How does the NOD32 Antivirus System work ?
Basically the system functions in two ways:
First the conventional "identification by signature or file name" which is common to all current AV programs.
Second by using advanced heuristics to check other file characteristics, which may be indicative of Malware.