The following sections applies to some of our software only (RogueKiller and Diag).
How do we detect malware ?
Our malware detection mechanisms are built upon a diverse array of technologies and methodologies, tailored to whether the item is being analyzed in memory or on disk. Our approach incorporates:
- Rules-Driven Technologies: Our research laboratory develops precise rules to identify and classify malware.
- Heuristics-Driven Engines: These engines analyze file artifacts and metadata to determine if a file is malicious.
- Cloud Signatures: We utilize cloud-based signatures to recognize known malware threats.
- MalPE-AI: Our latest and most advanced detection engine, MalPE-AI, leverages artificial intelligence to significantly enhance detection accuracy while minimizing false positives.
While we strive for comprehensive detection, it is important to note that no system can guarantee 100% malware detection. However, our deployment of MalPE-AI has markedly improved our capabilities in this area.
Identification of Potentially Unwanted Programs (PUPs)
Potentially Unwanted Programs (PUPs) are generally considered safe, as they do not execute malicious actions or intend to harm the user or their data. In our software, detections labeled as “PUP.SomeProgramName” indicate that a program has been identified as a PUP.
Why We Detect PUPs
PUPs are detected because they can be intrusive and may negatively impact system performance. Often, these programs are installed through affiliations or partnerships with other software.
Criteria for PUP Detection
Our criteria for identifying PUPs include, but are not limited to:
- Aggressive marketing tactics with misleading descriptions (e.g., registry cleaners).
- Bundling with other software installations (offered as an “optional” component).
- Significant system modifications that impact performance (e.g., browser toolbars).
- Difficulty in uninstallation or user removal.
- Behaviors that degrade the user experience (e.g., displaying ads, cryptocurrency mining).
If you believe a program has been incorrectly identified as a PUP, please contact our support team for further assistance.