hornus,

Thank you for the excellent explanation.
I like to explain heuristics this way:

If it walks like a duck, looks like a duck and quakes like a duck then it is a duck!

Heuristics takes this approach when examining files.

Heuristics tend to be effective with polymorphic viruses which tend to “change” their appearance to anti-virus software to avoid detection.

Using heuristics does require a bit more discipline before deleting files! False positives are an unfortunate side effect.

Hornus…thanks again.

techie