FAQ: Why anti-virus soft alarm that Agent is virus on terminal?

Publication Date:  2012-09-13 Views:  172 Downloads:  0
Issue Description
Q: Why anti-virus soft alarm that Agent is virus on terminal?
Alarm Information
Null
Handling Process
A:
There are two methods for anti-virus software to find out the virus.
1. Characteristic of virus
Analyze files according to binary code of virus to find out the virus. In this way, false alarm rate is low, but only find out the virus after exacting binary code of virus. In order to find out the virus earlier, the second way come into being.

2. Characteristic of action
Analyze actions of files according to Characteristic of action to find out the virus. The action include scanning and editing register, adding service and self-startup, hiding the process, changing system file and so on. Though deal with the problem of lag, but false alarm rate increase.

Agent edits register, adds self-startup and hid the process for protecting itself. So some anti-virus software may alarm that Agent is virus.
Root Cause
Null
Suggestions
Null

END