Method and apparatus for protecting data files on a computer from virus infection

A computer-readable medium having computer executable instructions for a virus protection routine incorporated within a program module, for causing a computer to perform the steps of:

• detecting a request to access a data file in response to one of an external and internal open file event;
• in response to the request to access the data file, determining whether the data file contains a known virus component;
• if the data file contains a known virus component, then
• (i) providing an advisory notice that the data file is susceptible to infection by a virus;
• and
• (ii) providing an option to access the data file using a safe mode;
• and
• if the option to access the data file in the safe mode is selected, then accessing the data file with the known virus component disabled.

A computer-implemented method for protecting a plurality of files on a computer from infection by a known virus component using a virus check routine incorporated within a program module, the program module operative to access the files and the virus check routine operative to store a digital signature with a selected data file once the selected data file is accessed by the program module, comprising the steps of:

• detecting a request to access the selected data file in response to one of an external and internal open file event;
• determining whether the selected data file contains the known virus component;
• if the selected data file contains the known virus component, then determining whether the selected data file was previously accessed by the program module by
• (i) obtaining the digital signature for the selected data file;
• (ii) obtaining a digital session key for the present session of the program module;
• and
• (iii) comparing the digital signature with the digital session key;
• if the digital signature matches the digital session key, then determining that the selected data file was previously accessed by the program module;
• determining whether the selected data file was previously accessed using a safe access mode;
• and
• if the selected data file was previously accessed using the safe access mode, then accessing the selected data file using the safe access mode.

A computer-implemented method for detecting a known virus component using a virus check routine incorporated within a program module operative to process a file that is susceptible to a virus, comprising:

• detecting a request to process a selected file in response to one of an external and internal open file event;
• determining whether the selected file contains a known virus component;
• if the selected file contains a known virus component, then
• (i) providing an advisory notice indicating that the selected file contains a known virus component;
• and
• (ii) providing file processing options to process the selected file;
• receiving one of the file processing options as a selected file processing option;
• processing the selected file in accordance with the selected file processing option;
• detecting a second request to process the selected file;
• and
• if the advisory notice indicating that the selected file contains a known virus component was previously provided, then processing the selected file in accordance with the selected file processing option without providing a second advisory notice.