What is an Anti-
Virus and how does it works ?
Anti-Viruses are softwares that are designed to identify and delete any viruses that could be seen as a threat to a system. But there's more, Anti-Viruses are here to PREVENT those threats. That means, they are used in order to IDENTIFY that threat in REAL-TIME in order to block it and eliminate it BEFORE it does any harm. That's the core feature of an Anti-Virus, which is called "real-time protection". Real-time protections means that the Anti-Virus is always on the look-out for eventual threats that could affect the system. That's why Anti-Viruses are the main protection barrier on a system (after the user, of course). Without real-time protection, your computer would most likely get infected everytime you go on a suspicious website, everytime you download an infected torrent, everytime you open a suspicious attachment file in an email, etc. Compare it to a walk outside in the winter during a snowstorm, naked. What do you have to stop all these cold snowflakes to hit your sensible body ? Nothing. Now, imagine your suit, your coat, your gloves, etc. as your Anti-Virus who protect you in real-time. Every snowflakes hits your clothes and melt instantly. That's what you could see as the real-time protection.
Also, Anti-Viruses offers more then one feature. They offer many security and protection features that can be enabled and disabled whenever you want. They don't just offer a real-time protection. They also offer on-demand scanning, firewalls, secured web-browsers, etc. In other words, you just don't use an Anti-Virus, you use a "full protection package" that offers many protections and security features for your OS. And these features, like the Anti-Virus, are not just .exe that you execute on the go when you need them, no. The Anti-Virus is installed on your system and install itself in locations that will make it hard for a virus to remove it. It takes it's grip to your system, it covers it fully and it places itself in the first line of defence in order to protect it. Also, most of the features Anti-Viruses offers are independants from each other. If a feature of your Anti-Virus fails, the whole Anti-Virus will not stop working, only that feature, and you can repair it to make it back up and running. Also, most Anti-Viruses offer protection for their own features. Avast! for exemple, will send you a warning if one of it's feature receives the order to be turned off or to stop working, and it will ask you if you're aware of the situation or not.
Features
- Real-time protection;
- Full installation on the system to integrate it;
- "Full protection package" (security suite), which means, the Anti-Virus offers many other features then real-time protection;
- Constantly updated;
- Most Anti-Viruses are now connected to a database in the cloud with informations about all new viruses and malwares in order to keep the Anti-Virus up-to-date;
- Supported for all OS versions (in Windows at least);
Anti-Viruses
Here's a list of the most popular / common Anti-Viruses. I suggest you click on their name to visit their official webpage and read more about each of them, and you'll understand what I mean what I talk about "real-time protection", "full security protection package", "multiple features" and so on.
You notice how all these Anti-Viruses promote "real-time protection" as their main and their best feature ? Because it's what an Anti-Virus is all about, to protect you in real-time, tracking each of your action and be ready to react as soon as a threat is identified. You'll also notice the accent that some company but on their Anti-Viruses on their multiple features and purposes too, because they all aim to create the perfect protection solution, that will be composed of everything a system needs to be safe from everything.
What is an
Anti-Malware and how does it works ?
An Anti-Malware is most of the time a tool or a software that is used to detect and delete one or more types of malwares. These tools and softwares are specialized in the detection and removal of precise type of malwares (hard-coded) and in methods (hard-coded) to delete them from an OS. They don't offer any other features then detecting and deleting a threat. And in order to work, the threat must be either running or must be known by the Anti-Malware, which means, in it's database (that can be "local" or acquired through a synchronisation on a first execution of the tool or software). How does it proceed ? Well here's the thing. Once you download an Anti-Malware (and install it if needed, but it's rare), it won't do anything. It will wait till you execute it and command it to SEARCH for the threats that are present on your computer in order to delete them. In order terms, an Anti-Malware is most commonly an on-demand scanner that is waiting for the order to ... scan and delete all threats it has been designed to take care of. From that, you can understand that an Anti-Malware doesn't offer any real-time protection feature, as it's actually waiting for your input in order to start working and it's job. An Anti-Malware is meant to be used to remove malwares that you know that are present on your OS, or that you assume that they are on your OS. They are not meant to be fully installed on your system and place themself in the first line of defence. No, they are meant to "penetrate" in your system, find the threat and remove the threat, that's it. Once the job is done, it stops. To sum it up, Anti-Malwares are designed to provide an additional protection to Anti-Viruses, not to take their place and their role which is the main layer of protection of an OS.
Features
- Most of the time, only offer one feature (scan and deletion of malwares);
- Aimed at one particuliar type of malware or family of malware;
- Not updated everyday, every month, etc. (some Anti-Malwares still widely used are discontinued);
- No connection to an external database that keeps track of all the new threats identified;
- Most of the Anti-Malwares are only .exe to be used on the go, no installation needed;
- The PRO version of an Anti-Malware is still not a real Anti-Virus
Source :hxxp://hackforums.net/showthread.php?tid=3995478
- Replace the xx with tt if you want to check the thread on HF for more information.