All antivirus software share a unique characteristic that they must be updated at a very high frequency to provide up-to-date protection of their system. However, there can be another time frame where antivirus solutions may be inactive, namely, during the time of update. Some malware target boot and/or shutdown time when antivirus software may be inactive so that they can perform their malicious activities. The installers then determine the method for further intrusion including antivirus bypassing techniques. Increasingly, most of the modern malware are staged ones in order for them to be not detected by antivirus solutions at the early stage of intrusion. The common strategies deployed include the use of obfuscated code and staged malware whose first instance (usually installer such as dropper and downloader) is not detected by the antivirus software.

This has led to malware that can bypass or subvert antivirus software.

In the anti-malware research community, development of techniques for evading detection by antivirus software is an active research area. SUMMARY The security of modern computer systems heavily depends on security tools, especially on antivirus software solutions.

Softperfect ram disk and ccleaner