Constructing a macro virus to upgrading antivirus programs

Abstract EN

A virus is a self-replicating program that spreads by inserting copies of itself into other executable code or documents.

A macro virus is a virus that is written in a macro language ; a language built into a software application such as a Word processor, and causes a sequence of actions to be performed automatically when the application is started or something else triggers it.

The aim of this paper is to upgrade heuristic antiviruses, especially, which dealt with macro viruses by finding new features no taken into account to detect such viruses.

This is done by building undetected computer macro virus.

This paper explains a construction of a macro virus that works under all versions of Microsoft Word (compatible virus) and infects data Documents that belong to MSWord Most well-known and widely-used program in the world).

Also, the proposed virus is undetected by most current commercial antivirus programs especially which used heuristic techniques and other techniques to detect unknown viruses.

Thus, it can reveal some related antivirus vulnerabilities