System and method for protecting shared system files

A method of updating system files of a computer system, comprising:

• monitoring calls for making changes to system files;
• detecting a change being made to a shared system file that is to be protected;
• saving a copy of the shared system file before the change is made to the shared system file;
• determining whether the change to the shared system file is valid;
• if the change is invalid, undoing the change using the saved copy of the shared system file;
• receiving an update package;
• authenticating a certificate of the update package;
• extracting an update version of a shared system file included in the update package;
• overwriting an existing version of the shared system file on the computer system with the update version;
• and
• updating a database for identifying installed protected system files on the computer system to include the update version of the shared system file.

A computer-readable medium having computer executable components for updating shared system files of a computer system, comprising:

• a monitoring component, and
• a file protection service component,
• the monitoring component monitoring changes to system files and, upon detecting a change being made to a protected shared system file, saving a copy of the protected shared system file before the change is made and notifying the file protection service component, the service component in response to the notice determining whether the change is valid and, if the change is not valid, undoing the change using the saved copy of the protected shared system file,
• wherein the file protection service component is further programmed to perform:
• receiving an update package;
• authenticating a certificate of the update package;
• extracting an update version of a shared system file included in the update package;
• overwriting an existing version of the shared system file on the computer system with the update version;
• and
• updating the installed file database to include the update version of the shared system file.