Virus writers often attempt to circumvent virus filtering by using real-time compression algorithms. IntelliTrap helps reduce the risk of such viruses entering your network by blocking real-time compressed executable files and pairing them with other malware characteristics. Because IntelliTrap identifies such files as security risks and may incorrectly block safe files, Trend Micro recommends quarantining (not deleting or cleaning) files when you enable IntelliTrap. If your users regularly exchange real-time compressed executable files, you should disable IntelliTrap.
IntelliTrap detects potentially malicious code in real-time compressed self-extracting executable files. Enabling IntelliTrap allows PortalProtect to take a user-defined action on these types of infected files and will also send a notification to the Administrator.
IntelliTrap uses the following components:
Virus Scan Engine
IntelliTrap Pattern
IntelliTrap Exception Pattern