Automated identification and clean-up of malicious computer code
AssigneeSymantec Corporation
InventorsW. Kyle Anderson, Daryl Bonhaus
Life of this patent
Estimating the term…
Abstract
Malicious computer code (101) is automatically cleaned-up from a target computer (103). An operating system (109) automatically boots (201) in the computer memory (105) of the target computer (103). The booted operating system (109) automatically runs (203) a malicious code processing script (113) in the computer memory (105) of the target computer (103), under control of the booted operating system (109). The malicious code processing script (113) automatically copies (205) and runs (207) at least one malicious code clean-up script (115). At least one malicious code clean-up script (115) automatically cleans-up (209) malicious code (101) from the target computer (103).
Claims20
A computer implemented method for automatically cleaning-up malicious computer code from a target computer, the target computer having computer memory and an associated operating system, the method comprising the steps of:
- automatically booting an operating system in the computer memory of the target computer from computer readable media, the booted operating system comprising an operating system other than the operating system associated with the target computer;
- the booted operating system automatically running a malicious code processing script in the computer memory of the target computer, under control of the booted operating system;
- the malicious code processing script automatically identifying a malicious code that has infected the target computer;
- the malicious code processing script automatically copying at least one malicious code clean-up script for the identified malicious code from a location;
- the malicious code processing script automatically running the at least one copied malicious code clean-up script in the computer memory of the target computer;
- and
- the at least one malicious code clean-up script automatically cleaning-up the identified malicious code from the target computer.
A computer readable medium containing a computer program product for automatically cleaning-up malicious computer code from a target computer, the target computer having computer memory and an associated operating system, the computer program product comprising:
- program code for enabling an operating system to automatically boot in the computer memory of the target computer, from computer readable media, the booted operating system comprising an operating system other than the operating system associated with the target computer;
- program code for enabling the booted operating system to automatically run a malicious code processing script in the computer memory of the target computer, under control of the booted operating system;
- program code for automatically identifying a malicious code that has infected the target computer;
- program code for automatically copying at least one malicious code clean-up script for the identified malicious code from a location;
- program code for automatically running the at least one copied malicious code clean-up script in the computer memory of the target computer;
- and
- program code for automatically cleaning-up the identified malicious code from the target computer.
A computer system for automatically cleaning-up malicious computer code from a target computer, the target computer having computer memory and an associated operating system, the computer system comprising:
- an operating system booting module, for automatically booting an operating system in the computer memory of the target computer from computer readable media, the booted operating system comprising an operating system other than the operating system associated with the target computer;
- a script running module, for automatically running a malicious code processing script in the computer memory of the target computer, under control of the booted operating system, and for automatically running at least one malicious code clean-up script in the computer memory of the target computer, the script running module being communicatively coupled to the operating system booting module;
- a script copying module, for automatically identifying a malicious code that has infected the target computer, and for automatically copying at least one malicious code clean-up script for the identified malicious code from a location, the script copying module being communicatively coupled to the script running module;
- and
- a malicious code clean-up module, for automatically cleaning-up the identified malicious code from the target computer, the malicious code clean-up module being communicatively coupled to the script running module.
Dependencies are inferred from the claim text.