Microsoft Security Essentials problems and what has to be fixed
Sunday, October 11, 2009 4:52:13 PM
The program is very simple to use since it doesn't offer all that many settings.
However i've noticed quite some problems that need to be addressed.
First and most important is performance hit. After testing, it turned out that MSE is scanning archives on-access. This indeed offers early detection of malware inside archives, but also results in a significant performance hit. I see no reason to scan archives on-access (don't mistake archives for runtime packers!). Malware inside archives is benign until you extract it in one or another way. And once you do that, the usual file scanner will pick it up. So i really hope Microsoft will add option to disable on-access archive scanning (the option in settings is for on-demand btw).
Second issue that's also very important is the update process. Checking for signatures only ever 24 hours is just not enough these days, because 24 hours is a huge time frame for threats today.
If you've just updated and new threat just emerges, Microsoft creates definitions for it and you won't recieve it for next 24 hours. For one whole day! That's just not acceptable.
Every antivirus, be it free or payable should check for new definitions each time internet connection is detected and after that at least every 2 hours. This way it's ensured that antivirus has the newest signatures when it's the most important.
These two issues are the most important and i hope Microsoft will fix them fast. Because on-access archive scanning is really bogging down my netbook. And i even cought it few times to bog down my main system with Core i7 920 and 6GB of RAM. And that's what was worrying me the most.
Issue regarding definition signatures is also important.
However i've noticed quite some problems that need to be addressed.
First and most important is performance hit. After testing, it turned out that MSE is scanning archives on-access. This indeed offers early detection of malware inside archives, but also results in a significant performance hit. I see no reason to scan archives on-access (don't mistake archives for runtime packers!). Malware inside archives is benign until you extract it in one or another way. And once you do that, the usual file scanner will pick it up. So i really hope Microsoft will add option to disable on-access archive scanning (the option in settings is for on-demand btw).
Second issue that's also very important is the update process. Checking for signatures only ever 24 hours is just not enough these days, because 24 hours is a huge time frame for threats today.
If you've just updated and new threat just emerges, Microsoft creates definitions for it and you won't recieve it for next 24 hours. For one whole day! That's just not acceptable.
Every antivirus, be it free or payable should check for new definitions each time internet connection is detected and after that at least every 2 hours. This way it's ensured that antivirus has the newest signatures when it's the most important.
These two issues are the most important and i hope Microsoft will fix them fast. Because on-access archive scanning is really bogging down my netbook. And i even cought it few times to bog down my main system with Core i7 920 and 6GB of RAM. And that's what was worrying me the most.
Issue regarding definition signatures is also important.







Unregistered user # Tuesday, October 13, 2009 4:32:28 PM
Willem NuijenltGuillaume # Saturday, October 24, 2009 6:12:50 PM
RejZoRrejzor # Saturday, October 24, 2009 7:20:33 PM
Unregistered user # Sunday, October 25, 2009 6:52:16 PM
Willem NuijenltGuillaume # Sunday, October 25, 2009 7:00:18 PM
Unregistered user # Sunday, October 25, 2009 7:19:47 PM
Willem NuijenltGuillaume # Sunday, October 25, 2009 7:38:14 PM
Unregistered user # Sunday, October 25, 2009 8:04:10 PM
Willem NuijenltGuillaume # Wednesday, October 28, 2009 12:52:51 AM
Source: http://www.heise.de/security/meldung/Microsofts-Antiviren-Software-verschlaeft-Updates-837599.html (English translation)
Willem NuijenltGuillaume # Tuesday, November 10, 2009 11:31:37 PM
Willem NuijenltGuillaume # Monday, November 16, 2009 7:12:06 PM
Unregistered user # Monday, December 21, 2009 8:08:20 PM
Unregistered user # Thursday, March 11, 2010 9:43:41 AM
Unregistered user # Thursday, March 11, 2010 9:44:55 AM
Unregistered user # Wednesday, May 26, 2010 12:43:44 AM
Unregistered user # Tuesday, November 2, 2010 6:50:21 PM