McAfee VirusScan 10.0, User Manual

Page: 21 / 98

User Guide 21
Using ActiveShield
Scanning for scripts
VirusScan monitors your computer for suspect activity that might indicate a threat
is present on your computer. While VirusScan cleans viruses and other threats,
ScriptStopperTM prevents Trojan horses from running scripts that spread viruses
further.
A “Trojan horse” is a suspect program that pretends to be a benign application.
Trojans are not viruses because they do not replicate, but they can be just as
destructive.
The ScriptStopper protection mechanism detects, alerts, and blocks suspect
activity. Suspect activity might include the following action on your computer:
A script execution that results in the creation, copying, or deletion of files, or
the opening of your Windows registry
If you set ActiveShield to use the default
Enable ScriptStopper (recommended)
option in the
Advanced Options
dialog box, ScriptStopper monitors script
execution for suspect patterns and alerts you when a specified number of e-mails
or recipients has been exceeded within a specified interval.
To set ActiveShield to scan running scripts for worm-like activity:
1
Right-click the McAfee icon, point to
VirusScan
, then click
Options
.
2
Click
Advanced
, then click the
Exploits
tab ( Figure 2-5 ).
3
Click
Enable ScriptStopper (recommended)
, then click
OK
.
Figure 2-5. Advanced ActiveShield Options - Exploits tab