VBA Emulation: A Viable Method of Macro Virus Detection? Part One

by Gabor Szappanos
Sept. 24, 2017 0 comments Symantec vba

According to the data collected by the International Computer Security Association (ICSA) Loveletter was the fastest spreading virus ever. In the early era of computing a successful virus, like Form, could become the world’s most prevalent virus in about 3 years from its first appearance. Five years later, in 1995 Concept needed 4 months to become No.1. WM97.Melissa reached the top of the virus list in 4 days. All this is nothing compared to Loveletter which has become the most widespread virus only after 4 hours of its first encounter, infecting already over a million PCs by then. Current reactive anti-virus techniques with a 2-3 hour typical response time are just not efficient enough to prevent similar attacks in the future. The solution should be to utilize more efficient generic pro-active virus detection methods.

https://www.symantec.com/connect/articles/vba-emulation-viable-method-macro-virus-detection-part-one