The most difficult thing in an antivirus developer’s work is to teach him how to distinguish viral programs from official applications. They are equally masked, protected from detection, deletion by the user. They do the same thing - collect data, monitor which programs are running. The only difference is that they send information to different addresses.