Detection tools detect the existence of a virus on a system. These
tools perform detection at a variety of points in the system. The
virus may be actively executing, residing in memory, or stored in
executable code. The virus may be detected before execution, during
execution, or after execution and replication.