Mcafee, Inc.

Martin Alan Brown

Simon Neil Reed

Christopher Barton

Vincent Paul Gullotto

A system, method and computer program product for detecting network activity governed by malicious code is provided. A protocol layer associated with data communications over a network is monitored. A determination is made as to whether the data communications are prompted by malicious code based on the monitoring. A security event is initiated upon it being determined that the data communications are prompted by malicious code.

Protocol layer-level system and method for detecting virus activity

A malware detection system seeking to identify computer viruses, worms, Trojans, banned files and the like acts to determine from the file name, file size and storage location of a computer file being tested, whether that computer file potentially matches a specific known malware free computer file stored within a list of such specific known malware free computer files. If a match occurs indicating that the candidate computer file is potentially the specific known malware free computer file, then this is confirmed by calculating a checksum of the candidate computer file and comparing this against a stored corresponding checksum of the specific known malware free computer file. If these checksums match, then the candidate computer file can be passed as clean without requiring further time consuming malware detection scanning.

Growing community of inventors

Bicester, United Kingdom

Martin Alan Brown