A METHOD OF, AND SYSTEM FOR DETECTING MASS MAILING COMPUTER VIRUSES

摘要

A system for anti-virus processing an email (101) having an executable attachment extracts (105) structural elements of the email and examines (106) the executable attachments for code, data or encoded data that could have created these elements. This is effective to detect at least some mass mailing viruses where the executable attachment creates later generations of the attachment and structural elements such as strings which appear in the later emails are present in the attachment.