\documentclass[11pt,twoside]{article}\makeatletter

\IfFileExists{xcolor.sty}%
  {\RequirePackage{xcolor}}%
  {\RequirePackage{color}}
\usepackage{colortbl}
\usepackage{wrapfig}
\usepackage{ifxetex}
\ifxetex
  \usepackage{fontspec}
  \usepackage{xunicode}
  \catcode`⃥=\active \def⃥{\textbackslash}
  \catcode`❴=\active \def❴{\{}
  \catcode`❵=\active \def❵{\}}
  \def\textJapanese{\fontspec{Noto Sans CJK JP}}
  \def\textChinese{\fontspec{Noto Sans CJK SC}}
  \def\textKorean{\fontspec{Noto Sans CJK KR}}
  \setmonofont{DejaVu Sans Mono}
  
\else
  \IfFileExists{utf8x.def}%
   {\usepackage[utf8x]{inputenc}
      \PrerenderUnicode{–}
    }%
   {\usepackage[utf8]{inputenc}}
  \usepackage[english]{babel}
  \usepackage[T1]{fontenc}
  \usepackage{float}
  \usepackage[]{ucs}
  \uc@dclc{8421}{default}{\textbackslash }
  \uc@dclc{10100}{default}{\{}
  \uc@dclc{10101}{default}{\}}
  \uc@dclc{8491}{default}{\AA{}}
  \uc@dclc{8239}{default}{\,}
  \uc@dclc{20154}{default}{ }
  \uc@dclc{10148}{default}{>}
  \def\textschwa{\rotatebox{-90}{e}}
  \def\textJapanese{}
  \def\textChinese{}
  \IfFileExists{tipa.sty}{\usepackage{tipa}}{}
\fi
\def\exampleFont{\ttfamily\small}
\DeclareTextSymbol{\textpi}{OML}{25}
\usepackage{relsize}
\RequirePackage{array}
\def\@testpach{\@chclass
 \ifnum \@lastchclass=6 \@ne \@chnum \@ne \else
  \ifnum \@lastchclass=7 5 \else
   \ifnum \@lastchclass=8 \tw@ \else
    \ifnum \@lastchclass=9 \thr@@
   \else \z@
   \ifnum \@lastchclass = 10 \else
   \edef\@nextchar{\expandafter\string\@nextchar}%
   \@chnum
   \if \@nextchar c\z@ \else
    \if \@nextchar l\@ne \else
     \if \@nextchar r\tw@ \else
   \z@ \@chclass
   \if\@nextchar |\@ne \else
    \if \@nextchar !6 \else
     \if \@nextchar @7 \else
      \if \@nextchar (8 \else
       \if \@nextchar )9 \else
  10
  \@chnum
  \if \@nextchar m\thr@@\else
   \if \@nextchar p4 \else
    \if \@nextchar b5 \else
   \z@ \@chclass \z@ \@preamerr \z@ \fi \fi \fi \fi
   \fi \fi  \fi  \fi  \fi  \fi  \fi \fi \fi \fi \fi \fi}
\gdef\arraybackslash{\let\\=\@arraycr}
\def\@textsubscript#1{{\m@th\ensuremath{_{\mbox{\fontsize\sf@size\z@#1}}}}}
\def\Panel#1#2#3#4{\multicolumn{#3}{){\columncolor{#2}}#4}{#1}}
\def\abbr{}
\def\corr{}
\def\expan{}
\def\gap{}
\def\orig{}
\def\reg{}
\def\ref{}
\def\sic{}
\def\persName{}\def\name{}
\def\placeName{}
\def\orgName{}
\def\textcal#1{{\fontspec{Lucida Calligraphy}#1}}
\def\textgothic#1{{\fontspec{Lucida Blackletter}#1}}
\def\textlarge#1{{\large #1}}
\def\textoverbar#1{\ensuremath{\overline{#1}}}
\def\textquoted#1{‘#1’}
\def\textsmall#1{{\small #1}}
\def\textsubscript#1{\@textsubscript{\selectfont#1}}
\def\textxi{\ensuremath{\xi}}
\def\titlem{\itshape}
\newenvironment{biblfree}{}{\ifvmode\par\fi }
\newenvironment{bibl}{}{}
\newenvironment{byline}{\vskip6pt\itshape\fontsize{16pt}{18pt}\selectfont}{\par }
\newenvironment{citbibl}{}{\ifvmode\par\fi }
\newenvironment{docAuthor}{\ifvmode\vskip4pt\fontsize{16pt}{18pt}\selectfont\fi\itshape}{\ifvmode\par\fi }
\newenvironment{docDate}{}{\ifvmode\par\fi }
\newenvironment{docImprint}{\vskip 6pt}{\ifvmode\par\fi }
\newenvironment{docTitle}{\vskip6pt\bfseries\fontsize{22pt}{25pt}\selectfont}{\par }
\newenvironment{msHead}{\vskip 6pt}{\par}
\newenvironment{msItem}{\vskip 6pt}{\par}
\newenvironment{rubric}{}{}
\newenvironment{titlePart}{}{\par }

\newcolumntype{L}[1]{){\raggedright\arraybackslash}p{#1}}
\newcolumntype{C}[1]{){\centering\arraybackslash}p{#1}}
\newcolumntype{R}[1]{){\raggedleft\arraybackslash}p{#1}}
\newcolumntype{P}[1]{){\arraybackslash}p{#1}}
\newcolumntype{B}[1]{){\arraybackslash}b{#1}}
\newcolumntype{M}[1]{){\arraybackslash}m{#1}}
\definecolor{label}{gray}{0.75}
\def\unusedattribute#1{\sout{\textcolor{label}{#1}}}
\DeclareRobustCommand*{\xref}{\hyper@normalise\xref@}
\def\xref@#1#2{\hyper@linkurl{#2}{#1}}
\begingroup
\catcode`\_=\active
\gdef_#1{\ensuremath{\sb{\mathrm{#1}}}}
\endgroup
\mathcode`\_=\string"8000
\catcode`\_=12\relax

\usepackage[a4paper,twoside,lmargin=1in,rmargin=1in,tmargin=1in,bmargin=1in,marginparwidth=0.75in]{geometry}
\usepackage{framed}

\definecolor{shadecolor}{gray}{0.95}
\usepackage{longtable}
\usepackage[normalem]{ulem}
\usepackage{fancyvrb}
\usepackage{fancyhdr}
\usepackage{graphicx}
\usepackage{marginnote}

\renewcommand{\@cite}[1]{#1}


\renewcommand*{\marginfont}{\itshape\footnotesize}

\def\Gin@extensions{.pdf,.png,.jpg,.mps,.tif}

  \pagestyle{fancy}

\usepackage[pdftitle={Review of Viruses and Antivirus Patterns},
 pdfauthor={}]{hyperref}
\hyperbaseurl{}

	 \paperwidth210mm
	 \paperheight297mm
              
\def\@pnumwidth{1.55em}
\def\@tocrmarg {2.55em}
\def\@dotsep{4.5}
\setcounter{tocdepth}{3}
\clubpenalty=8000
\emergencystretch 3em
\hbadness=4000
\hyphenpenalty=400
\pretolerance=750
\tolerance=2000
\vbadness=4000
\widowpenalty=10000

\renewcommand\section{\@startsection {section}{1}{\z@}%
     {-1.75ex \@plus -0.5ex \@minus -.2ex}%
     {0.5ex \@plus .2ex}%
     {\reset@font\Large\bfseries}}
\renewcommand\subsection{\@startsection{subsection}{2}{\z@}%
     {-1.75ex\@plus -0.5ex \@minus- .2ex}%
     {0.5ex \@plus .2ex}%
     {\reset@font\Large}}
\renewcommand\subsubsection{\@startsection{subsubsection}{3}{\z@}%
     {-1.5ex\@plus -0.35ex \@minus -.2ex}%
     {0.5ex \@plus .2ex}%
     {\reset@font\large}}
\renewcommand\paragraph{\@startsection{paragraph}{4}{\z@}%
     {-1ex \@plus-0.35ex \@minus -0.2ex}%
     {0.5ex \@plus .2ex}%
     {\reset@font\normalsize}}
\renewcommand\subparagraph{\@startsection{subparagraph}{5}{\parindent}%
     {1.5ex \@plus1ex \@minus .2ex}%
     {-1em}%
     {\reset@font\normalsize\bfseries}}


\def\l@section#1#2{\addpenalty{\@secpenalty} \addvspace{1.0em plus 1pt}
 \@tempdima 1.5em \begingroup
 \parindent \z@ \rightskip \@pnumwidth 
 \parfillskip -\@pnumwidth 
 \bfseries \leavevmode #1\hfil \hbox to\@pnumwidth{\hss #2}\par
 \endgroup}
\def\l@subsection{\@dottedtocline{2}{1.5em}{2.3em}}
\def\l@subsubsection{\@dottedtocline{3}{3.8em}{3.2em}}
\def\l@paragraph{\@dottedtocline{4}{7.0em}{4.1em}}
\def\l@subparagraph{\@dottedtocline{5}{10em}{5em}}
\@ifundefined{c@section}{\newcounter{section}}{}
\@ifundefined{c@chapter}{\newcounter{chapter}}{}
\newif\if@mainmatter 
\@mainmattertrue
\def\chaptername{Chapter}
\def\frontmatter{%
  \pagenumbering{roman}
  \def\thechapter{\@roman\c@chapter}
  \def\theHchapter{\roman{chapter}}
  \def\thesection{\@roman\c@section}
  \def\theHsection{\roman{section}}
  \def\@chapapp{}%
}
\def\mainmatter{%
  \cleardoublepage
  \def\thechapter{\@arabic\c@chapter}
  \setcounter{chapter}{0}
  \setcounter{section}{0}
  \pagenumbering{arabic}
  \setcounter{secnumdepth}{6}
  \def\@chapapp{\chaptername}%
  \def\theHchapter{\arabic{chapter}}
  \def\thesection{\@arabic\c@section}
  \def\theHsection{\arabic{section}}
}
\def\backmatter{%
  \cleardoublepage
  \setcounter{chapter}{0}
  \setcounter{section}{0}
  \setcounter{secnumdepth}{2}
  \def\@chapapp{\appendixname}%
  \def\thechapter{\@Alph\c@chapter}
  \def\theHchapter{\Alph{chapter}}
  \appendix
}
\newenvironment{bibitemlist}[1]{%
   \list{\@biblabel{\@arabic\c@enumiv}}%
       {\settowidth\labelwidth{\@biblabel{#1}}%
        \leftmargin\labelwidth
        \advance\leftmargin\labelsep
        \@openbib@code
        \usecounter{enumiv}%
        \let\p@enumiv\@empty
        \renewcommand\theenumiv{\@arabic\c@enumiv}%
	}%
  \sloppy
  \clubpenalty4000
  \@clubpenalty \clubpenalty
  \widowpenalty4000%
  \sfcode`\.\@m}%
  {\def\@noitemerr
    {\@latex@warning{Empty `bibitemlist' environment}}%
    \endlist}

\def\tableofcontents{\section*{\contentsname}\@starttoc{toc}}
\parskip0pt
\parindent1em
\def\Panel#1#2#3#4{\multicolumn{#3}{){\columncolor{#2}}#4}{#1}}
\newenvironment{reflist}{%
  \begin{raggedright}\begin{list}{}
  {%
   \setlength{\topsep}{0pt}%
   \setlength{\rightmargin}{0.25in}%
   \setlength{\itemsep}{0pt}%
   \setlength{\itemindent}{0pt}%
   \setlength{\parskip}{0pt}%
   \setlength{\parsep}{2pt}%
   \def\makelabel##1{\itshape ##1}}%
  }
  {\end{list}\end{raggedright}}
\newenvironment{sansreflist}{%
  \begin{raggedright}\begin{list}{}
  {%
   \setlength{\topsep}{0pt}%
   \setlength{\rightmargin}{0.25in}%
   \setlength{\itemindent}{0pt}%
   \setlength{\parskip}{0pt}%
   \setlength{\itemsep}{0pt}%
   \setlength{\parsep}{2pt}%
   \def\makelabel##1{\upshape ##1}}%
  }
  {\end{list}\end{raggedright}}
\newenvironment{specHead}[2]%
 {\vspace{20pt}\hrule\vspace{10pt}%
  \phantomsection\label{#1}\markright{#2}%

  \pdfbookmark[2]{#2}{#1}%
  \hspace{-0.75in}{\bfseries\fontsize{16pt}{18pt}\selectfont#2}%
  }{}
      \def\TheFullDate{2017-01-15 (revised: 15 January 2017)}
\def\TheID{\makeatother }
\def\TheDate{2017-01-15}
\title{Review of Viruses and Antivirus Patterns}
\author{}\makeatletter 
\makeatletter
\newcommand*{\cleartoleftpage}{%
  \clearpage
    \if@twoside
    \ifodd\c@page
      \hbox{}\newpage
      \if@twocolumn
        \hbox{}\newpage
      \fi
    \fi
  \fi
}
\makeatother
\makeatletter
\thispagestyle{empty}
\markright{\@title}\markboth{\@title}{\@author}
\renewcommand\small{\@setfontsize\small{9pt}{11pt}\abovedisplayskip 8.5\p@ plus3\p@ minus4\p@
\belowdisplayskip \abovedisplayskip
\abovedisplayshortskip \z@ plus2\p@
\belowdisplayshortskip 4\p@ plus2\p@ minus2\p@
\def\@listi{\leftmargin\leftmargini
               \topsep 2\p@ plus1\p@ minus1\p@
               \parsep 2\p@ plus\p@ minus\p@
               \itemsep 1pt}
}
\makeatother
\fvset{frame=single,numberblanklines=false,xleftmargin=5mm,xrightmargin=5mm}
\fancyhf{} 
\setlength{\headheight}{14pt}
\fancyhead[LE]{\bfseries\leftmark} 
\fancyhead[RO]{\bfseries\rightmark} 
\fancyfoot[RO]{}
\fancyfoot[CO]{\thepage}
\fancyfoot[LO]{\TheID}
\fancyfoot[LE]{}
\fancyfoot[CE]{\thepage}
\fancyfoot[RE]{\TheID}
\hypersetup{citebordercolor=0.75 0.75 0.75,linkbordercolor=0.75 0.75 0.75,urlbordercolor=0.75 0.75 0.75,bookmarksnumbered=true}
\fancypagestyle{plain}{\fancyhead{}\renewcommand{\headrulewidth}{0pt}}

\date{}
\usepackage{authblk}

\providecommand{\keywords}[1]
{
\footnotesize
  \textbf{\textit{Index terms---}} #1
}

\usepackage{graphicx,xcolor}
\definecolor{GJBlue}{HTML}{273B81}
\definecolor{GJLightBlue}{HTML}{0A9DD9}
\definecolor{GJMediumGrey}{HTML}{6D6E70}
\definecolor{GJLightGrey}{HTML}{929497} 

\renewenvironment{abstract}{%
   \setlength{\parindent}{0pt}\raggedright
   \textcolor{GJMediumGrey}{\rule{\textwidth}{2pt}}
   \vskip16pt
   \textcolor{GJBlue}{\large\bfseries\abstractname\space}
}{%   
   \vskip8pt
   \textcolor{GJMediumGrey}{\rule{\textwidth}{2pt}}
   \vskip16pt
}

\usepackage[absolute,overlay]{textpos}

\makeatother 
      \usepackage{lineno}
      \linenumbers
      
\begin{document}

             \author[1]{Muchelule Yusuf  Wanjala}

             \author[2]{Neyole Misiko  Jacob}

             \affil[1]{  Jomo Kenyatta University of Agriculture and Technology 1}

\renewcommand\Authands{ and }

\date{\small \em Received: 12 December 2016 Accepted: 4 January 2017 Published: 15 January 2017}

\maketitle


\begin{abstract}
        


Computer viruses are executable code programs that have a unique ability to replicate themselves in computer system and spread rapidly from one computer to another affecting file, documents and programs to alter their normal running. Viruses are represented as patterns of computer instructional codes that exist over time in computer systems. Antiviruses on the other hand are programs specially developed to counter challenges brought about by viruses as they protect the computer systems from virus attacks by heavily relaying on the controls enhanced in their databases. Antiviruses therefore scan the computer using some specific patterns of bytes indicative of known viruses. To stay current, they must be developers of these antiviruses update their databases whenever new viral strains arise. This paper reviews the various virus and antivirus patters and various detection schemes.

\end{abstract}


\keywords{viruses, antiviruses, patterns.}

\begin{textblock*}{18cm}(1cm,1cm) % {block width} (coords) 
\textcolor{GJBlue}{\LARGE Global Journals \LaTeX\ JournalKaleidoscope\texttrademark}
\end{textblock*}

\begin{textblock*}{18cm}(1.4cm,1.5cm) % {block width} (coords) 
\textcolor{GJBlue}{\footnotesize \\ Artificial Intelligence formulated this projection for compatibility purposes from the original article published at Global Journals. However, this technology is currently in beta. \emph{Therefore, kindly ignore odd layouts, missed formulae, text, tables, or figures.}}
\end{textblock*}


\let\tabcellsep& 	 	 		 
\section[{I. INTRODUCTION}]{I. INTRODUCTION}\par
omputer viruses are executable code programs that have a unique ability to replicate themselves in the computer system and spread rapidly from one computer to another affecting file, documents and programs to alter their normal running \hyperref[b0]{[1]}. Just like the spread of viruses in human population with an analogy that the individual persons being infected being a terminal, a node or an edge. Similarly, computers can be viewed as terminals in a network that can be infected with viruses from one computer node through to another via a network or any connection while sharing resource or infected data.\par
Alun L. Lloyd, Robert M. \hyperref[b1]{[2]} deliberated computer virus spread analogy by comparing it to human disease spread where individuals (computers) are viewed as nodes of contact. Spafford \hyperref[b2]{[3]} deduced that viruses are represented as patterns of computer instructional codes that exist over time in computer systems. The viruses like all functional computer codes, are manifestations of algorithms representing an underlying pattern \hyperref[b2]{[3]}. He further postulated that the patterns of the viruses were to be viewed as a temporary set of electrical and magnetic field changes in the memory or storage of computer systems.\par
Antiviruses on the other hand are programs specially developed to counter challenges brought about by viruses, they protect the computer systems from virus attacks by heavily relaying on the controls enhanced in their databases. Kephart et.al \hyperref[b3]{[4]} stated that antivirusesgeneric virus-detection programs monitor computer system for virus-like behavior \hyperref[b3]{[4]}. Kumar et.al \hyperref[b4]{[5]} indicated that the antivirus program perform certain actions in protecting the computer systems, they open files, read information in them, open archives to scan them \hyperref[b4]{[5]}.\par
The antiviruses scan the computer using some specific patterns of bytes indicative of known viruses. To stay current, they must be developers of these antiviruses update their databases whenever new viral strains arise. Computer virus scanners use pattern matching algorithms to scan for many different signatures at the same time the best checking up to 10,000 signatures in 10,000 programs in less than 10 minutes \hyperref[b3]{[4]}. 
\section[{II. COMPUTER VIRUS PATTERNS}]{II. COMPUTER VIRUS PATTERNS}\par
Computer virus analysis has some common patterns that lend efficiency to the analysis process. In order to stay far from the anti-virus scanners, computer viruses gradually through patters improve their codes to make them invisible. Simply put, computer virus patterns also referred to as virus signatures for those known by antiviruses are means through which viruses replicate themselves over and over as they infect computer systems. Virus signature is the representative bytepattern part of virus family, which when a virus scanner recognizes it in a file, it notifies the user that the file is infected \hyperref[b5]{[6]}.\par
According to computer Hope \hyperref[b6]{[7]}, a virus signature is the fingerprint of a virus. It is a set of unique data, or bits of code, that allow it to be identified variety of viruses may have the same virus signature allowing anti-virus programs to detect multiple viruses when looking for a single virus signature. Because of this sharing of the same virus signature between multiple viruses, anti-virus programs can sometimes detect a virus that is not even known yet. Typically new viruses have a virus signature that is not used by other viruses, but new "strains" of known virus sometimes use the same virus signature as earlier strains.\par
Computer virus authors and antivirus vendors have constantly fought in an evasion of detection game through creation of new virus signatures. Computer malwares have become more and more sophisticated, using advanced code obfuscation techniques to resist antivirus detection. Polymorphic and metamorphic computer viruses are currently the hardest kinds of viruses to detect. Both types of viruses are able to mutate into an infinite number of functionally equivalent copies of themselves \hyperref[b7]{[8]}. This sophistication comes with the creation of new virus patters that are not easily detectable by the antiviruses available in the market today.\par
Heuristic detection is a scanning mechanism that anti-virus software employs in detecting for virus signatures. The heuristic detection methods encompass more than 250,000 new virus signatures and are most effective for locating new virus signatures. When there are new signatures created each time a new virus comes out these then should be detect during the virus scans since it is necessary to create the new signatures as the new viruses cannot otherwise be detected \hyperref[b8]{[9]}.\par
Metamorphic type of viruses modify their code to produce an equivalent one during their propagation. These viruses attempt to evade detection through static analysis by implementing code obfuscation techniques. A technique implemented by swapping interchangeable instructions, inserting garbage instructions and introducing conditional jumps to produce the child virus.\par
Here the signature of a virus is broken by changing the order of instructions without altering the control flow. A sophisticated type of this virus will generate code based on the host's operating system by translating the instructions to the corresponding machine code \hyperref[b9]{[10]}.The detection of these viruses using their signature is challenging since the signature is broken in each version of the virus. In order to detect such metamorphic viruses, the detection system should be designed to extract the essential instructions of the virus from virus instance. This extracted instruction set should be used to detect the viruses of that type  {\ref [11]}. 
\section[{III. ANTI-VIRUS DETECTION SCHEMES}]{III. ANTI-VIRUS DETECTION SCHEMES}\par
For antiviruses, a signature is an algorithm or hash that uniquely identifies a specific virus. Depending on the type of scanner being used, it may be a static hash which, in its simplest form, is a calculated numerical value of a snippet of code unique to the virus \hyperref[b11]{[12]}.Javier \hyperref[b12]{[13]} stated that a virus signature should be understood how a reliable way to detect a host infected by concrete malware. It encapsulates the essence of a virus. Signature detection is complex and challenging but we will keep the focus on the need of gathering a simple signature together with related context information \hyperref[b13]{[14]}.\par
With the many antiviruses in the market today, various mechanisms have been employed by them to detect and manage viruses for instance with static analysis, a virus is detected by examining the files or records for the occurrences of virus patterns without actually running any code. Static Methods include the following methods \hyperref[b14]{[15]}.\par
The ant-virus software's usually scans files or your computer's memory for certain patterns that may indicate the presence of malicious software's such as viruses. They therefore look for presence of patterns based on the signatures or definitions of known malware.\par
The virus pattern available on a client computer depends on the scan method the client is using. According to a publication by IBM on the Trend Micro Pattern Files and Scan Engine  {\ref (2015)}.The Virus Pattern contains information that helps Core Protection Module identify the latest virus/malware and mixed threat attacks.\par
For most antiviruses in the market today, the most common form of detection of viruses is a heuristicbased detection that use algorithms to compare the signature or patterns of known viruses against a potential threat. The heuristic-based detection allows the antiviruses to detect viruses that have not yet been discovered or previous viruses that have been modified or disguised and released as a new virus. This detection method is the best-known method for detecting new viruses but at times it also generate false positive matches meaning an antivirus scanner may report a file as being infected that is not infected. Further still, computer hope publication indicates that every antivirus scanner has a virus definition file, database, or dictionary that contains thousands of known virus signatures. These signatures allow an antivirus program to identify past viruses that have been analyzed by security professionals. For this another virus detection method includes the signature-based detection approach. This is an excellent way to prevent past known viruses and is best method of detection without creating a false warning. However, signature-based detection cannot detect new viruses until the definition file is updated with new virus information \hyperref[b6]{[7]}.\par
Other types of antiviruses employ behavior based detection mechanism to detect viruses. This is a unique string of bits, or the binary pattern, of a virus. The virus signature is like a fingerprint in that it can be used to detect and identify specific viruses. Anti-virus software uses the virus signature to scan for the presence of malicious code. Behavior-based intrusion detection techniques assume that an intrusion can be detected by observing a deviation from normal or expected behavior of the system or the users \hyperref[b15]{[16]}. 
\section[{IV. CONCLUSIONS}]{IV. CONCLUSIONS}\par
Does increased security provide 100\% assurance to technology consumers? With the Internet as a major essential communication between billions of people and also a tool for commerce, social interaction, there are increasingly new threats in viruses as new unrecognized signatures are evolving for the antiviruses to detect during the scan. Anti-virus software uses a virus signature to find a virus in a computer file system, allowing to detect, quarantine and remove the virus. In Anti-virus software performs frequent virus signature, or definition, updates. These updates are necessary for the software to detect and remove new viruses. New viruses are being created and released almost daily, which forces anti-virus software to need frequent updates.The ability to detect heuristically or generically is significant, given that most scanners now include in excess of 250k signatures and the number of new viruses being discovered continues to increase dramatically year after year \hyperref[b11]{[12]}. Further Landesman indicates that to maintain the highest level of protection, configure your antivirus software to check for updates as often as it will allow. Keeping the signatures up to date doesn't guarantee a new virus will never slip through, but it does make it far less likely. 			\footnote{© 2017 Global Journals Inc. (US)} 		 		\backmatter  			 
\subsection[{This page is intentionally left blank}]{This page is intentionally left blank}			 			  				\begin{bibitemlist}{1}
\bibitem[Sq]{b10}\label{b10} 	 		\textit{},  		 			Washington Sq 		.  		 		 			San Jose State University 		 	 
\bibitem[Chaumette ()]{b7}\label{b7} 	 		\textit{Automated Extraction of Polymorphic Virus Signatures using Abstract Interpretation},  		 			Serge Chaumette 		,  		 			OL 		.  		2012. France.  		 			University of Bordeaux 		 	 
\bibitem[Computer Virus Protection The Journal ()]{b0}\label{b0} 	 		‘Computer Virus Protection’.  		 \url{https://thejournal.com/articles/2004/04/01/computer-virus-protection.aspx}  	 	 		\textit{The Journal}  		2004.  	 	 (04 01)) 
\bibitem[Essam Al Daoud ()]{b14}\label{b14} 	 		‘Computer Virus Strategies and Detection Methods’.  		 			I H Essam Al Daoud 		.  	 	 		\textit{Int. J. Open Problems Compt. Math}  		2008. p. .  	 
\bibitem[Kumar et al. ()]{b4}\label{b4} 	 		‘Computer Viruses and Challenges for Antivirus Industry’.  		 			Deepak Kumar 		,  		 			Narender Kumar 		,  		 			Aditya Kumar 		.  	 	 		\textit{International Journal Of Engineering And Computer Science}  		2014. p. .  	 
\bibitem[Spafford ()]{b2}\label{b2} 	 		‘Computer Viruses as Artificial Life’.  		 			E H Spafford 		.  	 	 		\textit{Journal of Artificial Life}  		1994. MIT Press. p. .  	 
\bibitem[Mellid (2014)]{b12}\label{b12} 	 		\textit{Detecting and removing computer virus with OCaml},  		 			J M Mellid 		.  		 \url{http://javiermunhoz.com/blog/2014/04/19/detecting-and-removing-computer-virus-with-ocaml.html}  		2014. April 19th.  	 
\bibitem[Mellid (2014)]{b13}\label{b13} 	 		\textit{Detecting and removing computer virus with OCaml},  		 			J M Mellid 		.  		 \url{http://javiermunhoz.com/blog/2014/04/19/detecting-and-removing-computer-virus-with-ocaml.html}  		2014. April 19th.  	 
\bibitem[How does an antivirus work? (2017)]{b6}\label{b6} 	 		\textit{How does an antivirus work?},  		 \url{http://www.computerhope.com/issues/ch001738.htm}  		2017. April 25th.  	 	 (Computer Hope) 
\bibitem[Lloyd (2001)]{b1}\label{b1} 	 		\textit{How Viruses Spread Among Computers and People. Science, New Series},  		 			Alun L Lloyd 		,  		 			RM 		.  		18th May 2001. p. .  	 
\bibitem[Ida Pro and Venkatachalam (ed.) (2010)]{b9}\label{b9} 	 		 			Ida Pro 		.  		 \url{https://www.hex-rays.com/products/ida/index.shtml11}  		\textit{DETECTING UNDETECTABLE COMPUTER VIRUSES},  				 			S Venkatachalam 		 (ed.)  		2015. May 27th. May, 2010.  	 	 (Retrieved from IDA) 
\bibitem[Inc (2017)]{b8}\label{b8} 	 		 			Techopedia Inc 		.  		 \url{https://www.techopedia.com/definition/4158/virus-signature}  		\textit{Virus Signature. Retrieved from Techopedia Inc},  				2017. April 24th.  	 
\bibitem[Kephart et al. ()]{b3}\label{b3} 	 		 			Jeffrey Kephart 		,  		 			Gregory Sorkin 		,  		 			David Chess 		,  		 			Steve White 		.  		\textit{Fighting Computer Viruses. USA: Scientific American},  				1997.  	 
\bibitem[Landesman (2016)]{b11}\label{b11} 	 		 			M Landesman 		.  		 \url{https://www.lifewire.com/what-is-a-virus-signature-153629}  		\textit{What is a Virus Signature? Retrieved from Lifewire Tech},  				2016. October 20.  	 
\bibitem[Ctek-Solutions (2017)]{b5}\label{b5} 	 		\textit{Methods of Computer Virus},  		 			Ctek-Solutions 		.  		 \url{http://www.ctek-solutions.co.uk/support/knowledgebase.php?article=40}  		2017. February 10th.  	 
\bibitem[Debar (2017)]{b15}\label{b15} 	 		\textit{What is behavior based Intrusion Detection? Retrieved from The SANS},  		 			H Debar 		.  		 \url{https://www.sans.org/security-resources/idfaq/what-is-behavior-based-intrusion-detection/2/6}  		2017. April 24th.  	 
\end{bibitemlist}
 			 		 	 
\end{document}
