Mcafee, Inc.

Networks Associates Technology, Inc.

Khai Nhu Pham

Aditya Kapoor

Jonathan Lewis Edwards

Joel Robert Spurlock

Zheng Zhang

Igor G Muttik

Victor Kouznetsov

Dmitry O Gryaznov

Rachit Mathur

Harinath Vishwanath Ramachetty

Michael Chin-Hwan Pak

Vincent Paul Gullotto

Andrei Ouchakov

Particular embodiments described herein provide for an electronic device that can be configured to receive a request from a process to access data is a system, determine if the data is in a virtualized protected area of memory in the system, and allow access to the data if the data is in the virtualized protected area of memory and the process is a trusted process. The electronic device can also be configured to determine if new data should be protected, store the new data in the virtualized protected area of memory in the system if the new data should be protected, and store the new data in an unprotected area of memory in the system if the new data should not be protected.

Virtualized trusted storage

A server-based system, method, and computer program product are provided for scanning data on a client using only a subset of the data. In operation, a request is received for a subset of data stored on a client that is required for determining whether the data is unwanted. Additionally, a representation of only the subset of data is sent from the client to a server over a network. Furthermore, a response is received from the server over the network. Still yet, there is a reaction based on the response.

Server-based system, method, and computer program product for scanning data on a client using only a subset of the data

A rootkit scanning system, method, and computer program product are provided. In use, at least one hook is traversed. Further, code is identified based on the traversal of the at least one hook. In addition, the code is scanned for at least one rootkit.

Rootkit scanning system, method, and computer program product

A wireless data processing devicestores partially completed versions of a file needed to replace a current version of a file used by that target deviceWhen a device storing a more up-to-date version of the file than the current complete version stored by the target devicemoves into range, downloading of that new version either completely, or resuming from a previously reached point, is initiated. When the in-range device has more than one version of the file that could be downloaded, the version selected for initial download may be the one which will take least time to complete.

Updating computer files on wireless data processing devices

A system and method for executing computer virus definitions containing general purpose programming language extensions is described. One or more virus definition records are stored in a computer virus data file. Each virus definition record includes an identifier, a virus detection section and an extension sentence. The identifier uniquely identifies a computer virus. The virus detection section includes object code providing operations to detect the identified computer virus within a computer system. The extension sentence includes object code providing reusable operations implemented in a general purpose computing language. For each virus definition record, at least one of the object code of the virus detection section and the extension sentence is interpreted.

System and method for executing computer virus definitions containing general purpose programming language extensions

Growing community of inventors

Beaverton, OR, United States of America

Khai Nhu Pham