A century old adage: The more the merrier.
In general, does this adage hold true in regards to the number of anti-virus software you should have on your PC?
Are there any limits before it actually has the opposite effect?
Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.Sign up to join this community
Most anti-virus vendors advise not to use their products together with those from others. That's not (just) because they fear competition. Live virus-scanners scan files on access. When they notice that a process accesses a file, they try to access it before the process to scan it. They even try to do that when that process is another virus-scanner.
When you have two live-scanners on a system, both will try to be the first to open a file. When virus scanner A detects that scanner B opens a file, A will try to access it first to protect B from any viruses in it. B will register this attempt to read the file, and in turn will try to scan it before A does. The result is that both virus scanners are caught in an infinite loop.
This problem, however, only applies to live-scanners. When you use on-demand scanners which don't monitor file access and only scan a filesystem when they are prompted to do so, you can use multiple of them one after another.
I would advise against it.
In order to perform its job, an antivirus software has to root itself very deeply inside the system, hooking everything, installing drivers and you-name-it. In order to do so, it ends up using techniques similar to malware authors, which will be flagged as highly suspicious by other products. Even if it's not the case, it is likely that the two programs will hinder each other and prevent at least one of them from functioning properly.
And as far as signatures go, I'm not sure that a second engine will make much of a difference.
If you're really serious about protecting your computer, don't expect magic bullets to do the job for you. You'll probably be better off changing your browsing habits (how about trading those Flash/Java plugins for NoScript?).
In theory, two antiviruses are better than one, in that there may be viruses in the database of one that aren't in the database of the other, or one may use scanning techniques that the other doesn't. In practice, however, because of the way they work, antivirus programs tend to detect each other as viruses.
To be honest this question is a bit like asking 'Do two condoms give me better protection than one?'.
Ostensibly yes, but the practicality of there being two of each make it difficult to operate normally and there are issues which this sort of protection is not able to safeguard you from (e.g. social engineering, lack of encryption, shifty/outdated plugins etc.).
As pointed out, it's more important to review browsing habits and use common safety precautions.
Personally, I've turned off all plugins and simply enable them if I feel comfortable with the site I'm visiting.
I also have a virtual machine installed for when I want to test something I'm not certain is perfectly safe to run/do.
When talking about securing a network or a big organization that really needs security I usually advice on that. Using two firewalls from different vendors or two AV from different vendors is a good practice since a vendor may have some bugs/vulnerabilities that the other vendor doesn't have, so when you detect a threat for one appliance you can disable it temporary meanwhile fixing it and you can go with the other one.
But, for a personal PC I can't see any advantages, the threats a normal user faces (malware, phising, viruses... ) are usually spotted by most AVs.
In this case I would say one is enough.
Short answer: No.
Instead of more anti-virus software you should use more common sense :)
Besides that, the use of more than one anti-virus software is causing conflicts between the programs, in most cases. Also I doubt that anti-virus programs offer any benefit at all. In my experience I haven't seen one case where they have saved a windows machine from getting infected.
No, two anti-viruses aren't better, But it depends on what you mean by BETTER... more than one scanner will slow your system down, by the simple way that real-time scanners work.
First, the scanners are sitting in memory waiting for you to access a file, from downloading or double-clicking an icon, to simply opening the file viewer to look at folders on your computer, this triggers the real-time scanner of your anti-virus to start working.
When each real-time scanner detects that a file is to be accessed, (downloaded, listed or actually opened or read) the scanner that sees it first, LOCKS the file, and scans it, while the other scanner madly tries to hit it AT THE SAME TIME (slowing down your system). Once the first scanner has finished, the second leaps in to lock and scan it, and THEN, if neither detected problems, you get to see it/open it.
Possibly more secure. Slower, for sure. Now, what I recommend is a good Virus scanner, like AVG, and a spyware detector/preventer like Spybot. Good dual coverage, gained by looking at the problem from different perspectives, one from a file POV, and the other from a startup POV.
It is not best process to have more than one active AV program. As others have mentioned, this may produce false-positive readings from both AV programs as they see another process is accessing a file. This is of course without mentioning the drag on system resources from running two at the same time.
Thank you for your interest in this question.
Because it has attracted low-quality or spam answers that had to be removed, posting an answer now requires 10 reputation on this site (the association bonus does not count).
Would you like to answer one of these unanswered questions instead?