Method and Apparatus for Removing Harmful Software
First Claim
Patent Images
1. A method of protection from harmful software on a computer, comprising:
- observing, at the computer, potentially harmful software on the computer at runtime;
determining, at the computer, that at least part of the potentially harmful software is harmful software; and
removing, at runtime, effects of the harmful software from the computer based on at least said observing and said determining, despite attempts by the harmful software to resist said removing.
13 Assignments
0 Petitions
Accused Products
Abstract
Embodiments of the invention address the problem of removing malicious code from infected computers.
-
Citations
23 Claims
-
1. A method of protection from harmful software on a computer, comprising:
-
observing, at the computer, potentially harmful software on the computer at runtime; determining, at the computer, that at least part of the potentially harmful software is harmful software; and removing, at runtime, effects of the harmful software from the computer based on at least said observing and said determining, despite attempts by the harmful software to resist said removing. - View Dependent Claims (4, 5, 6, 7, 8, 9, 10)
-
-
2. The method of clam 1, wherein said determining is based on at least autonomous action by the computer, including said observing.
-
3. The method of clam 1, wherein said determining is based on at least input from a user of the computer.
-
11. A computer readable medium having a method of protection from harmful software on a computer, comprising:
the computer readable medium having the method, the method including; observing, at the computer, potentially harmful software on the computer at runtime; determining, at the computer, that at least part of the potentially harmful software is harmful software; and removing, at runtime, effects of the harmful software from the computer based on at least said observing and said determining, despite attempts by the harmful software to resist said removing.
-
12. A computer having a method of protection from harmful software on the computer, comprising:
the computer having the method, wherein the method includes; observing, at the computer, potentially harmful software on the computer at runtime; determining, at the computer, that at least part of the potentially harmful software is harmful software; and removing, at runtime, effects of the harmful software from the computer based on at least said observing and said determining, despite attempts by the harmful software to resist said removing.
-
13. A method of protection from harmful software on a computer, comprising:
-
observing, at the computer, potentially harmful software on the computer at runtime; determining, at the computer, that at least part of the potentially harmful software is harmful software; and removing, at runtime, effects of the harmful software from the computer based on at least said observing and said determining, wherein said method occurs independent of the computer receiving a security update subsequent to installation of code performing said method, the security update being generated specifically for the harmful software by a security vendor of the code performing the method. - View Dependent Claims (16, 17, 18, 19, 20, 21)
-
-
14. The method of clam 13, wherein said determining is based on at least autonomous action by the computer, including said observing.
-
15. The method of clam 13, wherein said determining is based on at least input from a user of the computer.
-
22. A computer readable medium having a method of protection from harmful software on a computer, comprising:
the computer readable medium having the method, the method including; observing, at the computer, potentially harmful software on the computer at runtime; determining, at the computer, that at least part of the potentially harmful software is harmful software; and removing, at runtime, effects of the harmful software from the computer based on at least said observing and said determining, wherein said method occurs independent of the computer receiving a security update subsequent to installation of code performing said method, the security update being generated specifically for the harmful software by a security vendor of the code performing the method.
-
23. A computer having a method of protection from harmful software on the computer, comprising:
the computer having the method, wherein the method includes; observing, at the computer, potentially harmful software on the computer at runtime; determining, at the computer, that at least part of the potentially harmful software is harmful software; and removing, at runtime, effects of the harmful software from the computer based on at least said observing and said determining, wherein said method occurs independent of the computer receiving a security update subsequent to installation of code performing said method, the security update being generated specifically for the harmful software by a security vendor of the code performing the method.
Specification