That works until they write viruses specifically designed to fool this software (maybe they could also test against it to check if it works).