Antivirus software scans the contents of computer hard disk in two ways. If there are known viruses (ie viruses known to exist and antidotes have been found) the software will look for the signature (sign) of viruses - that is a unique string of bytes that identify a virus program virus like a fingerprint - and will throw from your system. Most scanning software does not just look for the early type virus, but also to look for variants of the virus, because the code of the virus signature is usually similar.
In the case of a new virus that has not found its antidote, anti-virus software will run a heuristic program that searches for virus-like activity on your system. When the program saw no symptoms of anything wrong, it will quarantine the troubled program and will display a warning message to you about what will be done by the program (such as changing your Windows registry.) When you and the software felt that the program is a virus, you can send files that have been terkarantina at antivirus software vendor for analysis, determining signature, name it and put it in the catalog, and send her an antidote. The virus is now known viruses.
If the virus does not appear again - this often happens because the virus is not well written to be distributed - the vendor would categorize it as a dormant virus (viral sleep). But some viruses spread like an earthquake: The spread initially always accompanied with the occurrence of aftershocks. Variants of the virus (viral tracing the spread of the virus that emerged after the first) will increase the number of types of viruses that exist.
0 comments:
Post a Comment