Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
    Digg this story   Add to del.icio.us  
Microsoft OneCare deleted Outlook e-mails
Published: 2007-03-12

Recent reports suggest Microsoft's OneCare anti-virus offering suffered a bug that could have caused it to delete or quarantine all e-mail in a user's Outlook inbox, in certain cases when it finds a virus. Details have appeared in Microsoft's forums. A short brief by Virus Bulletin suggests that the problem was confirmed and then fixed in version 1.0, but reappeared in version 1.5 of OneCare. There are workarounds for users, such as preventing OneCare from scanning Outlook's .PST file.

A note by the Windows OneCare forum moderater on Microsoft's site confirmed the issue, noting that, "Everyone directly involved realizes the handling of the .pst files was inadaquate, as does the OneCare Development Team now that they recognize the issue." Users have been pointed to Microsoft Support for technical assistance, and it is suggested that Windows users should also backup their Outlook .PST files regularly. Microsoft appears to have now fixed the issue, but it is not clear how many users were affected by the bug.

The reports come after Microsoft's OneCare anti-virus came in dead last in an independent survey (.PDF) by Austria-based AV Comparatives.

In a separate evaluation, the Windows OneCare anti-virus product also failed to achieve the VB100 certification by independent evaluator Virus Bulletin (link requires paid subscription).

Finally, there were early reports of Windows OneCare, when coupled with Internet Explorer 7, incorrectly labeling Google's free Gmail mail service as a virus. The error in labeling was quickly resolved in a OneCare signature update, however.

Microsoft's OneCare is the company's offering in the competitive anti-virus market.

Posted by: Kelly Martin
    Digg this story   Add to del.icio.us  
 
Comments Mode:







 

Privacy Statement
Copyright 2009, SecurityFocus