Constructing a Macro Virus to Upgrading Antivirus Programs

Abstract

A virus is a self-replicating program that spreads by inserting copies of itselfinto other executable code or documents. a macro virus is a virus that is written in amacro language, a language built into a software application such as a Wordprocessor, and causes a sequence of actions to be performed automatically whenthe application is started or something else triggers it.The aim of this paper is to upgrade heuristic antiviruses, especially, whichdealt with macro viruses by finding new features no taken into account to detectsuch viruses. This is done by building undetected computer macro virus.This paper explains a construction of a macro virus that works under all versions ofMicrosoft Word (compatible virus) and infects data Documents that belong to MSWord(Most well known and widely-used program in the world). Also, theproposed virus is undetected by most current commercial antivirus programsespecially which used heuristic techniques and other techniques to detect unknownviruses. Thus, it can reveal some related antivirus vulnerabilities.