virus and antivirus behind the scene

Nowadays, we have found too many viruses spreads on internet, also there many NEW anti-virus over there, sometime i have a little bit question about it. Why they are exists, i mean a virus vs antivirus.

After searching to internet, I just  found a good articles that was explained about my question. It’s about Virus and Antivirus Behind The Scene , you can read it here as i just copied from a cyber and technology reference information .

Most of us may have a problem from Computer Viruses. They will never end, as we will see there are alot of new viruses every day. But we don’t have to worry about that since there are many Antiviruses we can use to prevent them.

But, did you know, why the virus existence will never end in the digital world?, Why the virus makers never give up to generate a new virus again and again?, what do they want?. Of course that questions will need a logic answer.

I wrote this article just because i have detected a possibility of conspiracy caused of symbiosis which was have a mutually beneficial betweenthe virus makers and the antivirus makers, so that the virus and antivirus industries still exists untill now.

Conspiracy

In an example case, if there is a new virus launched then some of the antivirus vendors will quickly recognize and clean the computer from this new virus while the other antivirus vendor so confused and slow to recognize this new virus.

From the above cases, may be one of the antivirus vendor’s amployees make a contact/cooperation with the virus maker, and they give an order to create a new virus with the criteria that have been set before it, in the sense of order of creating a virus. So that, those antivirus vendor will known as the antivirus vendors which can quickly detect and clean the ‘virus order’.

Thought appear above because I observed that the virus maker is rarely seems consistent with the results of his work, a scene in the beginning but disappeared some time casually.

The conspiracy’s theory above is just my observation only and untill now this theory was never proven.

Commercialization antivirus

In other cases, When we got a virus in our Computer as we know that we have an antivirus over there, but the antivirus cannot recognize the new virus in our Computer even to running the antivirus. We will confused to face to this situation.

From the illustration above, we need to know why our antivirus which was installed in computer unable to recognize even to clean the new virus?.

In fact the problem is that antivirus is updated regularly will be more powerful in providing protection than antivirus which is never been updated. That’s why we need to update the antivirus regularly.

For this one I got the idea from one of the forum on the internet to update the antivirus must be regularly performed and why antivirus vendor can survive / thrive.

Generally, the commercial antivirus is currently working with ‘blacklist’ method, as like as the following explanation steps :

1. New virus has been founded.

2. The virus signature will be identified and will be stored to the ‘blacklist’ database.

3. The Antivirus will scanning any files in the computer and will compare it to the ‘blacklist’ database. If the result is match, then the antivirus will take any action of that files.

Such was the approach that is used by antivirus vendors, but there are 2 major problems in project using the approach as it:

1. We will have a dependence to the antivirus vendor continuously, to update the ‘blacklist’ database. We will still have a possibility to be infected with a new virus which where the antivirus vendor still not find the virus signature to protect our computer. We will never have a fully protection from the new virus as the virus signature will only available to create untill someone got infected from that new virus.

2. Due to thousands of new viruses spread every year then ‘blacklist’ database will growing. This means that antivirus software will consume more computer resources (cpu time, hard drive space) which will affect to the performance of computer. The increase in cpu speed, memory and hard drive space will alleviate the problem (of origin do not try to run the latest version of Norton on the old computer). The fact that if we really have to runantivirus software, the computer will be more slow.

The biggest problem is that the user will always be tied to the antivirus software because it must continue to renew the existing ‘blacklist’ database. That’s why the antivirus vendors can continue to survive and develop.

The point of the ‘blacklist’ method is to say “No” to something that should not have in our computer. However, there is another method which is called the ‘greenlist’ method, will keep something which should have in our computer.

If the ‘Greenlist’ method applied by antivirus vendor, certainly the end-user will have more benefit rather than using the ‘blacklist’ method. Which is mean, the end-user will not need to update or tied toantivirus vendor, and it will makes the antivirus vendor cannot survive their existence in this digital world.