

Monitors activity on your computer using a number of sensors (file system, registry and network based) and reports/blocks any suspicious behavior. Files identified as safe are not rescanned unless they change. avast! Intelligent ScannerĬan reduce the number of required file scans by up to 80% through a white list of proven safe applications. Scheduled scanningĪllows users to define the scan time and files to be scanned. Microsoft Windows is woken from sleep or hibernation mode, performs a scheduled scan, then returns back to sleep mode. Boot-time scannerĪllows you to scan your computer for infections before the operating system has started and before a virus can be activated (32-bit operating systems only). Custom rules can be set for dealing with these types of programs.

New in version 5.0, avast! now detects potentially unwanted programs, such as remote admin tools and commercial key loggers. The heuristics engine is able to cover both binary (executable) and script malware. Starting with version 5.0, avast! features a new heuristics engine designed to proactively detect malware undetectable with normal definitions.

Technically, this is done using dynamic translation, a method much faster than traditional emulation techniques. Secondly, it is used in the heuristics engine. The code emulator is used for two purposes. When a suspicious executable is encountered (during both on-demand and on-access scanning), avast! is able to emulate the program’s code in an isolated environment. Most of the collected samples are analysed by a number of automated processes and only a small fraction of the samples need to be processed manually by our virus analysts. This is a unique source of data made possible only thanks to our huge user base. Most samples we process come from sensors deployed throughout the avast! community in the Behavior shield and anti-rootkit modules. This enables even unknown rootkits to be detected and stopped before they can do any damage.

Unique “on access” technology checks all kernel-mode drivers that the operating system is loading for signs of rootkit behavior. State of the art scanning engine provides reliable protection against viruses, spyware and other forms of malicious software.
