that stays in the background, and attempts to counteract computer
viruses by continuously monitoring
files introduced into the computer. On detecting irregularities in the behavior
of new data, or finding data which matches or resembles the 'signature' (definition) of a known virus
, AV software
blocks its action
(execution) and alerts the user
or the system administrator.