Virus scanner system and method with integrated spyware detection capabilities

• US 7,441,273 B2
• Filed: 09/27/2004
• Issued: 10/21/2008
• Est. Priority Date: 09/27/2004
• Status: Active Grant

• Current Assignee: McAfee, LLC
• Original Assignee: McAfee, Inc. (McAfee, LLC)
• Inventors: Edwards, Jonathan L., Woodruff, Andrew A., Allphin, Ryan L., Worley, Candace M.
• Primary Examiner(s): Barron, Jr.; Gilberto
• Assistant Examiner(s): Nobahar; Abdulhakim
• Application Number:
  US10/952,039
• Publication Number:
  US 20060075499A1
• Time in Patent Office: 1,485 Days
• Field of Search: 726 22- 25, 713/165, 713/188, 715/769, 715/788, 715/799, 715/825
• US Class Current: 726/24
• CPC Class Codes: G06F 21/56 Computer malware detection or handling, e.g. anti-virus arrangements
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities

Abstract

A system, method and computer program product are provided for scanning for spyware utilizing a virus scanner. In use, at least one computer is scanned for viruses utilizing a virus scanner. Still yet, the computer is further scanned for spyware utilizing the virus scanner. Such computer is scanned for the spyware by scanning a registry associated therewith.

Claims

1. A method for scanning for spyware utilizing a virus scanner, comprising:

scanning at least one computer for viruses utilizing, a virus scanner; and

scanning the at least one computer for spyware utilizing the virus scanner;

wherein the at least one computer is scanned for the spyware by scanning a registry associated with the at least one computer;

wherein the registry associated with the at least one computer is conditionally scanned based on user input;

wherein the virus scanner includes a graphical user interface;

wherein the graphical user interface includes a field for receiving the user input;

wherein the field of the graphical user interface includes a list of items associated with the at least one computer;

wherein the items are listed in a first list, the first list including items associated with the at least one computer which are being scanned;

wherein a second list is displayed upon a selection of an icon;

wherein the items of the second list include items associated with the at least one computer which are capable of being scanned upon the selection thereof;

wherein the items of the second list are moved to the first list upon a selection thereof.

2. The method as recited in claim 1, wherein the field is displayed in an options menu.

3. The method as recited in claim 1, wherein the items include the registry.

4. The method as recited in claim 3, wherein the registry includes a location on the at least me computer for storing information selected from a group consisting of hardware that is attached to the at least one computer, system options that have been selected, a configuration of memory of the at least one computer, and application programs to be present when an operating, system of the at least one computer is started.

5. The method as recited in claim 4, wherein the registry includes a location on the at least one computer for storing information including hardware that is attached to the at least one computer, system options that have been selected, a configuration of memory of the at least one computer, and application programs to be present when an operating system of the at least one computer is started.

6. The method as recited in claim 3, wherein the items are further selected from a group consisting of local, drives, fixed drives, removable drives, network drives, running processes, a user profile folder, and a recycle bin.

7. The method as recited in claim 6, wherein the items further include local drives, fixed drives, removable drives, network drives, running processes, a user profile folder, and a recycle bin.

8. The method as recited in claim 1, wherein spyware signatures and virus signatures of the virus scanner are updated via a network.

9. The method as recited in claim 8, wherein the spyware signatures and the virus signatures of the virus scanner are updated together.

10. The method as recited in claim 8, wherein the spyware signatures and the virus signatures of the virus scanner are updated simultaneously.

11. The method as recited in claim 1, wherein the method is utilized to counter terrorism.

12. The method as recited in claim 1, wherein the spyware includes adware.

13. The method as recited in claim 1, wherein the spyware includes dialer software.

14. A virus scanner graphical user interface system for scanning for spyware utilizing a virus scanner, comprising:

a graphical user interface for displaying a plurality of options associated with scanning at least one computer for viruses utilizing a virus scanner, and scanning the at least one computer for spyware utilizing the virus scanner;

wherein the options include an option for scanning a registry associated with the at least one computer to scan for the spyware;

wherein, upon detection of a selection of an icon by a user, a list including the registry is displayed such that, upon selection of the registry by the user, the registry is moved to another list including items to be scanned.

15. A system for scanning for spyware utilizing a virus scanner, comprising:

means for scanning at least one computer for viruses utilizing a virus scanner; and

means for scanning the at least one computer for spyware utilizing the virus scanner;

wherein the at least one computer is scanned for the spyware by scanning a registry associated with the at least one computer;

wherein, upon detection of a selection of an icon by a user, a list including the registry is displayed such that, upon selection of the registry by the user, the registry is moved to another list including items to be scanned.

16. A system for scanning for spyware utilizing a virus scanner, comprising:

a virus scanner, the virus scanner capable of scanning at least one computer for viruses, and scanning the at least one computer for spyware;

wherein the at least one computer is scanned for the spyware by scanning a registry associated with the at least one computer;

wherein, upon detection of a selection of an icon by a user, a list including the registry is displayed Such that, upon selection of the registry by the user, the registry is moved to another list including items to be scanned.

17. A system for scanning for spyware and malware, comprising:

a single application capable of scanning at least one computer for malware, and scanning the at least one computer for spyware;

wherein, upon detection of a selection of an icon by a user, a list including a registry is displayed such that, upon selection of the registry by the user, the registry is moved to another list including items to be scanned.

18. A method for scanning for spyware utilizing a virus scanner, comprising:

scanning at least one computer for viruses utilizing a virus scanner;

scanning the at least one computer for spyware utilizing the virus scanner; and

updating both virus signatures and spyware signatures associated with the virus scanner, by way of a network;

wherein, upon detection of a selection of an icon by a user, a list including a registry is displayed such that, upon selection of the registry by the user, the registry is moved to another list including items to be scanned.

19. A system for scanning for spyware utilizing a virus scanner, comprising:

a virus scanner, the virus scanner capable of scanning at least one computer for viruses, and scanning the at least one computer for spyware;

wherein both virus signatures and spyware signatures associated with the virus scanner are updated by way of a network;

wherein, upon detection of a selection of an icon by a user, a list including a registry is displayed such that, upon selection of the registry by the user, the registry is moved to another list including item to be scanned.

20. A method for scanning for spyware utilizing a virus scanner, comprising:

displaying a first list of items including items associated with a computer which are currently being scanned;

detecting the selection of an icon by a user;

upon the detection of the selection of the icon by the user, displaying a second list of items including items associated with the computer which are capable of being scanned, the second list of items including a registry of the computer;

detecting the selection of the registry in the second list;

upon the detection of the selection of the, registry in the second list;

moving the registry from the second list to the first list, and

scanning the computer for viruses and scanning the registry of the computer for detecting spyware, utilizing the virus scanner;

detecting an update event; and

upon the detection of the update event, updating both virus signatures and spyware signatures associated with the virus scanner.