Computer virus and malware cleaner

A system of generating a potential solution for clearing a user computer of a, virus, comprising:

• a first program executable by the computer that scans objects of a computer for viruses, stores scan results in a first log file, and determines that a detected virus is unable to be cleared from the computer;
• second program executable by the computer for logging information about the detected virus in a second log file, the logged information including at least one of a known name of the detected virus, a location of the detected virus, a name of an object determined to be infected by the detected virus, and a location of the object determined to be infected by the detected virus;
• wherein the second program is executed after a determination that the detected virus cannot be cleared;
• a third program executable by the computer for deriving a snapshot of system information pertaining to the computer, the snapshot comprising a log of attributes of folders, processes, registry keys and system services for all or a portion of the folders, processes, registry keys and system services resident to the computer, the attributes being stored in a third log file, wherein the third program is executed after a determination that the detected virus cannot be cleared;
• a first communication device for uploading a request to clean the user computer of the malicious effect, wherein the request comprises said system snapshot;
• a potential solution derived based at least in part upon an automated analysis of the uploaded system information, the first communication device downloading to the user computer said potential solution to the malicious effect;
• and
• a processor for executing the potential solution at the user computer.

A process for creating a custom cleaner for clearing a source of a malicious effect from a computer, wherein all steps are performed in automated sequence without human intervention, comprising:

• automatically detecting a need for the custom cleaner, wherein said detecting comprises identifying an object suspected of being a source of the malicious effect and determining an inability to clear the computer of the malicious effect;
• logging information about the malicious effect in a second log file, the logged information including at least one of a known name of the malicious effect, a location of the malicious effect, a name of an object determined to be infected by the malicious effect, and a location of the object determined to be infected by the malicious effect;
• automatically gathering specific system information pertaining to resources resident to the computer, the system information comprising a plurality of registry keys, file attributes of a plurality of files, and attributes for a plurality of processes, the specific system information being included in a third log file;
• automatically generating and transmitting a custom cleaner request to a server for processing, the custom cleaner request comprising the second log file and the third log file;
• automatically generating the custom cleaner from a database of parameterized instructions;
• automatically downloading the custom cleaner to the computer;
• and
• automatically executing the custom cleaner after being received at the computer.

A method of generating a potential solution for clearing a user computer of a malicious effect suspected of being associated with an object on the user computer, comprising:

• receiving at a server computer, a first log of a malicious effect scan results pertaining to the user computer, a second log of information about the malicious effect, and a third log of system resource scan results;
• wherein the second log information includes at least one of a known name of the malicious effect, a location of the malicious effect, a name of an object determined to be infected by the malicious effect, and a location of the object determined to be infected by the malicious effect;
• wherein the third log corresponds to a system snapshot comprising file attributes for a plurality of folders, attributes for a plurality of processes, registry keys, and attributes for a plurality of system services;
• analyzing the received information nonresident to the user computer to identify a potential solution to the malicious effect, wherein the analysis is performed nonresident to the user computer without access to the object;
• downloading to the user computer a potential solution to the malicious effect;
• and
• receiving from the user computer response information pertaining to carrying out said implementing of the potential solution.