Can a 32-bit antivirus program protect you from 64-bit threats

Salman A

I think that 32-bit programs cannot look inside 64-bit processes. So I am asking this question out of curiosity.

I am using Windows 7 x64. I do not know about the bitness of the antivirus except that it is installed in C:\Program Files (x86).

misha256

It all depends on how the antivirus software works.

32-bit programs might not be able to interoperate directly with running 64-bit processes (other than through the Windows API), but they do still have access to the entire file system including files containing 64-bit code. So technically yes a purely 32-bit antivirus could still do it's job and identify viruses in 64-bit files via traditional file-scanning techniques.

However...

The fact that an application is installed into C:\Program Files (x86) doesn't actually mean it's 32-bit.

  • You can have 64-bit applications running from C:\Program Files (x86)

  • You can have 32-bit applications running from C:\Program Files.

  • Many applications actually contain a mix of 32-bit and 64-bit files but install to only either C:\Program Files (x86) or C:\Program Files. A good example is VMware Workstation. On my 64-bit system, it installs to C:\Program Files (x86)\VMware\VMware Workstation. The files installed to that location are a mix of 32-bit and 64-bit EXE/DLL files, among other random files.

So what's the name and version of the antivirus software you're running? Chances are good that it does have 64-bit components in there and that they are being used on your 64-bit system.

You can easily check what bitness your background antivirus processes are running as by launching Resource Monitor. You just need to make sure the Platform column is showing (right click on any column then click on Select Columns...:

Resource Monitor

Look for your antivirus processes in the list see what bitness they're running as. You might find that the antivirus GUI runs as a 32-bit process, yet the engine itself runs as a 64-bit process. That's pretty common.

Let us know what you discover ;-)

Collected from the Internet

Please contact [email protected] to delete if infringement.

edited at
0

Comments

0 comments
Login to comment

Related

Change jdk path in IntelliJ 13 when compiling from 32 bit program file folder to 64 bit one

How can I tell if I'm running in 64-bit JVM or 32-bit JVM (from within a program)?

Linking 32-bit library to 64-bit program

What does it mean for a program to be 32 or 64 bit?

Can I call a 64bit DLL from a 32bit version of Excel VBA?

Can you run a 32 bit Cygwin application in a 64 bit installation?

Different file hash of shortcut file when shortcut created from 32-bit or 64-bit program

gcc can't build 32bit program in 64bit RHEL6?

How to make a 32-bit program from a 64-bit version?

32bit eclipse and 64bit java program

How can I upgrade from Vista 32-bit to Vista 64-bit?

Unable to run a 32-bit program on 64-bit VM

How can you tell if Windows XP is 64bit or 32bit if you only have the partition/filesystem on a hard drive?

In general, can you use 32-bit drivers on a 64-bit OS?

moving from ubuntu 32 bit to 64 bit

Can I switch from Firefox 32-bit to Firefox 64-bit without losing data?

Can I restore a /Home from a 32 bit 11.10 backup to a new 64 bit 12.04 install

Compiling a c program on a 64 bit machine with a 32 bit binary

Can't boot a 64bit Windows USB from a tablet originally installed with 32-bit OS

Can a normal antivirus protect you from WannaCry or other ransomware?

Running 32bit program on 64bit ubuntu 15.10

Can Kali installed from Kali 64-bit iso run on 32-bit platform?

going from 32 bit to 64 bit in assembly

32-bit program has a dependency on a 64-bit library

Run 32bit program with memory for a 64bit

How can I tell if a program I write is 32 bit or 64 bit?

Can the optimizer elide assignment from 64bit to 32bit integer types?

Use of gs register on a 32 bit program over a 64 bit linux

How can I determine the OS architecture (32-bit or 64-bit) from a file on a disk?