User Guide
21
Using ActiveShield
4
Click the
WormStopper
tab, click
Enable WormStopper (recommended)
, then
click
OK
(
Figure 2-5 on page 22
).
By default, the following detailed options are enabled:
Pattern matching to detect suspicious activity
Alerting when e-mail is sent to 40 or more recipients
Alerting when 5 or more e-mails are sent within 30 seconds
NOTE
If you modify the number of recipients or seconds for
monitoring sent e-mails, it might result in invalid detections.
McAfee recommends that you click
No
to retain the default
setting. Otherwise, click
Yes
to change the default setting to
your setting.
This option can be automatically enabled after the first time a potential worm
is detected (see
Managing potential worms
on page 24
for details):
Automatic blocking of suspicious outbound e-mails
Figure 2-4. ScriptStopper Options
