System, apparatus and method for the detection and

专利名称：System, apparatus and method for the

detection and removal of viruses in macros

发明人：Eva Y. Chen,Jonny T. Ro,Ming M. Deng,Leta

M. Chi

申请号：US08/724949申请日：19961002公开号：US05951698A公开日：19990914

摘要：The detection and removal of viruses from macros is disclosed. A macro virusdetection module includes a macro locating and decoding module, a macro virus scanningmodule, a macro treating module, a file treating module, and a virus information module.The macro locating and decoding module determines whether a targeted file includes amacro, and, where a macro is found, locates and decodes it to produce a decoded macro.The macro virus scanning module accesses the decoded macro and scans it to determinewhether it includes any viruses. Unknown macro viruses are detected by the macro virusscanning module by obtaining comparison data that includes sets of instructionidentifiers from the virus information module and determining whether the decodedmacro includes a combination of suspect instructions which correspond to instructionidentifiers. The macro treating module locates suspect instructions in the decoded macrousing the comparison data and removes the suspect instructions to produce a treatedmacro. The file correcting module accesses a targeted file with an infected macro andreplaces the infected macro with the treated macro produced by the macro treatingmodule.

申请人：TREND MICRO, INCORPORATED

代理机构：Skjerven, Morrill, MacPherson, Franklin & Friel LLP

代理人：Norman R. Klivans

更多信息请下载全文后查看