Patent ID: 7484244

Claim:
A virus detection apparatus comprising a mail server and an inspection computer connected to the mail server, wherein said inspection computer comprises: file opening means for opening an attachment of e-mail transferred from said mail server; an I/O port for establishing interface connection with a PC, said PC being connected to said inspection computer to send and receive e-mail to/from said mail server through said inspection computer; virus inspecting means for detecting data of said attachment opened by said file opening means if access to said I/O port is made by the data to inspect virus invasion; and warning means for outputting a warning signal from said virus inspecting means when the access to said I/O port is detected in the data, and wherein said server comprises: a mail sending/receiving unit for receiving the e-mail; I/O port-means connected to the mail sending/receiving unit and communicating with the I/O port of the inspection computer, and a check result determination unit connected to the I/O port-means for determining whether the attachment of the e-mail is infected with a virus based on access information to the I/O port through the virus inspecting means, wherein, in the inspection computer, the file opening means opens the attachment of the email received from the mail server to execute a macro of the attachment, and the virus inspecting means checks only whether or not macro data of the attachment accesses to a certain I/O port for writing, said check result determination unit sending a check result to the inspection computer and operating a recovery software to recover the attachment.