Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

The question is simple, How does Panda Cloud Antivirus work?
I mean how can it detect an infected file without having an offline database or sending the actual file to be checked by a remote server?

share|improve this question

closed as not constructive by Nifle, Paul, Diogo, Mokubai, Simon Sheehan Jul 15 '12 at 0:38

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance.If this question can be reworded to fit the rules in the help center, please edit the question.

Your starting assumption is incorrect. The files, or parts of the files are sent and scanned by Panda servers. – Paul Jul 2 '12 at 11:16
Well, if it is sending files, the bandwidth used to send them is significantly low. I just assumed it's not sending the whole file, not that it's not sending anything. – Hamed Momeni Jul 2 '12 at 12:09

Webapps are quite complex these days and technologies such as Flash, Java, ActiveX, Silverlight and others allow a great number of features that a virus scanner would need.

Java in particular is a full blown programming language and if you give it the permissions to run on your machine has the same power and abilities as any locally run application.

If it were programmed in Java or similar then it would simply download the core application in your browser and then load the virus definitions from "the cloud". It would then run locally as if it were your standard virus scanner. All it would lack would be the administrator privileges that a properly installed virus scanner would have.

ActiveX would have allowed similar power but I believe its use is deprecated now. There are probably other tools that can do similar.


I suspect that the "cloud" feature is simply a constantly evolving virus definition database with some heuristics involved, if one computer user determines something is a threat then that detection is immediately pushed to other computers.

The "Cloud" is simply the current hot phrase to try and sell your product. Marketing BS basically.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.