. 16 March 2007. http://news.zdnet.co.uk/security/0,1000000189,39286351,00.htm. Retrieved 29 January 2010. 
2. ^ "Microsoft to Acquire Antivirus Technology From GeCAD Software: Future Antivirus Solutions, Windows Platform Investments Will Provide Customers With Added Protection". Microsoft Presspass. Microsoft Corporation. 3 June 2003. http://www.microsoft.com/presspass/press/2003/Jun03/06-10GeCadPR.mspx. Retrieved 29 January 2010. 
3. ^ ^{a b} "Microsoft to kill popular Linux antivirus product". Infoworld, Inc.. 11 June 2003. http://www.infoworld.com/t/applications/microsoft-kill-popular-linux-antivirus-product-443. Retrieved 29 January 2010. 
4. ^ "Microsoft Announces Plans for No-Cost Consumer Security Offering: New anti-malware solution will broaden PC protection and help improve Windows experience.". Microsoft Presspass. Microsoft Corporation. 18 November 2009. http://www.microsoft.com/Presspass/press/2008/nov08/11-18NoCostSecurityPR.mspx. Retrieved 10 October 2009. 
5. ^ "Windows Live OneCare End of Sale Guidance Page". Microsoft Corporation. http://onecare.live.com/standard/en-US/activation/oc_eol_guidance.htm. Retrieved 17 November 2009. 
6. ^ Evers, Joris (31 May 2006). "Microsoft security product makes official debut". CNET News.com. http://news.com.com/Microsoft+security+product+makes+official+debut/2100-7355_3-6078249.html. Retrieved 16 December 2006. 
7. ^ "Anti-Malware Engineering Team : Microsoft acquires Komoku". 20 March 2008. http://blogs.technet.com/antimalware/archive/2008/03/20/microsoft-acquires-komoku.aspx. Retrieved 10 October 2009. 
8. ^ Yoav (27 March 2006). "Counting down to shipping OneCare". Windows Live OneCare Team Blog. http://windowsonecare.spaces.live.com/blog/cns!C29701F38A601141!1210.entry?_c11_blogpart_blogpart=blogview&_c=blogpart#permalink. Retrieved 16 December 2006. 
9. ^ "OneCare Beta (2.0) Chat #1". 26 July 2007. https://connect.microsoft.com/content/content.aspx?ContentID=6085&SiteID=168. Retrieved 21 August 2007. 
10. ^ "Download the OneCare Beta (v2.0) and let us know what you think!". Windows Live OneCare Team Blog. 11 July 2007. http://windowsonecare.spaces.live.com/blog/cns!C29701F38A601141!4363.entry?_c=BlogPart. Retrieved 29 September 2007. 
11. ^ "Windows Live OneCare — Getting Started". Microsoft Corporation. http://onecare.live.com/standard/en-us/members/getstarted.htm. Retrieved 29 September 2007. 
12. ^ Galli, Peter (2007-01-23). "Security - Next Release of OneCare Won't Support Vista x64". Microsoft Watch. http://www.microsoft-watch.com/content/security/next_release_of_onecare_still_wontsupport_vista_x64.html. Retrieved 2010-11-09. 
13. ^ "Microsoft Windows Live OneCare 1.5 (3 User Licence) (PC)". Amazon. 30 January 2007. http://www.amazon.co.uk/dp/B000KN7DDE. Retrieved 12 July 2007. 
14. ^ Grimes, Roger (29 January 2006). "Microsoft's OneCare Has Holes". Security Adviser. http://weblog.infoworld.com/securityadviser/archives/2006/01/microsofts_onec.html. Retrieved 16 December 2006. 
15. ^ "Firewall and Windows OneCare – a multi-layered defense". Windows Live OneCare Team Blog. 31 January 2006. http://windowsonecare.spaces.live.com/blog/cns!C29701F38A601141!598.entry?_c11_blogpart_blogpart=blogview&_c=blogpart. Retrieved 16 December 2006. 
16. ^ "OneCare Firewall: a light-weight approach to a heavy-duty problem". http://www.agnitum.com/news/securityinsight/issues/june2006. Retrieved 28 January 2007. 
17. ^ "Virus Bulletin : Independent Malware Advice. Windows Vista — February 2007.". Virus Bulletin. http://www.virusbtn.com/vb100/archive/2007/02. Retrieved 7 February 2007. 
18. ^ Thurston, Richard (6 February 2007). "Microsoft's own antivirus fails to secure Vista". CNET News.com. http://news.com.com/Microsofts+own+antivirus+fails+to+secure+Vista/2100-7355_3-6156733.html?tag=cd.top. Retrieved 7 February 2007. 
19. ^ "Anti-Virus comparative February 2007". AV-Comparatives.org. http://www.av-comparatives.org/. Retrieved 11 March 2007. 
20. ^ Keizer, Gregg (1 March 2007). "Microsoft's OneCare takes last place in anti-virus evaluation". Computerworld. http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9012078&intsrc=hm_list. Retrieved 11 March 2007. 
21. ^ Kuo, Jimmy (15 March 2007). "Anti-Malware Engineering Team : Hello World". Technet Blogs. http://blogs.technet.com/antimalware/archive/2007/03/15/hello-world.aspx. Retrieved 18 March 2007. 
22. ^ "VB100 results summary". Virus Bulletin. http://www.virusbtn.com/vb100/archive/results?display=summary. Retrieved 30 August 2008. 
23. ^ "AV-Comparatives Anti-Virus Proactive/Retrospective Test". AV-Comparatives. http://www.av-comparatives.org/images/stories/test/ondret/avc_report22.pdf. Retrieved 8 July 2009. 
24. ^ "Anti-Virus Comparative August 2008". AV-Comparatives.org. http://www.av-comparatives.org/seiten/ergebnisse/report19.pdf. Retrieved 6 October 2008. 

External links

• Windows Live OneCare Official Website
• Windows Live OneCare Team Blog
• Windows Live OneCare Forums
• Virus/Suspicious file submission, False positive submission