1. A computer-implemented method for protecting document files from macro threats, at least a portion of the method being performed by a computing device comprising at least one processor, the method comprising: identifying a document file that contains an embedded macro; locating an event-driven programming language module that stores the embedded macro for the document file; cleaning the event-driven programming language module by: categorizing a portion of the event-driven programming language module as constituting a procedure; categorizing another portion of the event-driven programming language module as constituting a variable definition as distinct from the procedure; selectively editing the embedded macro within the event-driven programming language module by performing at least one of removing and cleaning the portion of the event-driven programming language module categorized as the procedure while retaining, within the event-driven programming language module, the other portion of the event-driven programming language module categorized as the variable definition as distinct from the procedure.