Interested in the details of how an antivirus program works?

Question

Antivirus

How good is the use of signatures in terms of the speed of anti-virus programs, the convenience of storing signatures in the anti-virus database and the impossibility of replacing the database. How large should signatures be to minimize Type I and Type II errors.
How the antivirus determines the harmfulness of combined files: these are documents that contain program code. for example, html
with javascript code, or a Word document with a VBA macro. That is, here, most likely, not the entire file is checked, but how is it checked?

Answer 1

no thanks.