System, method and program for scanning for viruses

• US 20060037079A1
• Filed: 08/02/2005
• Published: 02/16/2006
• Est. Priority Date: 08/13/2004
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Midgley, Nicholas James
• Application Number:
  US11/196,008
• Publication Number:
  US 20060037079A1
• Time in Patent Office: Days
• US Class Current: 726/24
• CPC Class Codes: G06F 21/56 Computer malware detection or handling, e.g. anti-virus arrangements

Abstract

System, method and program product for scanning files for a virus. A multiplicity of files which have been accessed since a previous virus scan are identified. Based on the identifications of the multiplicity of files which have been accessed since a previous virus scan, the multiplicity of files are scanned for viruses. Other files which have not been accessed since the previous virus scan are not scanned for viruses. The scanning can be limited to those files which have been updated since the previous virus scan. The scanning of the multiplicity of files for viruses can be performed by scanning the multiplicity of files in a priority order. The priority order can be based on a type of extension of the multiplicity of files or an elapsed time since the files of the multiplicity were accessed and not scanned for viruses.

Claims

1. A method for scanning files for a virus, said method comprising the steps of:

identifying a multiplicity of files which have been accessed since a previous virus scan; and

based on the identifications of said multiplicity of files which have been accessed since a previous virus scan, scanning for viruses said multiplicity of files, and not scanning for viruses other files which have not been accessed since said previous virus scan.

2. A method as set forth in claim 1 wherein:

the step of scanning said multiplicity of files for viruses is performed by scanning said multiplicity of files in a priority order; and

said priority order is based on a type of extension of said multiplicity of files.

3. A method as set forth in claim 2 wherein an .exe type of file has higher priority than files with other types of extensions.

4. A method as set forth in claim 1 wherein:

the step of scanning said multiplicity of files for viruses is performed by scanning said multiplicity of files in a priority order; and

said priority order is based on a duration of an elapsed time since said files of said multiplicity were accessed and not scanned for viruses.

5. A method as set forth in claim 1 wherein:

the step of scanning said multiplicity of files for viruses is performed by scanning said multiplicity of files in a priority order; and

said priority order is based in part on whether said files of said multiplicity were scanned for viruses during a previous scan cycle.

6. A method as set forth in claim 1 wherein in response to requests to update said files, further comprising preliminary steps of making records indicating which files have been updated and when said files were updated.

7. A method as set forth in claim 1 wherein said multiplicity of files which have been accessed have been updated.

8. A system for scanning files for a virus, said system comprising:

means for identifying a multiplicity of files which have been accessed since a previous virus scan; and

means, based on the identifications of said multiplicity of files which have been accessed since a previous virus scan, for scanning for viruses said multiplicity of files, and not scanning for viruses other files which have not been accessed since said previous virus scan.

9. A system as set forth in claim 8 wherein:

said means for scanning said multiplicity of files for viruses comprises means for scanning said multiplicity of files in a priority order; and

said priority order is based on a type of extension of said multiplicity of files.

10. A system as set forth in claim 9 wherein an .exe type of file has higher priority than files with other types of extensions.

11. A system as set forth in claim 8 wherein:

said means for scanning said multiplicity of files for viruses comprises means for scanning said multiplicity of files in a priority order; and

said priority order is based on a duration of an elapsed time since said files of said multiplicity were accessed and not scanned for viruses.

12. A system as set forth in claim 8 wherein:

said means for scanning said multiplicity of files for viruses comprises means for scanning said multiplicity of files in a priority order; and

said priority order is based in part on whether said files of said multiplicity were scanned for viruses during a previous scan cycle.

13. A system as set forth in claim 8 further comprising, means responsive to requests to update said files, for making records indicating which files have been updated and when said files were updated.

14. A system as set forth in claim 8 wherein said multiplicity of files which have been accessed have been updated.

15. A computer program product for scanning files for a virus, said computer program product comprising:

a computer readable medium;

first program instructions to identify a multiplicity of files which have been accessed since a previous virus scan; and

second program instructions, based on the identifications of said multiplicity of files which have been accessed since a previous virus scan, to scan for viruses said multiplicity of files, and not scan for viruses other files which have not been accessed since said previous virus scan; and

wherein

said first and second program instructions are stored on said medium.

16. A computer program product as set forth in claim 15 wherein:

said second program instructions scan said multiplicity of files for viruses by scanning said multiplicity of files in a priority order; and

said priority order is based on a type of extension of said multiplicity of files.

17. A computer program product as set forth in claim 16 wherein an .exe type of file has higher priority than files with other types of extensions.

18. A computer program product as set forth in claim 15 wherein:

said second program instructions scan said multiplicity of files for viruses by scanning said multiplicity of files in a priority order; and

said priority order is based on a duration of an elapsed time since said files of said multiplicity were accessed and not scanned for viruses.

19. A computer program product as set forth in claim 15 further comprising third program instructions, responsive to requests to update said files, to make records indicating which files have been updated and when said files were updated;

and wherein said third program instructions are stored on said medium.

20. A computer program product as set forth in claim 15 wherein said multiplicity of files which have been accessed have been updated.