Automated Internet Relay Chat malware monitoring and interception
AssigneeMcAfee, Inc.
InventorDmitry Gryaznov
Life of this patent
Estimating the term…
Abstract
A method, system, and computer program product for providing monitoring and interception of malwares in Internet Relay Chat (IRC), which is secure, does not require significant system resources, and is capable of monitoring multiple IRC networks and servers. A method of detecting a computer malware comprises the steps of joining an Internet Relay Chat server, retrieving a list of channels of the Internet Relay Chat server, monitoring at least one channel in the list of retrieved channels, accepting data received from the monitored channel, and storing and logging the data received from the monitored channel.
Claims21
A method of detecting a computer malware comprising the steps of:
- joining an Internet Relay Chat server;
- retrieving a list of channels of the Internet Relay Chat server;
- monitoring at least one channel in the list of retrieved channels, by:
- joining a channel,
- waiting a time delay,
- leaving the channel, and
- simulating user activities by transmitting a message to the channel;
- accepting data received from the monitored channel;
- storing and logging the data received from the monitored channel;
- and
- scanning the received data to detect a computer malware;
- wherein an Internet Relay Chat client is utilized in the joining, the retrieving, and the monitoring;
- wherein the Internet Relay Chat client scans the received data to detect the computer malware and collects statistics including a receipt time of the data and a sender of the data.
A system for detecting a computer malware comprising:
- a processor operable to execute computer program instructions;
- a memory operable to store computer program instructions executable by the processor;
- and
- computer program instructions stored in the memory and executable to perform the steps of:
- joining an Internet Relay Chat server;
- retrieving a list of channels of the Internet Relay Chat server;
- monitoring at least one channel in the list of retrieved channels, by:
- joining a channel,
- waiting a time delay,
- leaving the channel, and
- simulating user activities by transmitting a message to the channel,
- accepting data received from the monitored channel;
- storing and logging the data received from the monitored channel;
- and
- scanning the received data to detect a computer malware;
- wherein an Internet Relay Chat client is utilized in the joining, the retrieving, and the monitoring;
- wherein the Internet Relay Chat client scans the received data to detect the computer malware and collects statistics including a receipt time of the data and a sender of the data.
A computer program product embodied on a computer readable medium for detecting a computer malware comprising:
- computer program instructions, recorded on the computer readable medium, executable by a processor, for performing the steps of:
- joining an Internet Relay Chat server;
- retrieving a list of channels of the Internet Relay Chat server;
- monitoring at least one channel in the list of retrieved channels, by:
- joining a channel,
- waiting a time delay,
- leaving the channel, and
- simulating user activities by transmitting a message to the channel;
- accepting data received from the monitored channel;
- storing and logging the data received from the monitored channel;
- and
- scanning the received data to detect a computer malware;
- wherein an Internet Relay Chat client is utilized in the joining, the retrieving, and the monitoring;
- wherein the Internet Relay Chat client scans the received data to detect the computer malware and collects statistics including a receipt time of the data and a sender of the data.
Dependencies are inferred from the claim text.