Kaspersky patents malware removal
By Davey Winder in Editorial
Kaspersky Lab has successfully patented a technology for the detection and removal of malware applications, including previously unknown ones, that are installed on a user’s computer after a single virus incident.
United States Patent 7472420 is titled “Method and system for detection of previously unknown malware components” and covers a system, method and computer program product for “identifying malware components on a computer, including detecting an attempt to create or modify an executable file or an attempt to write to a system registry; logging the attempt as an auditable event; performing a malware check on executable files of the computer; if malware is detected on the computer, identifying all other files created or modified during the auditable event, and all other processes related to the auditable event; terminating the processes related to the auditable event; deleting or quarantining the executable files created or modified during the auditable event; and if the deleted executable files include any system files, restoring the system files from a trusted backup.”
In other words, it cleans up after a computer has been compromised by a virus, Trojan or some other piece of malware. Which is a good thing, considering that a single initial virus incident can lead to the downloading of many malicious programs and leave a user’s computer compromised until all the malicious software and methods of hiding have been identified and distributed through security software updates.
The new patented Kaspersky technology is based on the logging of system events that indicate the possibility of a virus infection (for example, modification of an executable file and/or a record in the system registry) and then determining the extent of a virus incident based on the records made. It launches a module that analyses preceding events and allows the source and the time of an infection to be determined, as well as analysing all child events related to the source event, which makes it possible to detect all malicious programs involved in the incident, including those that were previously unknown.
With 30 patent applications outstanding in the US and Russia Kaspersky still has some way to go to catch the king of the technology patent, IBM. However, if only it can patent a method of preventing its own databases from being hacked, life would be pretty perfect at Camp Kaspersky.
Best of all, it actually does something worthy rather than some of the stooooooooopid patents we have seen in recent years such as the daft Page Up Page Down patent that Microsoft was awarded.
Rated: 100% (1 votes)
Loading ...Comment by - October 16, 2009 on 7:41 am
It was a very nice idea! Just wanna say thank you for the information you have shared. Just continue writing this kind of post. I will be your loyal reader. Thanks again.
Make a comment
Tag cloud
Archives
- June 2010
- May 2010
- April 2010
- March 2010
- February 2010
- January 2010
- December 2009
- November 2009
- October 2009
- September 2009
- August 2009
- July 2009
- June 2009
- May 2009
- April 2009
- March 2009
- February 2009
- January 2009
- December 2008
- November 2008
- October 2008
- September 2008
- August 2008
- July 2008
- June 2008
- May 2008
- April 2008
- March 2008
- February 2008
- January 2008
- December 2007
- November 2007
- October 2007
- September 2007
- August 2007
- July 2007
- June 2007
- May 2007
- April 2007
- March 2007
- February 2007
- January 2007
- December 2006
- November 2006
- October 2006
- September 2006
- August 2006
Most commented posts
- Has Microsoft gone mental?
81 comments
- Cuil frozen out: market share drops to next to nothing
- Xbox 360 FAIL
- 80 percent of viruses love Windows 7
- The 24GB RAM Desktop is born
- Microsoft reveals time-based licensing model
- Use old version of Windows instead of Linux, says teacher
- Google to buy Twitter?
- Has the US Army declared war on Windows 7?
- Windows XP: the invincible OS
Highest Rated Blog Posts
- Why ecommerce fails (100%)
- Google Chrome stands alone at PWN2OWN (100%)
- Betting on Hubdub technology (100%)
- Has Google gone insane as GMail goes back to beta? (100%)
- Chinese whispers as government implicated in UK hack attacks (100%)
- Crimeware toolkit targets 10,000 trusted sites (100%)
- Black Hat risk to migrating VMs (100%)
- Tough on cyber crime, tough on the causes of cyber crime (100%)
- Firefox 3, Beta 4, Enhancements 900, Tested 5 (100%)
- Has the US Army declared war on Windows 7? (100%)