Trend Micro InterScan M Series, Administrator'S Manual

Page: 439 / 480

Technology Reference
C
-
11
MacroTrap
MacroTrap is a technology for heuristic detection of MS Office macro viruses. It
inspects macro scripts and for tokens that signify malicious nature. It works using
rules and exception patterns.
As with Trend Micro's other heuristics technologies, MacroTrap detection is
superseded by specific detection.
WormTrap
WormTrap is a technology for heuristic detection of Win32 worms. It checks files for
the import table. By doing API matching, it can check if a program calls functions
that are commonly used by worms, such as APIs used for mass-mailing and network
propagation.
It uses a pattern file that contains the list of APIs to check. To minimize false
positives, which may be due to the fact that the APIs it checks for are likely used by
legitimate programs such as mailing applications, it uses exception patterns.
As with Trend Micro's other heuristics technologies, WormTrap detection is
superseded by specific detection.
Supported DCS Clients
The Trend Micro Damage Cleanup Service (DCS) supports assessment and repair of
the following clients:
• Windows 2003 Web, Standard and Enterprise server
• Windows XP Professional
• Windows 2000 Professional/Server/Advanced Server
• Windows NT Server and Workstation