20 replies to this topic

[LDTate]

What's the difference between the two? Do I need both?

[Digerati]

Umm, one is for spyware, the other for viruses. They are not the same thing. Maybe you need to be more specific.

[tallin]

Anti-Spyware

Anti-Malware

Yes you do need both Anti-Spyware along with Anti-Malware software programs to keep your computer running up to speed. - Security tips here

[SpySentinel]

AntiVirus go after viruses, trojans, worms, etc. AntiSpyware target spyware and adware. Most AVs these days target spyware/adware to some extent, but for the most part, both an AV and AS are needed.

[Digerati]

Since the introduction of suites, the security software maker's have pushed us to these "all-in-ones" to monopolize our money. The push is evolving into anti-malware tools that do it all. There is some sense to this, since the "act" of scanning files, memory, and disks is the pretty much the same, whether the target be virus, worm, Trojan, keylogger, or whatever type of malware. So from a "business sense" - it costs of lost less to build one scanner and market it for two uses (viruses and spyware). But from a security standpoint, using a single scanner introduces several "single points of failure" - I copy from one of my stickies:

having a defense strategy supplied by a single source is not the best strategy. It is like putting all your eggs in one basket. With any business, suite makers look for ways to increase efficiency, cut costs and increase production. Any programmer knows that if you can reuse code, you save time and money. Therefore it only follows these makers will reuse code as much as possible in their suites. This has the potential of introducing potential single points of failure for your entire defense. The user interface, update website, scan scheduler, and files databases are 4 specific examples of possible single points of failure; a fault in one may affect several tools, or the entire suite. If the user interface breaks, for example, all your defenses may be compromised or taken down. In the case of the shared files database, the same group of people is deciding which files both the anti-virus application and the anti-spyware application will scan. Is that a problem? I don't know. But I do know from a security standpoint, an "overlapping" defense, with different sets of eyes watching over things, is much better than a single set.

Do not forget that none of the security software makers want to rid the world of malware. That will put them out of business. Do NOT trust a single one.

[LDTate]

Umm, one is for spyware, the other for viruses. They are not the same thing. Maybe you need to be more specific.

This was a hint that we need to show users the difference and why they need both but only have one AV running.

I couldn't tell you how many OP's thought their Anti-Spyware program was their Anti-Virus program,

It would be nice if we had a post to point the OP's to.

Just a thought.

[kazzoo]

Greetings LD It seems odd that you of all folks would ask that question. Seeing the number of years you have been at the forefront of removing and educating others in the removal of malicious code from computers. I am thinking you are not looking for an academic answer from us (the group here at WTT). , A few google searches would bring you a wealth of answers and probly better written than anything I could create. I might even bump into one you may have written. The average user doesnt know the difference in malwares and the software either. All they know is that the computer isnt doing what they want when they want it to. Perhaps you are after what we (the group here at WTT) thinks is necessary for the best protection of a computer? You know the answer to that one as well. The best protection is the user themselves. The vast majority of malicious code is coming from the catagory of "spyware" and its purpose for being has blurred overtime, but still is primarily about financial gain. Its about engineering you into giving up money or valuable information. Either voluntarily or working by stealth. Spyware, a subset of malware, is about financial gain. Virus by its nature is about distruction, compromise of networks and loss of data, corruption of operating systems. Usualy done for bragging rights, revenge, or retribution of some percieved wrong. (social or economic) Not about financial gain but distruction and noteriety. Virus, a subset of malware, is about distruction and crippling functions. Usually not about financial gain. LD you know more about means of infections than I will ever hope to know. You have seen Malware (virus and spyware) evolve into rootkits, zombies, identity stealers, social engineering vectors. They at one time used different means to infect a computer. You needed several different tools to deal with it. This still has not changed. But now they (virus/spyware) are using simular means of infection and have crossed over into each others behavior and effects. Both are being created for financial gain and distruction at the sametime. They represent a blended threat now. Not quite virus or spyware. The malware has become more complicated in eluding detection, persistance, and removal. New threats are arriving quicker and Anti-virus software alone, cant get in front of malware to be effective as a sole protector. Although the Anti-virus software have made great strides in addressing the "spyware" threat by creating suites, they are not enough by themselves yet. Thus the need of separate anti-spyware software for now. Plus specialized tools and user education. So I trust I have answered your question LD with enough. I would be more than happy to elaborate more if you wish Regards Kaz So much for composing this before you got your explanation in LD, If you like I can remove this or just pretend you had not posted yet.

Edited by kazzoo, 31 March 2009 - 09:44 PM.

[Digerati]

Umm, one is for spyware, the other for viruses. They are not the same thing. Maybe you need to be more specific.

This was a hint that we need to show users the difference and why they need both but only have one AV running.

I couldn't tell you how many OP's thought their Anti-Spyware program was their Anti-Virus program,

It would be nice if we had a post to point the OP's to.

Just a thought.

What? You mean you think there should be a post we can point to to educate our users on how to protect themselves - you mean like a post that teaches Practicing Safe Computing? That would be nice. I am still waiting to see the list of approved items we can recommend. Can we expect to see that soon?

[tallin]

I have one also pinned in Tech Tips and in my signature called Security tips.

[SpySentinel]

It might be a good idea to post the Preventing Malware - Tools and Practices for Safe Computing, that Doug and I worked on with everyones help, Topic in the Malware Removal Forum or another forum as well.

[LDTate]

Those are ALL very good prevention topics we have.

Regular users sometimes don't understand the difference between the two types of programs needed.
Anti-Virus / Anti-Spyware.

I was looking for something simple to point OP's to like the below.
IMO it could be a little better written for the Spyware part, adding Anti-Spyware programs like s/he did in the Virus part.

http://solvetheweb.w...virus-software/

Viruses are malicious pieces of software that once you ‘catch’ them, they infect your computer in various ways. Once you’re infected you need to be disinfected. AntiVirus software does this. So, it’s treating the symptoms of ‘illness’. The software should be sophisticated enough to also root out and remove any Viruses that are sitting on your computer dormant.

Spyware is also malicious but it’s job is to sit on your computer, not affecting your files or functionality, but recording and broadcasting information about your activity or data to others. Your computer isn’t ill because of the presence of such software, but it can be slowed down by all the extra processing it has to do.

Here's another one:
http://searchenterpr...1179143,00.html

> QUESTION POSED ON: 06 April 2006
Could you give me a thorough description of the difference between antivirus software and antispyware/malware software? How do I know if what is infecting my computer is a virus or spyware/malware?


> Generally speaking, anti-virus software can search for and protect against viruses, worms, and Trojans. Anti-spyware is usually a separate piece of software that searches for and protects against pesky pop-ups that install spyware, potentially dangerous cookies, Windows registry entries, etc. Both are needed to adequately protect a Windows system and you'll need to install/run both to search for pests that may be causing you problems.

[SpySentinel]

Hi LDTate, Would you like me to come up with a tutorial explaining the difference?

[LDTate]

Hi LDTate,

Would you like me to come up with a tutorial explaining the difference?

Sure. Give it a go

[SpySentinel]

Sure. Give it a go

Thanks LDtate, I will get to work tonight, and should have a rough draft for you by tomorrow night.

[tallin]

This was a hint that we need to show users the difference and why they need both but only have one AV running.
I couldn't tell you how many OP's thought their Anti-Spyware program was their Anti-Virus program,
It would be nice if we had a post to point the OP's to.
Just a thought.

After a small amount of reseach here is a post you may approve of to point the OP to.
Understand the Difference - Microsoft Security

Then I got the extreme to the above - No difference and again here

My last quote to post:

*Virus is a program to cause damage to computer.

*Trojan is a program which is used to gain access to a computer by installing a program on infected PC to open some backdoor. [Trojans are also known as Backdoors].

*Worm is a program which infects the computers which are connected by some network. Worms slow down the network.

* Spywares are the program which are used to monitor/Log the activity performed on a computer. These are used to spy on some one either for legal or illegal perpose. Example: Keylogger applications.

* Adwares are the programs which delivers ads to your computer (generally in POP-UP's form). They consume your network.

*Malwares are the program with malicious intention. It can be damaging your computer, spying on you or any other malicious task.

from here Posts # 1 and 2