Operation Manual

Trend Micro™ ServerProtect™ Getting Started Guide
1-12
This highly efficient approach saves download time and minimizes network
bandwidth. See Updating ServerProtect 5 on page 4-7 for additional information.
Tip: You can automate the deployment of updates for Normal Servers by creating a
scheduled update task. See Creating Tasks on page 3-29.
ServerProtect Virus Detection Technology
ServerProtect uses advanced virus detection technology. In this section we feature the
tools which support this state of the art technology and how IT professionals can
benefit from it.
Pattern Matching
Using a process called "pattern matching", ServerProtect draws upon an extensive
database of virus patterns to identify known virus signatures. Key areas of suspect
files are examined for tell-tale strings of virus code and compared against thousands
of virus signatures that Trend Micro has on record.
For polymorphic, or mutation viruses, the ServerProtect scan engine permits
suspicious files to execute in a protected area within which it is decrypted.
ServerProtect then scans the entire file, including the freshly decrypted code, and
looks for strings of mutation-virus code.
If such a virus is found, ServerProtect performs the virus action you previously
specified. ServerProtect virus actions include: clean (autoclean), delete, bypass
(ignore), quarantine (move), or rename.Virus actions can be customized for both boot
viruses and file viruses. See Scanning Viruses on page 3-45.
Note: It is important to keep the virus pattern file up to date. More than a thousand new
viruses are created each year. Trend Micro makes it easy to update the pattern file by
supporting scheduled updates. See
Configuring a Scheduled Download on page
3-20 and Configuring a Scheduled Deployment on page 3-25 for more
information.