[edit] Brief Description

[edit] Wiki description

Description

Since the first time a computer virus has appeared, sometime in the 1970’s, there was a need to counter the effects of such software. Out of this, a constant struggle is taking place, both online and on local computers, to find computer viruses and clear them out. The first viruses, as you could define them today started being a real menace when the wide spread use of computers began. Since the network system of the time was still not very evolved, the viruses would spread out on removable media.

How do Antivirus tools work

• Virus Definitions Database

In general, the approach of an Antivirus tool is to work in forensic analysis of the files, searching for malicious code that could harm the computer. The do this by trying to match the code with a virus definition database, which should be constantly kept updated.

• Heuristic Detection

This type of detection will try to run the first part of the code of an application, and check if it will try to instantly replicate on boot, or trying to run self modifying code, acting in any way similar to a virus, then the application is assumed to have been infected with a virus.

• System Emulation Scan (Sandbox)

Some antivirus tools will use this system while in On Demand scan (meaning that the user has requested a computer scan) in order to detect new viruses or malicious code. The Antivirus Tool will create an emulated system, in which it will run the scanned applications. This is done due to limitations in performance - doing this while the user is trying to work is not feasible – and in order to keep the system unharmed. After the executables are run, the antivirus tool will compare the result with the initial state of the sandbox. If changes are detected, then it can be considered to be a virus.

• Obsolete Method of scan

One approach, that was used sometime before the year 2000, was to ask the user to allow applications to be run on the machine. This could therefore enable to user to have complete access on what applications were ran, and why. The major limitation of this was the fact that as computer systems grew, and more applications were developed, it would become increasingly harder for the user to keep track of applications.

What to look for

When trying to choose an Antivirus Software that will protect your computer from outside attacks, it is better to know what is important for you, and how much you are willing to spend on computer security.