Detection and elimination of macro viruses
US5978917A · kind A · utility
Assignee
Inventor
Key dates
| Filing date | Aug 14, 1997 |
| Grant date | Nov 2, 1999 |
| Priority date | — |
| Expiry date | Aug 14, 2017 |
Classification
- Technology area (CPC A)Human Necessities
- CPC primaryA63B21/028
- WIPO fieldFurniture, games
- WIPO sectorOther fields
Abstract
Apparatus and method for detecting the presence of macro viruses within a digital computer (1). An application program (5) is associated with the digital computer (1). A global environment (13) is associated with the application program (5). The application program (5) generates at least one local document (11). Macros contained within the global environment (13) and the local document(s) (11) are executed in a simulated manner by an emulator (15). At least one preselected decision criterion is used by a detection module (17) to declare when a macro virus is deemed to be present. Such a criterion is typically the presence of a bidirectional macro, i.e., a macro that copies from a local document (11) to the global environment (13) and vice-versa. Macros deemed to be viruses are preferably deleted by a repair module (19). Additional deletion criteria may include the presence of macros that have the same source name or the same destination name as a bidirectional macro. In the preferred emulation steps, emulator (15) tests all of the macros associated with computer (1) in two steps. The first step assumes that the macros reside within the global environment (13), regardless of whether…
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.