User Guide

Using Specialized Scanning Tools
298 Dr Solomon’sAnti-Virus
Figure 8-10. Advanced Scan Settings dialog box
Thepresenceof a sufficientnumberofthesecharacteristicsina fileleads
the utility to identify the file as potentially infected with a new or
previously unidentified virus.
Because the utility looks simultaneously for file characteristics that rule
out the possibility of virus infection, it will rarely give you a false
indication of a virus infection. Therefore, unless you know that the file
does not contain a virus, you should treat “potential” infectionswiththe
same caution you would confirmed infections.
The ScreenScan utility starts out without any heuristic scan options
active. To activate heuristic scanning, follow these substeps:
a. Select the Enable heuristics scanning checkbox. The remaining
options in the dialog box activate.
b. Select the types of heuristics scanning you want the ScreenScan
utility to use. Your choices are:
– Enable macro heuristics scanning.Choosethisoptionto
have the utility identify all Microsoft Word, Microsoft Excel,
andotherMicrosoftOfficefilesthatcontainembeddedmacros,
then compare the macro code to its virus definitions database.
The utility will identify exact matches with the virus name;
code signatures that resemble existing viruses cause it to tell
you it has found a potential macro virus.
– Enable program file heuristics scanning. Choosethisoption
to have the ScreenScan utility locate new viruses in program
files by examining file characteristics and comparing them
against a list of known virus characteristics. The utility will
identifyfileswithasufficientnumberofthesecharacteristicsas
potential viruses.