SONAR (Symantec)

SONAR stands for Symantec Online Network for Advanced Response. It is an early warning system that is included in Norton AntiVirus, Norton Internet Security, and Norton 360 starting in the 2008 product lines.

How it works

If a user turns off their virus protection resulting in an infection of a virus, SONAR remains active and inspects the associated files that the virus downloads. [ [http://www.symantec.com/home_homeoffice/blog/detail.jsp?blogid=sonar&profileid=laura_garcia-manrique Home & Home Office - Symantec Corp ] ] it is based around behavorial analysis which means that it monitors if the process is trying to change anything on the computer.

References