Patent ID: 7114185
Filing Date: 2006-09-26
Classification: G06F

Abstract:
1. A computer program product embodied on a computer readable medium for controlling a computer to identify a computer file as potentially containing malware, said computer program product comprising: searching code to search within said computer file for text data containing one or more target words that match at least one of a word or a characteristic of a word within a predetermined word library; context identifying code to identify a context within said computer file of said one or more target words; and file identifying code to identify said computer file as potentially containing malware, if said context matches one or a predetermined set of contexts; wherein said predetermined word library includes one or more of: wherein said predetermined set of contexts includes one or more of: wherein, if said computer file is identified as potentially containing malware, then trigger thresholds associated with one or more other malware identifying processes applied to said computer file are adjusted to be more sensitive.