NOD32 antivirus system uses a unique implementation of heuristic analysis, which can successfully detect many new viruses and worms as soon as they first appear. The heuristic analysis protects the users of NOD32 in the most critical time of infection spread - from the appearance of the infiltration until the release of antivirus updates. In such case, NOD32 will mark the new found infiltration as "Probably unknown ... virus" followed by detailed description of the infiltration.

Most common types of infiltration are:

• NewHeur_PE virus
  File marked as "NewHeur_PE vírus" was detected using broad heuristics because it contains parts of code typical of worm infiltrations spread over the internet. Using this method NOD32 was able to identify worms Win32/Zafi.B, Win32/Mydoom.R, Win32/Bagle.X and many others.
• Win32 virus
  File marked as "Win32 vírus" was detected using heuristics because it contains parts of code typical of viruses that attack 32-bit operating systems of the Microsoft Windows family.

What to do when NOD32 detects a "Probably unknown..." virus ?

Please email the file to sample@nod32.com. If you are sure that this is a "false alarm", include also a description of the program the file belongs to (product name, its purpose, creator, and the URL for the product's website).

©1992-2004 ESET s.r.o. All rights reserved. No part of this Encyclopedia may be reproduced, transmitted or used in any other way in any form or by any means without the prior permission.