Windows Live OneCare
Encyclopedia
Windows Live OneCare was a computer security and performance enhancement service developed by Microsoft
for Microsoft Windows
. A core technology of OneCare was the multi-platform RAV (Reliable Antivirus), which Microsoft purchased from GeCAD Software
Srl in 2003, but subsequently discontinued. The software has been available as an annual paid subscription, which could be used on up to three computers.
On , Microsoft announced that Windows Live OneCare would be discontinued on and will instead be offering users a new free anti-malware suite called Microsoft Security Essentials to be available before then. However, virus definitions and support for OneCare will continue until a subscription expires. In the end-of-life announcement, Microsoft noted that Windows Live OneCare would not be upgraded to work with Windows 7 and would also not work in Windows 7 XP Mode.
-based computing service named Windows Live
(see official ideas website). Windows Live OneCare entered a beta state
in the summer of 2005. The managed beta program was launched before the public beta, and was located on BetaPlace, Microsoft's former beta delivery system. On , Windows Live OneCare made its official debut in retail stores in the United States
.
The beta version of Windows Live OneCare 1.5 was released in early October 2006 by Microsoft. Version 1.5 was released to manufacturing on and was made available to the public on . On , beta testing started for version 2.0, and the final version was released on .
Microsoft acquired Komoku on and merged its computer security
software into Windows Live OneCare.
Windows Live OneCare 2.5 (build 2.5.2900.28) final was released on . On the same day, Microsoft also released Windows Live OneCare for Server 2.5.
, firewall, backup
and restore utility, and a tune-up utility with the integrated functionality of Windows Defender
for malware
protection. The future addition of a registry cleaner was considered but not added because "there are not significant customer advantages to this functionality". Version 2 has features such as multi-PC and home network management, printer sharing support, start-time optimizer, proactive fixes and recommendations, monthly reports, centralized backup, and online photo backup.
Windows Live OneCare is built for ease-of-use and is designed for home users. OneCare also attempts a very minimal interface to lessen user confusion and resource use. It adds an icon to the notification area
that tells the user at a glance the status of the system's health by using three alert colors: green (good), yellow (fair), and red (at risk).
so that an association can be made between the account and the subscription to OneCare which has been purchased. When the product is activated, the grey message bar at the top of the program disappears, and the subscription is fully activated for 1 year from the date of activation. Users can check the status of their subscription on the Billing page at http://billing.microsoft.com/
Windows Live OneCare does not require the operating system to be checked with Windows Genuine Advantage
before, during or after installation. The program can simply be installed from a stub
downloaded from the http://onecare.live.com/ website or as CD media.
From Windows Live OneCare 1.5 onwards also monitors Internet Explorer 7 and 8 security settings and ensures that the automatic website checking feature of the Phishing Filter is enabled.
features such as incremental backups and scheduling.
Microsoft's acquisition of GeCAD RAV, a core technology of OneCare, and their subsequent discontinuation of that product, deprived the GNU/Linux platform (and others) of one of its leading virus scanning tools for e-mail servers, bringing Microsoft's ultimate intentions into question.
On , Windows Live OneCare was criticized by Foundstone (a division of the competing McAfee
antivirus) for the integrated firewall having default white list
s which allow Java applications and digitally signed
software to bypass user warnings, since neither of those applications carry assurances that they will not have security flaws or be written with a malicious intent. Microsoft has since responded to the criticism, justifying their decision in that Java applications are "widely used by third party applications, and is a popular and trusted program among our users", and that "it is highly unusual for malware to be signed."
Windows Live OneCare has also been criticized for the lack of adherence to industry firewall standards concerning intrusion detection. Tests conducted by Agnitum
(the developers of Outpost Firewall) have shown OneCare failing to detect trojans and malware which hijack applications already resident on an infected machine.
In February 2007, the first Windows Vista
anti-virus product testing by Virus Bulletin
magazine (a sister company of Sophos
, the developers of Sophos Anti-Virus) found that Windows Live OneCare failed to detect 18.6% of viruses. Fifteen anti-virus products were tested. To pass the Virus Bulletin's VB100 test, an antivirus product has to detect 100% of the viruses.
AV-Comparatives.org also released results that placed Windows Live OneCare last in its testing of seventeen anti-virus products. In response, Jimmy Kuo of the Microsoft Security Research and Response (MSRR) team pledged to add "truly important" ("actively being spread") malware as soon as possible, while "[test detection] numbers will get better and better" for other malware "until they are on par with the other majors in this arena." He also expressed confidence in these improvements: "Soon after, [other majors] will need to catch up to us!"
As of April 2008, Windows Live OneCare has passed the VB100 test under Windows Vista SP1 Business Edition. As of August 2008, Windows Live OneCare placed 14th out of 16 anti-virus products in on-demand virus detection rates. On the other hand, as of May 2009, Windows Live OneCare placed 2nd in a proactive/retrospective performance test conducted by AV-Comparatives. AV-Comparatives.org, the test issuer, denotes that it had "very few false alarms, which is a very good achievement." The publisher also points out that false positives can cause as much harm as genuine infections, and furthermore, anti-virus scanners prone to false alarms essentially achieve higher detection scores.
Microsoft
Microsoft Corporation is an American public multinational corporation headquartered in Redmond, Washington, USA that develops, manufactures, licenses, and supports a wide range of products and services predominantly related to computing through its various product divisions...
for Microsoft Windows
Microsoft Windows
Microsoft Windows is a series of operating systems produced by Microsoft.Microsoft introduced an operating environment named Windows on November 20, 1985 as an add-on to MS-DOS in response to the growing interest in graphical user interfaces . Microsoft Windows came to dominate the world's personal...
. A core technology of OneCare was the multi-platform RAV (Reliable Antivirus), which Microsoft purchased from GeCAD Software
GeCAD Software
GECAD Software was established in 1992 by Radu Georgescu as a Computer Aided Design software development company. Over time, GECAD’s focus shifted from CAD software to security-related software, mainly antivirus software. Its most prominent product, Reliable Antivirus, or RAV, was first developed...
Srl in 2003, but subsequently discontinued. The software has been available as an annual paid subscription, which could be used on up to three computers.
On , Microsoft announced that Windows Live OneCare would be discontinued on and will instead be offering users a new free anti-malware suite called Microsoft Security Essentials to be available before then. However, virus definitions and support for OneCare will continue until a subscription expires. In the end-of-life announcement, Microsoft noted that Windows Live OneCare would not be upgraded to work with Windows 7 and would also not work in Windows 7 XP Mode.
History
Microsoft designed OneCare as part of a cloudCloud computing
Cloud computing is the delivery of computing as a service rather than a product, whereby shared resources, software, and information are provided to computers and other devices as a utility over a network ....
-based computing service named Windows Live
Windows Live
Windows Live is the collective brand name for a set of services and software products from Microsoft, part of their software plus services platform. A majority of these services are Web applications, accessible from a browser, but there are also client-side binary applications that require...
(see official ideas website). Windows Live OneCare entered a beta state
Development stage
A software release life cycle refers to the phases of development and maturity for a piece of computer software—ranging from its initial development, to its eventual release, and updated versions of the released version to help improve software or fix bugs still present in the software.- Pre-alpha...
in the summer of 2005. The managed beta program was launched before the public beta, and was located on BetaPlace, Microsoft's former beta delivery system. On , Windows Live OneCare made its official debut in retail stores in the United States
United States
The United States of America is a federal constitutional republic comprising fifty states and a federal district...
.
The beta version of Windows Live OneCare 1.5 was released in early October 2006 by Microsoft. Version 1.5 was released to manufacturing on and was made available to the public on . On , beta testing started for version 2.0, and the final version was released on .
Microsoft acquired Komoku on and merged its computer security
Computer security
Computer security is a branch of computer technology known as information security as applied to computers and networks. The objective of computer security includes protection of information and property from theft, corruption, or natural disaster, while allowing the information and property to...
software into Windows Live OneCare.
Windows Live OneCare 2.5 (build 2.5.2900.28) final was released on . On the same day, Microsoft also released Windows Live OneCare for Server 2.5.
Features
Windows Live OneCare currently features an integrated anti-virusAntivirus software
Antivirus or anti-virus software is used to prevent, detect, and remove malware, including but not limited to computer viruses, computer worm, trojan horses, spyware and adware...
, firewall, backup
Backup
In information technology, a backup or the process of backing up is making copies of data which may be used to restore the original after a data loss event. The verb form is back up in two words, whereas the noun is backup....
and restore utility, and a tune-up utility with the integrated functionality of Windows Defender
Windows Defender
Windows Defender, formerly known as Microsoft AntiSpyware, is a software product from Microsoft to prevent, remove, and quarantine spyware in Microsoft Windows...
for malware
Malware
Malware, short for malicious software, consists of programming that is designed to disrupt or deny operation, gather information that leads to loss of privacy or exploitation, or gain unauthorized access to system resources, or that otherwise exhibits abusive behavior...
protection. The future addition of a registry cleaner was considered but not added because "there are not significant customer advantages to this functionality". Version 2 has features such as multi-PC and home network management, printer sharing support, start-time optimizer, proactive fixes and recommendations, monthly reports, centralized backup, and online photo backup.
Windows Live OneCare is built for ease-of-use and is designed for home users. OneCare also attempts a very minimal interface to lessen user confusion and resource use. It adds an icon to the notification area
Taskbar
In computing, a taskbar is a bar displayed on a full edge of a GUI desktop that is used to launch and monitor running applications. Microsoft incorporated a taskbar in Windows 95 and it has been a defining aspect of Microsoft Windows's graphical user interface ever since. Some desktop environments,...
that tells the user at a glance the status of the system's health by using three alert colors: green (good), yellow (fair), and red (at risk).
Compatibility
Version 1.5 of OneCare is only compatible with the 32 bit versions of Windows XP and Windows Vista. Version 2 of OneCare supports 64 bit compatibility to Vista. In version 2.5, Microsoft released Windows Live OneCare for Server which supports Windows Server 2008 Standard 64-bit and Windows Small Business Server 2008 Standard and Premium editions. No edition of OneCare operates in safe mode. Windows Live OneCare will not support Windows 7 as its development has been discontinued and replaced by Microsoft Security Essentials.Activation
Windows Live OneCare requires users to activate the product if they wish to continue using it after the free trial period (90 days). This can only be achieved by having a valid Windows Live IDWindows Live ID
Windows Live ID is a single sign-on web service developed and provided by Microsoft that allows users to log in to many websites using one account...
so that an association can be made between the account and the subscription to OneCare which has been purchased. When the product is activated, the grey message bar at the top of the program disappears, and the subscription is fully activated for 1 year from the date of activation. Users can check the status of their subscription on the Billing page at http://billing.microsoft.com/
Windows Live OneCare does not require the operating system to be checked with Windows Genuine Advantage
Windows Genuine Advantage
Windows Genuine Advantage is an anti-piracy system created by Microsoft that enforces online validation of the licensing of several recent Microsoft Windows operating systems when accessing several services, such as Windows Update, and downloading Windows components from the Microsoft Download...
before, during or after installation. The program can simply be installed from a stub
Method stub
A method stub or simply stub in software development is a piece of code used to stand in for some other programming functionality. A stub may simulate the behavior of existing code or be a temporary substitute for yet-to-be-developed code...
downloaded from the http://onecare.live.com/ website or as CD media.
Protection
Windows Live OneCare Protection Plus is the security component in the OneCare suite. It consists of three parts:- A two-way firewall blocking both incoming and outgoing traffic, as opposed to that of Windows XPWindows XPWindows XP is an operating system produced by Microsoft for use on personal computers, including home and business desktops, laptops and media centers. First released to computer manufacturers on August 24, 2001, it is the second most popular version of Windows, based on installed user base...
pre-service pack 2 that blocks only incoming traffic. A two-way firewall protects against trojan or other viral infections running on the local computer. - An anti-virus tool that uses regularly updated anti-virus definition files.
- An anti-spyware tool that uses the Windows DefenderWindows DefenderWindows Defender, formerly known as Microsoft AntiSpyware, is a software product from Microsoft to prevent, remove, and quarantine spyware in Microsoft Windows...
engine as a core. In version 1.0, this required the separate installation of Windows Defender and was not integrated into the OneCare interface (although it could be managed and launched from OneCare). Version 1.5 integrated the Windows Defender engine into OneCare and no longer requires separate installation.
From Windows Live OneCare 1.5 onwards also monitors Internet Explorer 7 and 8 security settings and ensures that the automatic website checking feature of the Phishing Filter is enabled.
Performance
Windows Live OneCare Performance Plus is the component that performs monthly PC tune-up related tasks, such as:- Disk cleanup and defragmentation.
- A full virus scan using the anti-virus component in the suite.
- User notification if files are in need of backing up.
- Check for Windows updates by using the Microsoft Update service.
Backup
Windows Live OneCare Backup and Restore is the component that aids in backing up important files. Files can be backed up to various recordable media, such as external hard disks, CDs, and DVDs. When restoring files, the entirety or a subset of them can also be restored to a networked computer, as long as it's running OneCare as well. The Backup and Restore component supports backup softwareBackup software
Backup software are computer programs used to perform backup; they create supplementary exact copies of files, databases or entire computers. These programs may later use the supplementary copies to restore the original contents in the event of data loss....
features such as incremental backups and scheduling.
Criticism
Windows Live OneCare has been criticized from both users and competing security software companies.Microsoft's acquisition of GeCAD RAV, a core technology of OneCare, and their subsequent discontinuation of that product, deprived the GNU/Linux platform (and others) of one of its leading virus scanning tools for e-mail servers, bringing Microsoft's ultimate intentions into question.
On , Windows Live OneCare was criticized by Foundstone (a division of the competing McAfee
McAfee
McAfee, Inc. is a computer security company headquartered in Santa Clara, California, USA. It markets software and services to home users, businesses and the public sector. On August 19, 2010, electronics company Intel agreed to purchase McAfee for $7.68 billion...
antivirus) for the integrated firewall having default white list
White list
Whitelist is a term used to describe a list or register of entities that, for one reason or another, are being provided a particular privilege, service, mobility, access or recognition. As a verb, to whitelist can mean to authorize access or grant membership...
s which allow Java applications and digitally signed
Digital signature
A digital signature or digital signature scheme is a mathematical scheme for demonstrating the authenticity of a digital message or document. A valid digital signature gives a recipient reason to believe that the message was created by a known sender, and that it was not altered in transit...
software to bypass user warnings, since neither of those applications carry assurances that they will not have security flaws or be written with a malicious intent. Microsoft has since responded to the criticism, justifying their decision in that Java applications are "widely used by third party applications, and is a popular and trusted program among our users", and that "it is highly unusual for malware to be signed."
Windows Live OneCare has also been criticized for the lack of adherence to industry firewall standards concerning intrusion detection. Tests conducted by Agnitum
Agnitum
Agnitum Ltd was founded in 1999 in St. Petersburg, Russia as software company. In 2000 Agnitum hired 2 developers and increased the number of staff people to 20 until 2002. Agnitum was originally focused on anti-trojan and PC connections monitoring solutions targeted on Windows PCs users...
(the developers of Outpost Firewall) have shown OneCare failing to detect trojans and malware which hijack applications already resident on an infected machine.
In February 2007, the first Windows Vista
Windows Vista
Windows Vista is an operating system released in several variations developed by Microsoft for use on personal computers, including home and business desktops, laptops, tablet PCs, and media center PCs...
anti-virus product testing by Virus Bulletin
Virus Bulletin
Virus Bulletin is a magazine about the prevention, detection and removal of malware and spam. It regularly features analyses of the latest virus threats, articles exploring new developments in the fight against viruses, interviews with anti-virus experts, and evaluations of current anti-malware...
magazine (a sister company of Sophos
Sophos
Sophos is a developer and vendor of security software and hardware, including anti-virus, anti-spyware, anti-spam, network access control, encryption software and data loss prevention for desktops, servers, email systems and other network gateways....
, the developers of Sophos Anti-Virus) found that Windows Live OneCare failed to detect 18.6% of viruses. Fifteen anti-virus products were tested. To pass the Virus Bulletin's VB100 test, an antivirus product has to detect 100% of the viruses.
AV-Comparatives.org also released results that placed Windows Live OneCare last in its testing of seventeen anti-virus products. In response, Jimmy Kuo of the Microsoft Security Research and Response (MSRR) team pledged to add "truly important" ("actively being spread") malware as soon as possible, while "[test detection] numbers will get better and better" for other malware "until they are on par with the other majors in this arena." He also expressed confidence in these improvements: "Soon after, [other majors] will need to catch up to us!"
As of April 2008, Windows Live OneCare has passed the VB100 test under Windows Vista SP1 Business Edition. As of August 2008, Windows Live OneCare placed 14th out of 16 anti-virus products in on-demand virus detection rates. On the other hand, as of May 2009, Windows Live OneCare placed 2nd in a proactive/retrospective performance test conducted by AV-Comparatives. AV-Comparatives.org, the test issuer, denotes that it had "very few false alarms, which is a very good achievement." The publisher also points out that false positives can cause as much harm as genuine infections, and furthermore, anti-virus scanners prone to false alarms essentially achieve higher detection scores.
See also
- Windows LiveWindows LiveWindows Live is the collective brand name for a set of services and software products from Microsoft, part of their software plus services platform. A majority of these services are Web applications, accessible from a browser, but there are also client-side binary applications that require...
collective brand name for a set of services and software products - Windows Live OneCare Family SafetyWindows Live OneCare Family SafetyWindows Live Family Safety, developed by Microsoft, is free parental monitoring and content-control software for Microsoft Windows under the Windows Live brand.- Features :...