How does Matisoft antivirus work?

Ethical hackers, virus researchers & Artificial Intelligence experts put their heads together & combined their experience & learning to develop this antivirus technology. These human expert’s brains are replicated in our software which continuously monitors the system to catch any virus that infects the computer.

The main premise of our technology is to think like a human being. We have emulated the brains of human cyber security experts into our technology, thus it has the logic & thinking of a human expert’s brain & acts as if cyber security experts themselves are analysing & protecting the computer. This combination of human logic and the computational power of the computer provides fortified protection against all types of viruses without the need for any updates. Moreover the experience of ethical hackers & virus researchers helps us to pre-empt cyber-criminals techniques & catch them.

    Does Matisoft use signature detection technique to catch viruses?

Matisoft is one of the pioneer technologies that has got zero dependence on signature based virus detection.

    How often does Matisoft require updates?

Matisoft is one of the very few technologies in the world that do not depend on signature update technology. Its core engine runs with the help of Artificial Intelligence because of which Matisoft does not require regular updates. Matisoft is updated like any other normal application, which might be around once in 30 days & still protects you from brand new & old viruses.

    How much money can I save using Matisoft versus a conventional antivirus?

Generally all conventional (i.e. signature based) antivirus software update their virus dictionary within an interval ranging from 6 hours to 24 hours. These signature files range in size from 100 MB to about 250MB. The average cost of internet data is around $ 0.26. per GB.(approx. 1,000 MB = 1 GB). Moreover the cost of saving on electricity charges due to low processor utilization is an added saver.

    How much resources does Matisoft use?

One of the main aim while designing the Matisoft algorithm was to keep resource utilization to the minimum. Though the resources utilised depends on the number & kind of applications running on the computer, however generally the memory utilisation ranges between 40 – 90 MB & CPU utilisation fluctuates between 0 – 15%. Due to this Matisoft antivirus can run smoothly on very old computers also, having around 500 MB of memory.

    How long will my laptop battery last if I install Matisoft compared to a conventional antivirus?

This depends on the number & kind of applications running on your computer, however generally you can expect a 20 - 33% improvement in your battery backup time.

    What do I have to do after installing Matisoft Antivirus?

This is an install & forget antivirus technology. Once you have installed Matisoft you do not have to worry about anything & Matisoft is so less intrusive that you may even forget that you have installed an antivirus. The real time scanner of Matisoft will quietly work in the background & monitor the system. If any virus is found it will intimate you of the same & ask for permission to delete the virus, clean your system & disinfect infected files. Complete peace of mind!

    Can Matisoft repair & disinfect all my files infected by a virus?

Yes Matisoft can repair & disinfect all the files infected by a virus which Matisoft has caught.Thus the precondition to this is that Matisoft antivirus must be installed on your system to get this level of protection.

    How much time does it take Matisoft to repair an infected system?

Depending upon the complexity of the virus normally the repair time ranges between 1- 10 seconds.

    What is a computer virus?

A computer virus is a malicious program that is capable of copying itself and spreading to other computers. Viruses often spread to other computers by attaching themselves to various programs when a user launches one of those infected programs. The malicious activity may include anything that its writer intended it to do like steal information, harm host computers and networks, steal money, render advertisements etc.

    What is a malware?

Malware is short for malicious software. Simply, malware is a software that has been written to harm a computer or any device it runs on. It is an umbrella term used to refer to a variety of forms of malicious software, including computer viruses, worms , Trojan horses, ransomware, spyware, adware, Botnets and other malicious programs

    What are the different types of malicious programs?

• Viruses: Like their biological namesakes, viruses attach themselves to clean files and infect other clean files. They can spread uncontrollably, damaging a system’s core functionality and deleting or corrupting files.

• Worms: Worms infect entire networks of devices, either local or across the internet, by using network interfaces. It uses each consecutive infected machine to infect more.

• Trojans: This kind of malware disguises itself as legitimate software, or is included in legitimate software that has been tampered with. It tends to act discretely and create backdoors in the security system to allow entry to other malware.

• Ransomware: Also called scareware, this kind of malware can lock down your computer and threaten to erase/encrypt everything — unless a ransom is paid to its owner.

• Spyware: Spyware is a malware designed to spy on you. It hides in the background and takes notes on what you do online, including your passwords, credit card numbers, surfing habits and more.

• Adware: These are not always malicious in nature, but some aggressive advertising software can undermine the security system just to show advertisements — which can give a lot of other malware a way in. Plus pop-ups themselves are very annoying.

• Botnets: Botnets are networks of infected computers that are made to work together under the control of an attacker.

    What is an antivirus?

Antivirus or anti-virus software (often abbreviated as AV), is a computer software used to prevent, detect and remove malicious software like computer viruses, worms , Trojan horses, ransomware, spyware, adware, Botnets.

    How does a conventional antivirus work?

Almost all antivirus software work on a signature/dictionary based detection method (Matisoft is one of the few technologies in the world which does not use signature based detection technique at all).Advanced antivirus programs today claim to work by employing other advanced technologies also like heuristic-based detection, behavioral-based detection and cloud-based detection to analyze suspicious program files. However due to the limitations presented by each of these supplementary technologies, dependence on these remains very minimal. Antivirus software claim to use various technologies to catch viruses, but the main method around which all of these work is virus signature/dictionary based detection.

    What is behavioural based virus detection?

Behavioural detection observes how the program executes & compares it to previously observed malware behaviour. Example of suspicious behaviour are unpacking of malicious code, modifying files or observing keystrokes. Although this technique can detect unknown and encrypted malware, they suffer a serious problem of false positives against benign programs.

    What is cloud based virus detection?

Cloud-based detection identifies malware by collecting data from the user’s machine while analysing it on the company’s server, instead of performing the analysis locally. This is usually done by capturing the relevant details about the file from the user’s machine, and sending it to the cloud engine for analyses. Thus the antivirus agent on the user’s machine only needs to perform minimal work.

    What is heuristics-based virus detection?

Heuristics is an approximation method that tries to find the closest possible answer to a definite answer. Heuristic scanners work by detecting virus-like characteristics or virus-like behaviour. This method is mostly used to detect new malware by examining files for suspicious characteristics that may hint towards a malware. For instance, an antivirus tool might look for the presence of rare instructions or junk code in the examined file. The tool might also emulate running the file, to flag off any suspected behaviour. The biggest problem of heuristics is the high rate of false positives which means that it can inadvertently flag legitimate files as malicious.

    What is a signature based antivirus?

In signature/dictionary based detection method, an antivirus manages a data/dictionary file which is filled with virus signatures.Whenever a new virus is discovered by an antivirus company it is analysed by their employees(who are called virus researchers) to find a unique line(i.e. a virus signature) with which the file can be uniquely identified. Once this virus signature is identified, then this is updated on to the company’s servers. Now this new signature has to be downloaded by the client/your computer to include this new virus signature into your antivirus database. After this new signature is updated on your antivirus, your antivirus can catch this new virus by checking for this new line/virus signature in the files on your computer.

This method of detecting virus has been an essential aspect of antivirus tools since their inception & it remains an important part of most tools to date. A major limitation of the method is that, by itself, it is unable to flag malicious files for which signatures have not yet been developed. With this in mind, modern attackers frequently mutate their creations to retain malicious functionality by changing the file’s signature

    What is a virus signature?

A virus signature may be thought of as alphabets that are unique to a specific file. E.g. A file containing the line “I am a virus & I will infect your computer” can be selected as a unique line to identify this particular file from thousands of files. Thus this line becomes distinguishing factor(signature) to identify this file out of thousands of files.

    How does a conventional antivirus scan for a viruses?

There are 2 techniques used by antivirus software to scan & catch viruses, which are on-access scan & on-demand scan.

On-access scanning/Real time scanning: In this technique the antivirus software runs in the background & automatically checks all the files/apps that you open on your computer. It gives real time protection as all files/apps are checked just after they are clicked & before they are opened. This scanning technique has the advantage of catching the virus before it is opened & causes any harm to the computer/device. Moreover it relieves the user of any manual/On-Demand scans. Matisoft uses real time scanning.

On-Demand scanning: This antivirus technique scans the files on your computer hard drive for viruses only when prompted to do so by the computer user, or by scheduling it as a time-specific task(& thus it got the name “On-demand scanners”). Though this technique may discover dormant viruses on the hard disk(which may also be caught when they are opened by the computer user using On-access scanning), but due to the resources & time utilized by this technique it is becoming less popular with antivirus software.

    Why does my antivirus needs to be updated regularly?

All antivirus software that use signature/dictionary based virus detection technique needs to be updated regularly to catch new viruses because this is the basic requirement of this technology to work. To understand signature based technology click here

    How often is my antivirus software updated?

Generally all antivirus software are updated at least daily to catch new viruses. However there is no fixed rule, every company has its own policies, some companies update only once a day to keep the data usage of the customer minimum & at the same time lower the burden on their servers. Other companies might choose to send updates every 6-8 hours. This will increase internet usage of the consumer but at the same time the antivirus will be prepared sooner to catch brand new viruses.

    Which part of my antivirus software is updated regularly?

Antivirus software update their virus dictionary/virus definition file, regularly to catch new viruses.

    What is the size of an antivirus virus dictionary/virus definition file?

Size of antivirus virus dictionary/virus definition files normally ranges between 100 Mb to about 250 Mb. These are normally compressed for download & also digitally signed for security reasons.The size of the file depends on various factors like structure of the definition file, the number of signatures in the file, the antivirus company’s policy if it wants to catch more number of viruses on the user’s computer(which means bigger virus definition files) versus the company wants their antivirus to use less resources & be more light on the client’s computer(which means smaller virus definition files)

    How do I know if my antivirus uses signature/dictionary based technology?

Today almost all antivirus available in the consumer market are signature based technology for catching viruses. Moreover if your antivirus was not signature based then the antivirus company would have made it a point that you know of this advantage. We at Matisoft are the first antivirus technology in the world for the consumer market to be completely free of signature based technology for catching viruses.