Using a process called "pattern matching," ServerProtect draws on an extensive database of virus patterns to identify known
virus signatures. Key areas of suspect files are examined for tell-tale strings of
virus code and
compared against thousands of virus signatures that Trend Micro has on record.
For polymorphic or mutation viruses, the ServerProtect scan engine permits suspicious files to execute in a protected area
within which it is decrypted. ServerProtect then scans the entire file, including the freshly decrypted code,
and looks for strings of mutation-virus code.
If such a virus is found, ServerProtect performs the action you previously specified to handle it. ServerProtect virus actions include
clean (autoclean), delete, bypass (ignore),
quarantine (move), or rename. Virus actions can be customized for both
boot viruses and file viruses. See Scanning Viruses.
 |
NoteIt is important to keep the Spyware pattern and virus pattern files up to date. More
than a
thousand new viruses are created each year. Trend Micro makes it easy to update the pattern file by supporting scheduled
updates. See Configuring a Scheduled Deployment for more
information.
|