Microsoft Recommends Third-Party Antivirus - Goodbye MSE

Microsoft's Shift in Antivirus Recommendations

Initially a leading security solution, Microsoft Security Essentials (also known as Windows Defender in Windows 8) has experienced a decline in performance over time, as reflected in independent testing. Despite these results, Microsoft previously maintained that the testing methodologies lacked significance.

Currently, Microsoft is now suggesting that Windows users consider employing a third-party antivirus program for their protection.

Contradictory Messaging from Microsoft

This guidance emerged from a recent interview conducted with Microsoft representatives. Interestingly, the company’s official website continues to promote Microsoft Security Essentials as providing “comprehensive malware protection,” with no indication of a change in recommendation.

This discrepancy highlights a potential communication issue between Microsoft and its user base.

Clarification and Ongoing Concerns

Update: Microsoft has since issued a statement affirming their confidence in their antimalware products, stating they “strongly recommend them to our customers, to our friends, and to our families.”

However, this statement does not directly respond to the comments made by Holly Stewart, nor does it address the documented history of declining test scores for Microsoft Security Essentials.

Considering the consistently lower scores achieved by MSE, coupled with anecdotal reports of real-world failures and Microsoft’s inconsistent messaging, a firm recommendation for MSE remains difficult to justify.

Evolving Performance of Windows Defender

Update 2: Since the original publication of this article in 2013, approximately a year and a half ago, Windows Defender’s performance in independent tests has shown some improvement.

While it still generally scores below most other antivirus applications, its performance is no longer as significantly low as it once was.

For the most current assessment of our antivirus recommendations, please refer to the following link.

• For a more up-to-date view of our current antivirus recommendations, click here.

The Evolution of Microsoft's Antivirus Offering

Initially, Microsoft Security Essentials (MSE) achieved significant recognition within the antivirus landscape. In 2009, AV-Comparatives.org lauded its performance, designating it as the leading free antivirus solution available.

The software quickly gained traction among Windows enthusiasts due to its compelling features. MSE consistently demonstrated strong malware detection rates, operated with exceptional speed, and was offered at no cost to users.

Unlike competitors such as AVG and avast!, MSE distinguished itself by avoiding persistent prompts for upgrades to paid versions. This approach provided a refreshing user experience, complemented by a streamlined interface and rapid operational speed.

Independent testing consistently positioned MSE as a top performer, solidifying its reputation as the premier free antivirus option. For several years, it was our recommended choice for users seeking complimentary protection.

With the release of Windows 8, MSE was integrated directly into the operating system and rebranded as Windows Defender. This integration represented a substantial enhancement to Windows security.

The inclusion of a default antivirus program aimed to ensure that all Windows users benefited from built-in protection, potentially eliminating the need to actively search for and install third-party security software.

Key Advantages of the Transition

• Integrated Protection: Windows Defender provides immediate security upon system installation.
• No Additional Cost: Users receive robust antivirus coverage without incurring extra expenses.
• Streamlined Experience: Eliminates the need to manage separate antivirus applications.

This shift signified a commitment from Microsoft to prioritize security for its user base, offering a seamless and effective defense against evolving threats.

Declining Performance of Microsoft Security Essentials

In recent years, Microsoft Security Essentials has experienced a decline in its performance as measured by independent malware detection scoring tests. AV-TEST’s comprehensive review in 2011 positioned Microsoft Security Essentials at the lowest rank for protection among all evaluated products.

Further demonstrating this trend, by October 2012, the software’s scores had fallen to the point where it no longer met the requirements for AV-TEST certification. A particularly low score of zero for protection was recorded by AV-TEST in June 2013, representing the absolute minimum possible rating.

Consistent underperformance was also noted in evaluations conducted by Dennis Technology Labs, where Microsoft Security Essentials repeatedly finished in last place.

AV-TEST Results: July & August 2013

The following data illustrates Microsoft Security Essentials’ position at the bottom of AV-TEST’s charts for both July and August of 2013. In terms of malware protection capabilities, it consistently scored lower than all other antivirus programs subjected to the same testing procedures.

Microsoft responded to these criticisms by asserting that the testing methodologies did not accurately reflect real-world scenarios. The company maintained its focus was on preventing genuine, prevalent threats, rather than prioritizing the detection of exceedingly rare malware variants.

A key argument presented by Microsoft centered on the importance of minimizing false positives. They emphasized that practical user experiences held greater significance than the outcomes of standardized tests.

Initially, many, including those at How-To Geek, accepted Microsoft’s explanation. Personal experiences with Microsoft Security Essentials had been positive, with years of use on personal computers yielding no malware infections.

Subsequent scans using alternative antivirus solutions confirmed the absence of threats. The software’s lightweight nature, minimal intrusiveness, and lack of aggressive upselling tactics were highly appreciated. The concept of streamlined security for Windows 8 users, eliminating unnecessary complexity, was also appealing.

Microsoft's Shift in Antivirus Strategy

The official website for Microsoft Security Essentials (MSE) advertises robust malware defense and acclaimed security features. This messaging might lead users to assume Microsoft is dedicated to developing a highly effective antivirus solution.

However, Microsoft now characterizes MSE as offering only fundamental protection, cautioning against reliance on it as a primary security measure.

A "Baseline" Defense

In a recent discussion with Dennis Protection Labs, Holly Stewart, Senior Program Manager at the Microsoft Malware Protection Center, revealed that MSE was intentionally designed to function as a "baseline" antivirus.

Stewart explained that MSE is intended to consistently rank lower in independent antivirus evaluations. Microsoft views it as an initial layer of defense and actively encourages Windows users to employ a third-party antivirus program instead.

Focus on Collaborative Security

According to Stewart, a significant shift in Microsoft’s approach occurred around 2011. The company recognized a broader responsibility: to safeguard all Microsoft customers.

This realization led to a change in strategy where Microsoft began sharing threat intelligence with other antivirus vendors, assisting them in enhancing their products.

Previously, resources were allocated to anticipating test outcomes. Now, those resources are directed towards identifying and analyzing emerging threats, and disseminating this information to partner antivirus companies.

Accepting Lower Rankings

Stewart stated, "We are providing all of that data and information to our partners so they can do at least as well as we are."

She continued, explaining that the logical consequence of this approach is a consistent position at the bottom of antivirus test rankings. Microsoft considers this a positive outcome if their collaborative efforts are successful.

Conflicting Messaging

Despite acknowledging its lower ranking, Stewart maintains that "baseline does not equal bad," asserting that MSE still provides a quality antivirus experience.

However, Microsoft’s simultaneous recommendation that users avoid MSE creates a contradiction. While better than having no protection at all, MSE isn’t a solution we should actively suggest.

A disconnect exists between Microsoft informing antivirus testing organizations that they do not recommend MSE for typical users, and simultaneously presenting MSE as offering "comprehensive malware protection" on their website. Consistency in messaging is crucial.

For Tech-Savvy Users, Microsoft Security Essentials May Suffice

Individuals with a strong technical understanding, much like ourselves, will likely find Microsoft Security Essentials (MSE) and Windows Defender to be adequately functional. Employing sound security protocols and possessing relevant knowledge allows for effective management with this streamlined solution.

However, typical Windows users often do not consistently adhere to best security practices. Consequently, a robust antivirus program with proven detection capabilities – as now advised by Microsoft – is highly recommended.

The Limitations of MSE for Non-Technical Users

While possessing technical expertise might lead one to believe MSE is a viable option, it’s generally inadvisable to suggest it to less experienced individuals or deploy it on the devices of family members who aren't tech-focused.

Despite its appealing simplicity and minimal system impact – resulting in a faster computing experience – the fundamental aspect of any antivirus, its detection engine, appears to be where Microsoft is scaling back investment.

The lightweight design and user-friendly interface of MSE are undeniably attractive features. Nevertheless, prioritizing a strong detection rate is paramount for comprehensive protection.

Key Considerations

• Technical Proficiency: MSE is best suited for users comfortable with security settings.
• Detection Rates: Independent testing consistently demonstrates the limitations of MSE’s detection capabilities.
• User Base: Average users benefit more from a full-featured antivirus solution.

Choosing the Right Antivirus Solution

Related: 4 Places To Find Up-To-Date Antivirus Test Results Online

Determining which antivirus product provides effective security requires careful consideration. Consulting independent antivirus test websites is a crucial step in evaluating the performance of potential options. Fortunately, extensive research has already been conducted for your convenience.

A comprehensive list of recommended antivirus solutions can be found in our recent publication. However, when assessing the leading antivirus software currently available, Kaspersky consistently achieves high rankings from both AV-Test and AV-Comparatives. Our own testing has also yielded positive outcomes with this software.

While not a complimentary offering, the majority of free antivirus programs often include unwanted bundled software. Should a free solution be necessary and Microsoft Security Essentials’ protection proves insufficient, Avira Free Antivirus presents a viable alternative that is relatively unobtrusive.