By: George Royal
Antivirus software refers to computer programs or tools that are used for identifying, blocking, and removing malicious applications such as computer viruses and malwares from the system. They have become essential tools for any computer user in today’s world of constant threat from virus attacks, spywares, system hijackers, etc.
An antivirus application performs two basic functions. The first is to scan all files, according to user preference, and identify the virus based on matching definitions in its database. This is known as virus dictionary or database approach of identifying viruses. Secondly, if run in real time, it tries to identify and suspicious activities occurring in the system, which may be triggered by other computer programs in the operating system. This is known as suspicious behavior approach. These two functions are the basis on which most antivirus software programs are built.
The Database Approach:
When the antivirus identifies a virus that matches any code or definition in its database, it will alert the user, and the user has the option of repairing, quarantining, deleting or analyzing the infected file. If the virus cannot be removed from the infected file, it is usually set to quarantine. However, users also have the option of immediately deleting the file thereby eliminating any further threats, or before the virus can execute itself. The infected file can also be sent to the software company for analysis and inclusion in the database, or if the antivirus has the feature, the user can analyze the infected file by self.
Since new viruses are created everyday, the virus database of the antivirus has to be updated continually. Almost all database updates are free and they can be scheduled or done manually.
Suspicious Behavior Approach:
There is no attempt to identify known viruses here like in the dictionary approach. Every activity and behavior in the system is monitored here by the antivirus. Therefore, this approach may protect from new viruses which has not yet been identified out of suspicion. However, this approach has mostly been abandoned by many antivirus companies because of its tendency to sound too many false positives. And today, there are so many non-malicious programs which can modify other executable files in disregard to the false positive issue. So this technique has become almost obsolete.
Popular Antivirus Software:
Norton Antivirus: One of the most well-known antivirus software, Norton automatically detects and removes viruses, rids computer of unwanted spyware, and scans email and IM attachments for threats.
McAfee VirusScan: The antivirus detects, blocks, and removes viruses and spyware, and protects irreplaceable documents such as digital photos, family movies, and financial spreadsheets, identity theft and slower PC performance.
PC-cillin Internet Security: From Trend Micro, it is an award-winning antivirus security and a personal firewall. Protects against viruses, worms, Trojans, and hackers, detects and removes spyware and blocks spam. Also protects your wireless network with Wi-Fi Intrusion Detection.
Panda Titanium: It uses TruPrevent Technologies, offering a double layer of protection against unknown viruses and intruders. It also protects system from hackers, phishing and other online fraud.
