Method and system for limiting processor utilization by a virus scanner

• US 7,085,934 B1
• Filed: 07/27/2000
• Issued: 08/01/2006
• Est. Priority Date: 07/27/2000
• Status: Expired due to Term

• Current Assignee: McAfee, LLC
• Original Assignee: McAfee, Inc. (McAfee, LLC)
• Inventors: Edwards, Jonathan
• Primary Examiner(s): REVAK, CHRISTOPHER A
• Application Number:
  US09/626,701
• Time in Patent Office: 2,196 Days
• Field of Search: 713/188, 713/200, 713/201, 718/100, 718/102, 718/104, 718/105, 714/38, 715/700, 715/764, 715/781, 715/788, 702/127, 702/182, 702/186, 345/700, 345/764, 345/781, 345/788
• US Class Current: 726/24
• CPC Class Codes: G06F 21/56 Computer malware detection or handling, e.g. anti-virus arrangements

Abstract

A method for limiting processor utilization by a virus scanner operable to scan data for viruses. The method includes defining a processor utilization level and running the virus scanner. The running of the virus scanner is temporarily suspended so that usage of the processor is generally limited to said processor utilization value.

Claims

1. A method for limiting processor utilization by a virus scanner operable to scan data for viruses, the method comprising:

defining a processor utilization value;

running the virus scanner;

temporarily suspending running of the virus scanner such that usage of the processor is generally limited to said processor utilization value;

wherein defining a processor utilization value comprises defining a maximum value and temporarily suspending running of the virus scanner limits said processor utilization value to said maximum value;

wherein a control thread is executed over a sampling period;

wherein suspending the running of the virus scanner comprises suspending the virus scanner for a suspend time period equal to the sampling period multiplied by one minus the maximum value.

2. The method of claim 1 wherein running the virus scanner comprises executing a scanner thread.

3. The method of claim 2 wherein suspending the virus scanner comprises executing the control thread operable to suspend execution of the scanner thread.

4. The method of claim 1 wherein the virus scanner is an on-demand scanner.

5. The method of claim 1 wherein defining a processor utilization value comprises displaying a dialog box on a screen of a computer to allow a user to select the utilization value.

6. The method of claim 5 wherein the dialog box on the screen includes a slider bar.

7. The method of claim 5 wherein the dialog box on the screen includes a plurality of check boxes.

8. The method of claim 1 wherein defining a processor utilization value comprises defining a default value.

9. The method of claim 1 wherein the processor utilization value includes 33%.

10. A system for limiting processor utilization by a virus scanner comprising:

a virus scanner operable to scan data for viruses;

a processor operable to execute a scanner thread to scan the data; and

a controller configured to temporarily suspend execution of the scanner

thread to limit processor utilization by the virus scanner;

wherein a processor utilization value is defined by defining a maximum value and temporarily suspending running of the virus scanner limits said processor utilization value to said maximum value;

wherein a control thread is executed over a sampling period;

wherein suspending the execution of the virus scanner comprises suspending the virus scanner for a suspend time period equal to the sampling period multiplied by one minus the maximum value.

11. The system of claim 10 further comprising a graphical user interface configured to allow a user to enter a preferred processor utilization value.

12. The system of claim 11, wherein the graphical user interface includes a slider bar.

13. The system of claim 11 wherein the graphical user interface includes a plurality of check boxes.

14. The system of claim 10 wherein the virus scanner is an on-demand scanner.

15. The system of claim 10 wherein the controller is a control thread operable to instruct an operating system to suspend execution of the scanner thread.

16. The system of claim 10 wherein the processor utilization value includes 33%.

17. A computer program product embodied on a computer readable medium for limiting processor utilization by a virus scanner, comprising:

computer code that defines a processor utilization value;

computer code that runs the virus scanner;

computer code that temporarily suspends running of the virus scanner so that usage of a processor is generally limited to the processor utilization value; and

a computer readable medium that stores said computer codes;

wherein said processor utilization value is defined by defining a maximum value and temporarily suspending running of the virus scanner limits said processor utilization value to said maximum value;

wherein a control thread is executed over a sampling period;

wherein suspending the execution of the virus scanner comprises suspending the virus scanner for a suspend time period equal to the sampling period multiplied by one minus the maximum value.

18. The computer program product of claim 17 wherein the computer readable medium is selected from the group consisting of CD-ROM, floppy disk, tape, flash memory, system memory, and hard drive.

19. The computer program product of claim 17 further comprising code that displays a graphical display to a user requesting the user to define the processor utilization value.

20. The computer program product of claim 19 wherein the graphical display includes a slider bar.

21. The computer program product of claim 19 wherein the graphical display includes a plurality of check boxes.

22. The computer program product of claim 17 wherein the processor utilization value includes 33%.