Using McAfee VirusScan
20
McAfee
®
VirusScan
®
Professional Edition software version 9.0
Scanning for scripts and worms
VirusScan monitors your computer for suspicious activity that might indicate a
threat is present on your computer. While VirusScan cleans viruses,
ScriptStopper
TM
and WormStopper
TM
prevent viruses, worms, and Trojans from
spreading further.
The ScriptStopper and WormStopper protection mechanisms detect, alert, and
block malicious activity. Suspicious activity might include the following actions on
your computer:
A script execution that results in the creation, copying, or deletion of files, or
the opening of your Windows registry
An attempt to forward e-mail to a large portion of your address book
Attempts to forward multiple e-mail messages in rapid succession
If you set ActiveShield to use the default
Enable ScriptStopper (recommended)
and
Enable WormStopper (recommended)
options in the
Advanced Options
dialog box,
ScriptStopper and WormStopper monitor script execution and e-mail activity for
suspicious patterns and alerts you when a specified number of e-mails or
recipients has been exceeded within a specified interval.
To set ActiveShield to scan for malicious scripts and worm-like activity:
1
Right-click the McAfee icon, point to
VirusScan
, then click
Options
.
2
Click
Advanced
, then click the
ScriptStopper
tab.
3
Click
Enable ScriptStopper (recommended)
(
Figure 2-4 on page 21
).