 The source code of the suspicious file is compared to the source code of known viruses and virus-like activities.If a certain percentage of the source code matches with the code of known viruses or virus-like activities, the file is flagged, and the user alerted.Heuristic analysis is capable of detecting many previously unknown viruses and new variants of current viruses.