Detecting malicious software on a computing device with a mobile device

A machine-readable non-transitory medium storing instructions for detecting malicious software on a computing device with a mobile device executable by the mobile device to cause the mobile device to:

• recognize a non-volatile memory of the computing device that is mounted by the mobile device;
• scan the non-volatile memory using a low-level read operations scan completed via a processor included in the mobile device;
• collect scanning data on the mobile device from the low-level read operations scan and an operating system-level scan;
• wherein the scanning data from the low-level read operations scan and an operating system-level scan, wherein the scanning data from the low-level read operations scan includes binary code;
• reading the binary code with the mobile device;
• evaluate the scanning data from the low-level read operations scan for malicious software based on the reading of the binary code with the mobile device;
• evaluate and the operating system-level scan, wherein the data from the low-level read operations scan and the operating system-level scan are compared;
• and
• indicate the existence of malicious software located on the computing device when a number of differences between the low-level read operations scan and the operating system-level scan are detected and when malicious software is detected on the computing device when a number of differences between the low-level read operations scan and the operating system-level scan are detected and when malicious software is detected on the computing device based on the reading of the binary code with the mobile device.

A mobile device for detecting malicious software on a computing device, comprising:

• a memory;
• and
• a processor configured to execute executable instructions stored in the memory to:
• recognize a non-volatile memory of the computing device that is mounted by the mobile device;
• scan the non-volatile memory using a low-level read operations scan and an operating system-level scan completed via the processor included in the mobile device;
• collect scanning data on the mobile device from the low-level read operations scan and the operating system-level scan, wherein the scanning data from the low-level read operations scan includes binary code;
• reading the binary code with the mobile device;
• evaluate the scanning data from the low-level read operations scan for malicious software based on the reading of the binary code with the mobile device;
• evaluate differences between the low-level read operations scan and the operating system-level scan;
• and
• indicate an existence of malicious software located on the computing device when a number of differences between the low-level read operations scan and the operating system-level scan are detected and when malicious software is detected on the computing device based on the reading of the binary code with the mobile device.