Back to results
US 2016/0105450 A1Published application
Preventing execution of task scheduled malware
AssigneeMcAfee, Inc.
InventorsAnil Ramabhatta, Harinath Vishwanath Ramachetty, Nandi Dharma Kishore
Life of this patent
Estimating the term…
Abstract
A method for preventing malware attacks includes the steps of detecting an attempt on an electronic device to access a task scheduler, determining an entity associated with the attempt to access the task scheduler, determining a malware status of the entity, and, based on the malware status of the entity, allowing or denying the attempted access to the task scheduler. The task scheduler is configured to launch one or more applications at a specified time or interval.
Claims20
A system for preventing malware attacks, comprising:
- a processor;
- a memory;
- an anti-malware module including machine-readable instructions in the memory, the instructions, when read and executed by the processor, configure the anti-malware module to:
- detect an attempt on an electronic device to access a task scheduler by determining information to be added to the task scheduler, the task scheduler to launch an application at a specified time;
- determine an entity associated with the attempt to access the task scheduler based upon the information to be added to the task scheduler, including determining a network destination to be accessed as a result adding the information to the task scheduler;
- determine a malware status of the entity by determining a malware status of the network destination;
- and
- based on the malware status of the entity, allow or deny the attempted access to the task scheduler.
5 more elements
An article of manufacture, comprising:
- a non-transitory computer readable medium;
- and
- computer-executable instructions carried on the non-transitory computer readable medium, the instructions readable by a processor, the instructions, when read and executed, for causing the processor to:
- detect an attempt on an electronic device to access a task scheduler by determining information to be added to the task scheduler, the task scheduler to launch an application at a specified time;
- determine an entity associated with the attempt to access the task scheduler based upon the information to be added to the task scheduler, including determining a network destination to be accessed as a result adding the information to the task scheduler;
- determine a malware status of the entity by determining a malware status of the network destination;
- and
- based on the malware status of the entity, allow or deny the attempted access to the task scheduler.
5 more elements
Dependencies are inferred from the claim text.