DTAM055 - McAfee VirusScan On-Demand scan must be configured to find unknown macro threats.

Information

Interpreted viruses are executed by an application. Within this subcategory, macro viruses take advantage of the capabilities of applications' macro programming language to infect application documents and document templates, while scripting viruses infect scripts that are understood by scripting languages processed by services on the OS. Many attackers use toolkits containing several different types of utilities and scripts that can be used to probe and attack hosts. The scanning for unknown macro viruses will mitigate zero day attacks.

Solution

Access the local VirusScan console by clicking Start->All Programs->McAfee->VirusScan Console.
In the console window, under Task, with the assistance of the System Administrator, identify the weekly on-demand client scan task.
Right-click the Task and select Properties.

Under the Scan Items tab, locate the 'Heuristics:' label. Select the 'Find unknown macro threats' option.


Click OK to Save.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_McAfee_VirusScan88_Local_Client_V6R1_STIG.zip

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-3c.1., CAT|II, CCI|CCI-001241, Rule-ID|SV-243383r722488_rule, STIG-ID|DTAM055, STIG-Legacy|SV-55293, STIG-Legacy|V-42565, Vuln-ID|V-243383

Plugin: Windows

Control ID: a28134db2a5679f5639e0b27bdc37d07d5ed55f588b16257bfd0764e0a9dddfb