System, method, and computer program product for identifying a file used to automatically launch content as unwanted
AssigneeMcAfee, Inc.
InventorsVinoo Thomas, Palasamudram Ramagopal Prashanth, Rahul Mohandas
Life of this patent
Estimating the term…
Abstract
A system, method, and computer program product are provided for identifying a file utilized to automatically launch content as unwanted. In one embodiment, a file is identified in response to a detection of unwanted code, the file utilized to automatically launch content. Additionally, it is determined whether an identifier associated with the unwanted code is included in the file. Further, the file is identified as unwanted based on the determination.
Claims21
A non-transitory computer readable medium comprising computer instructions stored thereon to cause one or more processing units to:
- receive an indication of detection of unwanted code, the unwanted code accessible from a computer system;
- identify a file in response to the indication of detection, the identified file utilized to automatically initiate execution of code in the computer system;
- determine whether an identifier associated with the unwanted code is included in the identified file;
- and
- classify the identified file as unwanted based on the determination.
A method, comprising:
- receiving an indication of detection of unwanted code, the unwanted code accessible from a computer system;
- identifying a file in response to the indication of detection, the identified file utilized to automatically initiate execution of code in the computer system;
- determining whether an identifier associated with the unwanted code is included in the identified file;
- and
- classifying the identified file as unwanted based on the determination.
A system, comprising:
- a memory;
- and
- a processor operatively coupled to the memory, the processor adapted to execute program code stored in the memory to:
- receive an indication of detection of unwanted code, the unwanted code accessible from a computer system;
- identify a file in response to the indication of detection, the identified file utilized to automatically initiate execution of code in the computer system;
- determine whether an identifier associated with the unwanted code is included in the identified file, and
- classify the identified file as unwanted based on the determination.
(canceled)
A non-transitory computer readable medium comprising computer instructions stored thereon to cause one or more processing units to:
- detect a removable storage device has been communicatively coupled to a computer system;
- identify a file utilized to automatically launch content in response to the detection of the removable storage device;
- determine whether the content associated with the identified file matches one of a plurality of local predetermined unwanted codes stored on the computer system;
- transmit information identifying the content to a remote device after it is determined that the content does not match one of the plurality of local predetermined unwanted codes;
- receive a response from the remote device identifying whether the content matches one of a plurality of remote predetermined unwanted codes stored on the remote device;
- and
- identify the content and the identified file as unwanted after it is determined that the content matches one of the plurality of local predetermined unwanted codes or one of the plurality of remote predetermined unwanted codes.
Dependencies are inferred from the claim text.