What's the difference between the two?
Do I need both?

Umm, one is for spyware, the other for viruses. They are not the same thing. Maybe you need to be more specific.

Anti-Spyware

Anti-Malware

Yes you do need both Anti-Spyware along with Anti-Malware software programs to keep your computer running up to speed. - Security tips here

AntiVirus go after viruses, trojans, worms, etc.

AntiSpyware target spyware and adware.

Most AVs these days target spyware/adware to some extent, but for the most part, both an AV and AS are needed.

Since the introduction of suites, the security software maker's have pushed us to these "all-in-ones" to monopolize our money. The push is evolving into anti-malware tools that do it all. There is some sense to this, since the "act" of scanning files, memory, and disks is the pretty much the same, whether the target be virus, worm, Trojan, keylogger, or whatever type of malware. So from a "business sense" - it costs of lost less to build one scanner and market it for two uses (viruses and spyware). But from a security standpoint, using a single scanner introduces several "single points of failure" - I copy from one of my stickies:



Do not forget that none of the security software makers want to rid the world of malware. That will put them out of business. Do NOT trust a single one.

This was a hint that we need to show users the difference and why they need both but only have one AV running.

I couldn't tell you how many OP's thought their Anti-Spyware program was their Anti-Virus program,

It would be nice if we had a post to point the OP's to.

Just a thought.

Greetings LD

It seems odd that you of all folks would ask that question. Seeing the number of years you have been at the forefront of removing and educating others in the removal of malicious code from computers.

I am thinking you are not looking for an academic answer from us (the group here at WTT). , A few google searches would bring you a wealth of answers and probly better written than anything I could create. I might even bump into one you may have written.
The average user doesnt know the difference in malwares and the software either. All they know is that the computer isnt doing what they want when they want it to.

Perhaps you are after what we (the group here at WTT) thinks is necessary for the best protection of a computer? You know the answer to that one as well. The best protection is the user themselves.

The vast majority of malicious code is coming from the catagory of "spyware" and its purpose for being has blurred overtime, but still is primarily about financial gain. Its about engineering you into giving up money or valuable information. Either voluntarily or working by stealth. Spyware, a subset of malware, is about financial gain.

Virus by its nature is about distruction, compromise of networks and loss of data, corruption of operating systems. Usualy done for bragging rights, revenge, or retribution of some percieved wrong. (social or economic) Not about financial gain but distruction and noteriety. Virus, a subset of malware, is about distruction and crippling functions. Usually not about financial gain.

LD you know more about means of infections than I will ever hope to know. You have seen Malware (virus and spyware) evolve into rootkits, zombies, identity stealers, social engineering vectors. They at one time used different means to infect a computer. You needed several different tools to deal with it. This still has not changed.

But now they (virus/spyware) are using simular means of infection and have crossed over into each others behavior and effects. Both are being created for financial gain and distruction at the sametime. They represent a blended threat now. Not quite virus or spyware. The malware has become more complicated in eluding detection, persistance, and removal. New threats are arriving quicker and Anti-virus software alone, cant get in front of malware to be effective as a sole protector.

Although the Anti-virus software have made great strides in addressing the "spyware" threat by creating suites, they are not enough by themselves yet. Thus the need of separate anti-spyware software for now. Plus specialized tools and user education.

So I trust I have answered your question LD with enough. I would be more than happy to elaborate more if you wish

Regards

Kaz

So much for composing this before you got your explanation in LD, If you like I can remove this or just pretend you had not posted yet.


This post has been edited by kazzoo: Mar 31 2009, 09:44 PM

What? You mean you think there should be a post we can point to to educate our users on how to protect themselves - you mean like a post that teaches Practicing Safe Computing? That would be nice. I am still waiting to see the list of approved items we can recommend. Can we expect to see that soon?

I have one also pinned in Tech Tips and in my signature called Security tips.

It might be a good idea to post the Preventing Malware - Tools and Practices for Safe Computing, that Doug and I worked on with everyones help, Topic in the Malware Removal Forum or another forum as well.

Those are ALL very good prevention topics we have.

Regular users sometimes don't understand the difference between the two types of programs needed.
Anti-Virus / Anti-Spyware.

I was looking for something simple to point OP's to like the below.
IMO it could be a little better written for the Spyware part, adding Anti-Spyware programs like s/he did in the Virus part.

http://solvetheweb.wordpress.com/2008/07/0...virus-software/



Here's another one:
http://searchenterprisedesktop.techtarget....1179143,00.html

Hi LDTate,

Would you like me to come up with a tutorial explaining the difference?

Sure. Give it a go

Thanks LDtate, I will get to work tonight, and should have a rough draft for you by tomorrow night.

After a small amount of reseach here is a post you may approve of to point the OP to.
Understand the Difference - Microsoft Security

Then I got the extreme to the above - No difference and again here

My last quote to post: from here Posts # 1 and 2