Patent ID: 7114185

Claim:
A computer program product embodied on a computer readable medium for controlling a computer to identify a computer file as potentially containing malware, said computer program product comprising: searching code to search within said computer file for text data containing one or more target words that match at least one of a word or a characteristic of a word within a predetermined word library; context identifying code to identify a context within said computer file of said one or more target words; and file identifying code to identify said computer file as potentially containing malware, if said context matches one or a predetermined set of contexts; wherein said predetermined word library includes one or more of: words that are names associated with known malware authors; word format characteristics that are indicative of words being part of a message embedded within said computer file by a malware author; and word suffix characteristics that are indicative of words being part of a message embedded within said computer file by a malware author; wherein said predetermined set of contexts includes one or more of: within a script portion of a webpage; within a comment of a webpage; and within a predetermined proximity to another target word; wherein, if said computer file is identified as potentially containing malware, then trigger thresholds associated with one or more other malware identifying processes applied to said computer file are adjusted to be more sensitive.