Patent ID: 7383581

Claim:
A computer program product embodied on a tangible computer readable medium operable for controlling a computer to identify a computer file as potentially containing malware, said computer program product comprising: searching code operable to search within said computer file for text data containing one or more target words that match at least one of a word or a characteristic of a word within a predetermined word library; context identifying code operable to identify a context within said computer file of said one or more target words; and file identifying code operable if said context matches one of a predetermined set of contexts to identify said computer file as potentially containing malware; wherein only those portions of said computer file matching said predetermined set of contexts are searched for said target words; wherein said computer file includes a web page, such that a comments portion and a scripts portion of said web page which match said predetermined set of contexts are searched for said target words, and a hypertext transfer protocol text portion and a formatting commands portion of said web page which do not match said predetermined set of contexts are not searched for said target words.