Method and system for detecting computer malwares by scan of process memory after process initialization
OwnerJonathan Edwards, Shawna Turner +1inventors
InventorsJonathan Edwards, Shawna Turner, Joel Spurlock
Life of this patent
Estimating the term…
Abstract
A method, system, and computer program product for detecting a malware that provides the capability to detect malwares included in compressed files or which require emulation. A method of detecting a malware comprises the steps of scanning a process that has been loaded for execution for a malware, allowing the process to execute, if no malware is found, interrupting execution of the process, and scanning the process for a malware.
Claims36
A method of detecting a malware comprising the steps of:
- interrupting execution of a process that has been loaded for execution;
- scanning the process for a malware;
- allowing the process to execute, if no malware is found;
- and
- terminating execution of the process, if a malware is found.
A system for detecting a malware comprising:
- a processor operable to execute computer program instructions;
- a memory operable to store computer program instructions executable by the processor;
- and
- computer program instructions stored in the memory and executable to perform the steps of:
- interrupting execution of a process that has been loaded for execution;
- scanning the process for a malware;
- allowing the process to execute, if no malware is found;
- and
- terminating execution of the process, if a malware is found.
A computer program product for detecting a malware comprising:
- a computer readable medium;
- computer program instructions, recorded on the computer readable medium, executable by a processor, for performing the steps of
- interrupting execution of a process that has been loaded for execution;
- scanning the process for a malware;
- allowing the process to execute, if no malware is found;
- and
- terminating execution of the process, if a malware is found.
Dependencies are inferred from the claim text.