InformationInterpreted viruses are executed by an application. Within this subcategory, macro viruses take advantage of the capabilities of applications' macro programming language to infect application documents and document templates, while scripting viruses infect scripts that are understood by scripting languages processed by services on the OS. Many attackers use toolkits containing several different types of utilities and scripts that can be used to probe and attack hosts. Scanning for unknown macro viruses will mitigate zero-day attacks.
SolutionFrom the ePO server console System Tree, select 'My Organization'. Select the 'Systems' tab. To show all systems in the System Tree, select 'This Group and All Subgroups' from the 'Preset:' drop-down list.
From the list of systems, locate the asset representing the Linux system being reviewed. Click on the system to open the System Information page.
If a task does not exist for the regularly scheduled weekly scan, create a New Client Task to run an On Demand scan at least weekly.
Click on Actions >> Agent >> Modify Tasks on a Single System.
From the list of available tasks in the 'Task Name' column, with the assistance of the ePO SA, identify the weekly On Demand scan client task.
For the designated weekly On Demand scan client task, verify the 'Task Type' is listed as 'On Demand Scan'.
Under the 'Task Name' column, click on the link for the designated task to review the task properties.
In the 'Advanced' tab, next to 'Heuristics:', select the check box for 'Find unknown macro viruses'.