Keeps
file
in separate
area of hard disk
Records
information
about program such
as file size and
creation
date
Attempts
to remove
any detected
virus
Uses
information
to detect if
virus tampers
with file
Quarantines
infected
files that it
cannot
remove