MacroTrap performs a rule-based examination of all macro code associated with a document.
Macro
virus code is typically contained as part of an invisible template (for example,
*.dot in Microsoft Word) that travels with the document. MacroTrap checks
the template for signs of a macro virus by seeking out instructions that perform virus-like
activity. Examples of this behavior include copying parts of the template to other
templates
(replication), and execution of harmful commands (destruction).