Its a vast subject but the thing I can tell you is where you should know what each virus does and stop the operation that you think looks like a virus activity