Does VIP Utility actually runs the inspecting program?
Yes, it creates a child process to activate the inspecting program. This program is then running under supervision. VIP Utility assigns a few acting agents around the inspecting program. All of its activities are logged for analysis dynamically. Once it exhibits enough viral evidence, an alerting message will pop up. User can continue to let it run for collecting more evidence or stop it to end the inspection. Two report files are generated in the Record folder under the installation directory. If the agents find no viral activities, the inspecting program will run to the end.
