It is basically this. Windows has long since had an integrated firewall and system protection measures, including a file scanner. And back in the 95/98 days, browsers we're happy to let you execute virtually native code that could wreak all sorts of havoc (ActiveX, Flash, etc.)
Nowadays anti viruses are kind of like big intimidating security signs. They make the owner feel a sense of comfort while offering a bare minimum of value in terms of real security.
> They make the owner feel a sense of comfort while offering a bare minimum of value in terms of real security.
If only they provided a bare minimum value, because it's worse than that. Anti-viruses make the system horribly insecure, with their poorly written C/C++ programs running everything needlessly as root and parsing every data within its reach [1]. If that's not enough, they even tamper with browsers and interfere with genuine efforts to improve security [2].
Anti-viruses are scams that decrease security, with the possible exception of ClamAV. The whole concept is bad too. Installing some magic software can never make security threats go away.
