

Some antivirus programs use known virus definitions to generate heuristics that can detect unknown viruses. Therefore, most antivirus programs automatically update the virus definitions from an online database on a regular basis (such as once a week). However, when new viruses are created, antivirus software may not recognize them. This is an effective way to detect known viruses. Most antivirus and Internet security programs reference a database of virus definitions when scanning files for viruses. By checking a program or file against a list of virus definitions, antivirus software can determine if the program or file contains a virus. A virus definition is binary pattern (a string of ones and zeros) that identifies a specific virus.
