1. A method for detecting infection of a computer file by an attacking agent, said method comprising the steps of: determining a creation date for the attacking agent; determining a last change date of the file; and deciding that the file does not contain malicious code when the last change date is earlier than at least one critical date, wherein a first critical date is the creation date for the attacking agent.