Script scanning and how it works

The script scanner operates as a proxy component to the real Windows scripting host component. It intercepts scripts, then scans them before they are executed.

• If the script is clean, it is passed on to the real scripting host component.
• If the script contains a potential threat, the script is not executed.

The script scanner loads into the process that’s running the script, so if that process crashes, you see ScriptProxy.dll and Mytilus.dll in its memory space. It loads the DAT file and scan engine too, which significantly increases the memory footprint of that process.