Error detection/correction and fault detection/recovery – Data processing system error or fault handling – Reliability and availability
Patent
1996-10-02
1999-09-14
Palys, Joseph E.
Error detection/correction and fault detection/recovery
Data processing system error or fault handling
Reliability and availability
G06F 1100
Patent
active
059516984
ABSTRACT:
The detection and removal of viruses from macros is disclosed. A macro virus detection module includes a macro locating and decoding module, a macro virus scanning module, a macro treating module, a file treating module, and a virus information module. The macro locating and decoding module determines whether a targeted file includes a macro, and, where a macro is found, locates and decodes it to produce a decoded macro. The macro virus scanning module accesses the decoded macro and scans it to determine whether it includes any viruses. Unknown macro viruses are detected by the macro virus scanning module by obtaining comparison data that includes sets of instruction identifiers from the virus information module and determining whether the decoded macro includes a combination of suspect instructions which correspond to instruction identifiers. The macro treating module locates suspect instructions in the decoded macro using the comparison data and removes the suspect instructions to produce a treated macro. The file correcting module accesses a targeted file with an infected macro and replaces the infected macro with the treated macro produced by the macro treating module.
REFERENCES:
patent: 4975950 (1990-12-01), Lentz
patent: 5278901 (1994-01-01), Shieh et al.
patent: 5319776 (1994-06-01), Hile et al.
patent: 5321840 (1994-06-01), Ahlin et al.
patent: 5408642 (1995-04-01), Mann
patent: 5414833 (1995-05-01), Hershey et al.
patent: 5440723 (1995-08-01), Arnold et al.
patent: 5444850 (1995-08-01), Chang
patent: 5448668 (1995-09-01), Perelson et al.
patent: 5452442 (1995-09-01), Kephart
patent: 5485575 (1996-01-01), Chess et al.
patent: 5491791 (1996-02-01), Glowny et al.
patent: 5511163 (1996-04-01), Lerche et al.
patent: 5530757 (1996-06-01), Krawczyk
patent: 5550976 (1996-08-01), Henderson et al.
patent: 5550984 (1996-08-01), Gelb
patent: 5649095 (1997-07-01), Cozza
Malarky, Anti Virus comaprative Review, Virus Bulletin, pp. 10-11, May 1996.
Meyer, "Possible Macro Virus Attacks and How to Prevent Them", Computers & Security, vol. 15, No. 7, pp. 595-625, 1996.
Chen Eva Y.
Chi Leta M.
Deng Ming M.
Ro Jonny T.
Klivans Norman R.
Palys Joseph E.
Trend Micro Incorporated
LandOfFree
System, apparatus and method for the detection and removal of vi does not yet have a rating. At this time, there are no reviews or comments for this patent.
If you have personal experience with System, apparatus and method for the detection and removal of vi, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and System, apparatus and method for the detection and removal of vi will most certainly appreciate the feedback.
Profile ID: LFUS-PAI-O-1506054