McAfee VLF09E002RAA - VirusScan Professional 2005 User Manual page 21

Scanning for scripts
VirusScan monitors your computer for suspect activity that might indicate a threat
is present on your computer. While VirusScan cleans viruses and other threats,
ScriptStopperTM prevents Trojan horses from running scripts that spread viruses
further.
A "Trojan horse" is a suspect program that pretends to be a benign application.
Trojans are not viruses because they do not replicate, but they can be just as
destructive.
The ScriptStopper protection mechanism detects, alerts, and blocks suspect
activity. Suspect activity might include the following action on your computer:
A script execution that results in the creation, copying, or deletion of files, or
the opening of your Windows registry
If you set ActiveShield to use the default
option in the
Advanced Options
execution for suspect patterns and alerts you when a specified number of e-mails
or recipients has been exceeded within a specified interval.
To set ActiveShield to scan running scripts for worm-like activity:
Right-click the McAfee icon, point to
1
Click , then click the
2 Advanced
Click
Enable ScriptStopper (recommended)
3
Figure 2-5. Advanced ActiveShield Options - Exploits tab
Enable ScriptStopper (recommended)
dialog box, ScriptStopper monitors script
, then click
VirusScan
tab (Figure
Exploits
, then click
Using ActiveShield
.
Options
2-5).
.
OK
User Guide 21