The best way of obtaining a proactive antivirus solution is to execute the suspicious file in a safe environment. In other words - simply to let the virus execute its game. By doing this, any unknown and suspicious file that is trying to enter the computer, is isolated and prevented from infecting the computer system during analysis. As the program unfolds, the proactive solution will monitor and assess the behaviour of the suspicious file.

Based on the analysis, the system will determine whether to quarantine the file or to allow the file to enter the computer itself. Doing this on a real system is hardly feasible.

Norman’s solution:
Let the malicious program execute its game. Then control the game!