Generally, an antivirus uses three main scanning processes:
Specific: searches for known malware.
Generic: searches for malware related by a shared codebase.
Heuristic: searches for suspicious behavior or file structures.