[MrGeek]

That's a nice article on AVs .Thanks for it bro

[noize]

Well done. Not yet ended up reading it, but just a couple of things:
- I don't think that's the best way you could define heuristical methods of detection; the AV updates itself while it detects new menaces, gets to find out whether a new menace is actually malicious or not by looking for what it found so far, and in case it doesn't find it (this was the signature based detection) it goes for an heuristic procedure: it's a more intelligent form of action and it's based on more intuitive solving; it in fact could detect non-malicious files as so and vice versa for the reason that this is based on intuitive code;
- rootkits usually get *root* access, and not admin access to the infected machine (this means more control than an average user has).

[Ex094]

Well done. Not yet ended up reading it, but just a couple of things:
- I don't think that's the best way you could define heuristical methods of detection; the AV updates itself while it detects new menaces, gets to find out whether a new menace is actually malicious or not by looking for what it found so far, and in case it doesn't find it (this was the signature based detection) it goes for an heuristic procedure: it's a more intelligent form of action and it's based on more intuitive solving; it in fact could detect non-malicious files as so and vice versa for the reason that this is based on intuitive code;
- rootkits usually get *root* access, and not admin access to the infected machine (this means more control than an average user has).

I agree, I did some small research on Google and found out from many sites that some Anti virus companies like Avast, Norton etc use some advance detection methods that they don't talk about being in fear that It will get bypassed by the hackers too, I don't know the validity of this but I saw people talking about this in many public forum related to security.

Thanks for reading