Apparatus and methods for protecting removable storage devices from malware infection

• US 8,826,435 B1
• Filed: 03/10/2010
• Issued: 09/02/2014
• Est. Priority Date: 05/28/2009
• Status: Active Grant

• Current Assignee: Trend Micro Inc.
• Original Assignee: Trend Micro Inc.
• Inventors: Chiang, Wei, Chen, Robert, Weng, Tzu-Hsiao, Chien, Chih-Kuan, Cheng, Jian-Chang, Jiang, Yih-Shiou, Ko, Wan-Pao, Liu, Yun-Hsien, Liu, Tsung-Kang
• Primary Examiner(s): Colin, Carl
• Assistant Examiner(s): Shayanfar, Ali
• Application Number:
  US12/721,232
• Time in Patent Office: 1,637 Days
• Field of Search: 726/24, 713/193, 713/93, 713/1
• US Class Current: 726/24
• CPC Class Codes: G06F 21/56 Computer malware detection or handling, e.g. anti-virus arrangements
• CPC Class Codes: G06F 21/567 using dedicated hardware

Abstract

One embodiment relates to a computer-implemented method for protecting a removable storage device from malware on a computer apparatus. An indication is received that the removable storage device has been connected to the computer apparatus, wherein the removable storage device is partitioned into a CD-ROM partition and a user partition. An anti-virus module stored in the CD-ROM partition on the removable storage device is automatically executed upon connecting the removable storage device to a computer apparatus. Other embodiments, aspects and features may also be disclosed.

Claims

1. A computer-implemented method for protecting a removable storage device from malware on a computer apparatus, the method comprising:

receiving an indication that the removable storage device has been connected to the computer apparatus, wherein the removable storage device is partitioned into a CD-ROM partition and a user partition;

automatically executing an anti-virus module stored in the CD-ROM partition on the removable storage device upon connecting the removable storage device to a computer apparatus;

once anti-virus protection is in place, temporarily setting a write protection to an off state for the user partition on the removable storage device;

when the removable storage device is disconnected from the computer apparatus, then returning the write protection for the user partition to a default state where the write protection is in an on state; and

when the removable storage device is re-connected to the computer apparatus, then repeating the method.

2. A computer apparatus comprising:

removable data storage configured to store computer-readable code and data;

an interface configured to be removably connected to the computer apparatus for accessing the removable data storage;

a CD-ROM partition in the removable data storage;

a user partition in the data storage; and

computer-readable code stored in CD-ROM partition and configured to provide anti-virus protection against malware on the computer apparatus, wherein the computer-readable code is further configured to

once anti-virus protection is in place, temporarily set a write protection OFF for the user partition in the removable data storage,

when the removable data storage is disconnected from the computer apparatus, then return the write protection for the user partition to a default state where the write protection is in an ON state, and

when the removable data storage is re-connected to the computer apparatus, then repeating the method.