Computer virus unique information extracting device, a computer virus-specific information extraction method, and a computer virus specific information extraction program

It makes it possible to extract the computer virus specific information quickly. Server 100 may, in certain executables and a computer virus, the signature item "Import Table" etc. header item is a specific area previously determined If it is a storage area for information that can be regarded as a distinctive region identified as to extract a signature reads out the contents of such the "Import Table". Furthermore, the server 100 combines a plurality of signatures are extracted as a new signature.