Detecting Malicious Behaviors Updated May 02, 2021 20:48 Note: Behavioral scanning is only available in ZoneAlarm Extreme Security and ZoneAlarm Pro Antivirus + Firewall. Behavioral scanning analyzes object behavior in the system and detects the newest threats that are still not defined in the signatures. A program behaves suspiciously when it does one of these: Acts like a worm - copies itself to network resources, the startup folder, or the system registry, and then sends copies of itself Makes changes to the file system Embeds modules in other processes Masks processes in the system Modifies certain Microsoft Windows system registry keys Behavioral scanning is on by default, and we recommend to keep it on. However, you can turn it off, if necessary. To turn behavioral scanning off: Click in the ANTIVIRUS & FIREWALL panel of the ZoneAlarm software client. Click Settings in the Antivirus/Anti-Spyware section. In the Current Settings section, click Behavioral scan is enabled. Note - If the behavioral scan is off, the configuration line in the Current Settings shows Behavioral scan is disabled. The Antivirus/Anti-Spyware Settings window opens and shows the Behavioral Scan configuration section. Clear Enable behavioral scanning.If you wish to turn Behavioral Scan on at another time, select Enable behavioral scanning. Click OK.