The Trend Micro scan engine uses both rule-based and pattern recognition technologies
and includes MacroTrap technology, which detects and removes macro viruses. Frequent,
automatic virus pattern and scan engine updates occur through a Web-based download
mechanism, which does not require a shutting down ScanMail.
ScanMail scans and cleans attachments and document content on all entry points, as
illustrated in the following diagram:
-
Email attachments are scanned in real time at the Domino mail server.
-
Database events are monitored and attachments are scanned immediately.
-
Databases and modified data are scanned during replication.
-
Existing attachments in mailboxes and Domino databases are scanned to root out old infections.

ScanMail maintains a comprehensive activity log with detailed information for the
infected file.
Java-based charts help administrators identify virus infections throughout the enterprise
environment. Reports from different servers can be consolidated through Notes database
replication.