Code-based virus protection

Code-based virus detection is an Eleven proprietary development and offers the ideal complement to signature-based virus detection (AntiVir from Avira), combining virus detection with unique eXpurgate technology. If a virus signature (from Avira) exists for malware, it is assigned a fingerprint – the basic principle behind eXpurgate spam detection. The fingerprint is then compared to other saved fingerprints on the central eXpurgate database. If the fingerprint is known there as a virus or other malware, the e-mail is categorized as dangerous.virus.

This offers the following advantages as compared to purely signature-based virus detection:

  • Detection is considerably accelerated because only the fingerprint is examined (as with spam detection).

  • The signature-based scanner, which requires considerably more resources in terms of CPU and disk I/O, doesn’t need to operate if the code-based identification has already detected malware. That considerably accelerates the scan and decreases hardware capacity utilization.

  • For companies with extremely high spam volumes (major corporations, ISPs, carriers) code-based virus detection substantially improves the scalability of the anti-virus solution. This also ensures that examination and delivery are not delayed during e-mail peaks.

Code-based virus detection is a component of eXpurgate Anti-Virus and available for Eleven Managed E-Mail Security as well as Eleven In-House E-Mail Security.