Prev: wordpad unable to open rtf file - security warning - win xp sp3 64 bit
Next: Screen Upside Down Virus
From: VanguardLH on 14 Mar 2010 20:11
David H. Lipman wrote:

> From: "FromTheRafters" <erratic @nomail.afraid.org>
>
>| "VanguardLH" <V(a)nguard.LH> wrote in message
>| news:hnho5q$l19$1(a)news.albasani.net...
>>> FromTheRafters wrote:
>
>>>> VanguardLH wrote ...
>
>>>>> To clarify, the anti-virus engine used in MSE is different than the
>>>>> one
>>>>> that was used in OneCare. That is, you aren't stuck with the same
>>>>> bad
>>>>> AV that was in OneCare.
>
>>>> Which engines are in MSE now? All I can find is references to
>>>> Forefront
>>>> and earlier.
>
>>> Yep, Forefront in MSE.
>
>| I read in some blurb about MSE that the scanning system is based on the
>| same one in Forefront. Then I read some blurb about Forefront's scanning
>| being based on the AntiGen system, then found this:
>
>| =====================
>| Q. What antivirus scan engines are included with Antigen?
>| A. Antigen products support multiple scan engines from industry-leading
>| vendors. Below is a chart of what scan engines are available with each
>| product.
>| Microsoft Antigen for Exchange
>
>| Microsoft, CA InoculateIT, CA Vet, Norman, Sophos
>| =====================
>
>| I musta taken a wrong turn somewhere - are there multiple (and
>| non-Microsoft) scanning engines involved in MSE?
>
> NO.
>
> The engine is from the purchase of RAV and was the basis of Live OneCare and is successor
> MSE.

Nope. Remove the "and". OneCare and MSE use different anti-virus engines.

Sybari Antigen --.--> Forefront
'--> MSE (via Forefront Client Security)
GeCAD RAV -----> OneCare

Microsoft acquired Sybari Software Inc, a Romanian firm with NY offices, in
June 2005. With the acquisition, Microsoft acquired the Antigen line of
security products which got renamed to the Forefront product line and became
the basis for Microsoft's family of enterprise-level security products.

See: http://www.microsoft.com/presspass/press/2005/feb05/02-08SybariPR.mspx
http://en.wikipedia.org/wiki/Microsoft_Security_Essentials

Microsoft purchased the Reliable AntiVirus (RAV) product from GeCAD, another
Romanian firm (Bucharest) but which continues to exist as its own company,
in June 2003. Users had to wait another 2 years before RAV showed up in the
summer of 2005 in a beta version of OneCare.

See: http://www.microsoft.com/presspass/press/2003/jun03/06-10gecadpr.mspx
http://en.wikipedia.org/wiki/Onecare

Both were acquisitions of or purchases from Romanian companies. I didn't
find out how much Microsoft paid to acquire Sybari and what they paid to buy
the RAV product. Antigen was a suite of enterprise-level security solutions
that became the Forefront family line with its Forefront Client Security
desktop agent going into MSE. RAV was a end-user security solution and went
into OneCare (and looks to have died there).
From: "FromTheRafters" erratic on 14 Mar 2010 20:16
"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:%23$TEEs8wKHA.5936(a)TK2MSFTNGP04.phx.gbl...
> From: "FromTheRafters" <erratic @nomail.afraid.org>
>
> | "VanguardLH" <V(a)nguard.LH> wrote in message
> | news:hnho5q$l19$1(a)news.albasani.net...
>>> FromTheRafters wrote:
>
>>>> VanguardLH wrote ...
>
>>>>> To clarify, the anti-virus engine used in MSE is different than
>>>>> the
>>>>> one
>>>>> that was used in OneCare. That is, you aren't stuck with the same
>>>>> bad
>>>>> AV that was in OneCare.
>
>>>> Which engines are in MSE now? All I can find is references to
>>>> Forefront
>>>> and earlier.
>
>>> Yep, Forefront in MSE.
>
> | I read in some blurb about MSE that the scanning system is based on
> the
> | same one in Forefront. Then I read some blurb about Forefront's
> scanning
> | being based on the AntiGen system, then found this:
>
> | =====================
> | Q. What antivirus scan engines are included with Antigen?
> | A. Antigen products support multiple scan engines from
> industry-leading
> | vendors. Below is a chart of what scan engines are available with
> each
> | product.
> | Microsoft Antigen for Exchange
>
> | Microsoft, CA InoculateIT, CA Vet, Norman, Sophos
> | =====================
>
> | I musta taken a wrong turn somewhere - are there multiple (and
> | non-Microsoft) scanning engines involved in MSE?
>
> NO.
>
> The engine is from the purchase of RAV and was the basis of Live
> OneCare and is successor
> MSE.

Well then, lets hope it can live up to mediocre. :o)


From: Peter Foldes on 14 Mar 2010 20:30
http://www.ravantivirus.com/pages/

--
Peter

Please Reply to Newsgroup for the benefit of others
Requests for assistance by email can not and will not be acknowledged.

"FromTheRafters" <erratic @nomail.afraid.org> wrote in message
news:%23$fIAT9wKHA.3304(a)TK2MSFTNGP06.phx.gbl...
> "David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
> news:%23$TEEs8wKHA.5936(a)TK2MSFTNGP04.phx.gbl...
>> From: "FromTheRafters" <erratic @nomail.afraid.org>
>>
>> | "VanguardLH" <V(a)nguard.LH> wrote in message
>> | news:hnho5q$l19$1(a)news.albasani.net...
>>>> FromTheRafters wrote:
>>
>>>>> VanguardLH wrote ...
>>
>>>>>> To clarify, the anti-virus engine used in MSE is different than the
>>>>>> one
>>>>>> that was used in OneCare. That is, you aren't stuck with the same
>>>>>> bad
>>>>>> AV that was in OneCare.
>>
>>>>> Which engines are in MSE now? All I can find is references to
>>>>> Forefront
>>>>> and earlier.
>>
>>>> Yep, Forefront in MSE.
>>
>> | I read in some blurb about MSE that the scanning system is based on the
>> | same one in Forefront. Then I read some blurb about Forefront's scanning
>> | being based on the AntiGen system, then found this:
>>
>> | =====================
>> | Q. What antivirus scan engines are included with Antigen?
>> | A. Antigen products support multiple scan engines from industry-leading
>> | vendors. Below is a chart of what scan engines are available with each
>> | product.
>> | Microsoft Antigen for Exchange
>>
>> | Microsoft, CA InoculateIT, CA Vet, Norman, Sophos
>> | =====================
>>
>> | I musta taken a wrong turn somewhere - are there multiple (and
>> | non-Microsoft) scanning engines involved in MSE?
>>
>> NO.
>>
>> The engine is from the purchase of RAV and was the basis of Live OneCare and is
>> successor
>> MSE.
>
> Well then, lets hope it can live up to mediocre. :o)
>

From: David H. Lipman on 14 Mar 2010 21:04
From: "VanguardLH" <V(a)nguard.LH>


| Nope. Remove the "and". OneCare and MSE use different anti-virus engines.

| Sybari Antigen --.--> Forefront
| '--> MSE (via Forefront Client Security)
| GeCAD RAV -----> OneCare

| Microsoft acquired Sybari Software Inc, a Romanian firm with NY offices, in
| June 2005. With the acquisition, Microsoft acquired the Antigen line of
| security products which got renamed to the Forefront product line and became
| the basis for Microsoft's family of enterprise-level security products.

See:: http://www.microsoft.com/presspass/press/2005/feb05/02-08SybariPR.mspx
| http://en.wikipedia.org/wiki/Microsoft_Security_Essentials

| Microsoft purchased the Reliable AntiVirus (RAV) product from GeCAD, another
| Romanian firm (Bucharest) but which continues to exist as its own company,
| in June 2003. Users had to wait another 2 years before RAV showed up in the
| summer of 2005 in a beta version of OneCare.

See:: http://www.microsoft.com/presspass/press/2003/jun03/06-10gecadpr.mspx
| http://en.wikipedia.org/wiki/Onecare

| Both were acquisitions of or purchases from Romanian companies. I didn't
| find out how much Microsoft paid to acquire Sybari and what they paid to buy
| the RAV product. Antigen was a suite of enterprise-level security solutions
| that became the Forefront family line with its Forefront Client Security
| desktop agent going into MSE. RAV was a end-user security solution and went
| into OneCare (and looks to have died there).

I'm not convinced. As far as I know there is only ONE Microsoft AV engine and ONE set of
signatures and that was OneCare and is now MSE. Perhaps something else is the engine for
MS MRT.

I have a couple of contacts to ping. I will look into this.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp


From: David H. Lipman on 16 Mar 2010 16:40
From: "VanguardLH" <V(a)nguard.LH>

UPDATE:

The same engine is used in ALL; Malicious Software Removal Tool, OneCare and Security
Essentials.
However, The signature sets are not necessarily the same.

I was told "...it's not exactly the GeCAD RAV engine any longer - the code has evolved..."
:-)

This is a DEFINITIVE answer.


--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp


First  |  Prev  |  Next  |  Last
Pages: 1 2 3 4
Prev: wordpad unable to open rtf file - security warning - win xp sp3 64 bit
Next: Screen Upside Down Virus