Trend Micro InterScan M Series, Administrator'S Manual

Page: 368 / 480

Trend Micro™ InterScan™ Gateway Security Appliance M-Series Administrator’s Guide
A
-
2
BOT
The term "BOT" is derived from the word "robot." In common usage, a BOT is a soft-
ware agent that interacts with network services intended for people (for example,
Web, email, etc.) as if it were a real person. A typical use of a BOT is to simply gather
information (such as on a Web page), though common malicious uses include using a
BOT to commit click fraud or installing a BOT behind the scenes on people's comput-
ers to coordinate such things as a distributed denial-of-service attack. InterScan Gate-
way Security Appliance protects against these kinds of BOTs using IntelliTrap™,
particularly when they're enclosed as compressed or multi-compressed files attached
to email messages.
Grayware
Grayware is a general classification for application behavior that is undisclosed,
annoying, or undesirable. Grayware includes spyware, adware, dialers, joke pro-
grams, hacking tools, remote access tools, password cracking applications, and any
other unwelcome files and programs (apart from viruses) that may harm the perfor-
mance of computers on your network. InterScan Gateway Security Appliance can
detect both malware and grayware during its real-time scans and can respond in a
variety of ways.
Macro Viruses
Macro viruses are application-specific but can cross operating systems, for example,
from Windows to Linux. They infect macro utilities that accompany such applications
as Microsoft Word (.doc) and Microsoft Excel (.xls). Therefore, they can be detected
in files with extensions common to macro-capable applications such as .doc, .xls, and
.ppt. Macro viruses travel between data files in the application and can eventually
infect hundreds of files if undeterred. InterScan Gateway Security Appliance detects
malicious macro code by using heuristic scanning. This method excels at detecting
undiscovered viruses and threats that do not have a known virus signature. Trend
Micro MacroTrap™, one of the underlying technologies in InterScan Gateway Secu-
rity Appliance, is specifically designed to detect, clean, delete and/or quarantine mali-
cious macro code.