If the code being scanned exhibits these characteristic features it is reported as being suspicious, although not necessarily malware the user decides whether to act on or ignore the warning. Heuristic virus detection involves extensive analysis and investigation of the affected codes for functions typical of malware. Advance Heuristic Īvira products contain heuristics that can proactively uncover unknown malware, before a special virus signature to combat the damaging element has been created and before a virus guard update has been sent. Nowadays there are 32 smaller definition files that are updated regularly in order to avoid peaks in the download of the updates. Avira responded by reducing the size of the individual update files, delivering less data in each update. A 15 MB database clean-out was made on 27 October 2008, causing problems to the users of the Free edition because of its large size and Avira's slow Free edition servers. Technology Virus Definition Īvira periodically 'cleans out' its virus definition files, replacing specific signatures with generic ones for a general increase in performance and scanning speed.