SONAR (Symantec)

From Wikipedia, the free encyclopedia

SONAR stands for Symantec Online Network for Advanced Response. It is an early warning system that is included in Norton AntiVirus, Norton Internet Security, and Norton 360 starting in the 2008 product lines.

[edit] How it works

If a user turns off their virus protection resulting in an infection of a virus, SONAR remains active and inspects the associated files that the virus downloads.^[1] it is based around behavorial analysis which means that it monitors if the process is trying to change anything on the computer, if the installer ads a uinstaller which means that this can be bypassed using a behavorial masked virus or by adding a fake uninstaller

[edit] References