VBA Emulation: A Viable Method of Macro Virus Detection? Part Two

by Gabor Szappanos
Sept. 24, 2017 0 comments Symantec vba

This is the second of two articles discussing emulation as a viable method of virus detection. In the first article we briefly examined how emulation worked and began a discussion of some of the problems of emulation, particularly with macro source and macro execution. In this article, we will discuss code execution flow, underlying operating system problems, and incompatibility issues with incompatibility in different versions of Office, as well as VBA emulator environment.

https://www.symantec.com/connect/articles/vba-emulation-viable-method-macro-virus-detection-part-two