Detecting and repairing master boot record infections
AssigneeSymantec Corporation
InventorPeter Linhardt
Life of this patent
Estimating the term…
Abstract
Security is provided for a client by replacing a volume boot module adapted to execute during a boot process of the client with a repair module. The client is booted to start the boot process and to execute a master boot module. The repair module is executed in place of the volume boot module. The repair module determines whether the master boot module is infected with malware. If the master boot module is infected, the repair module repairs the malware infection by disabling and/or removing the malware.
Claims20
A computer-implemented method for providing security to a client, the method comprising:
- replacing a volume boot module adapted to execute after a master boot module during a boot process of the client with a repair module;
- booting the client to start the boot process, the boot process executing the master boot module and the repair module;
- determining, by the repair module during the boot process, whether the master boot module is infected with malware;
- and
- responsive to determining that the master boot module is infected with malware, repairing the malware infection.
A computer program product having a non-transitory computer-readable storage medium having computer-executable instructions for providing security to a client, the computer program product comprising:
- a replacement module adapted to:
- replace a volume boot module adapted to execute after a master boot module during a boot process of the client with a repair module;
- and
- configure the client to boot and start the boot process, wherein the boot process executes the master boot module and the repair module;
- and
- wherein the repair module is adapted to:
- determine during the boot process whether the master boot module is infected with malware;
- and
- repair the malware infection responsive to determining that the master boot module is infected with malware.
A computer system providing security, the system comprising:
- a computer processor;
- and
- a computer-readable storage medium storing computer program modules adapted to execute on the computer processor, the computer program modules comprising:
- a replacement module adapted to:
- replace a volume boot module adapted to execute during a boot process of the client after a master boot module during a boot process of the client with a repair module;
- and
- configure the system to boot and start the boot process, wherein the boot process executes the master boot module and the repair module;
- and
- wherein the repair module is adapted to:
- determine during the boot process whether the master boot module is infected with malware;
- and
- repair the malware infection responsive to determining that the master boot module is infected with malware.
Dependencies are inferred from the claim text.