Symantec Corporation

Richard B Sutton

John Millard

Pieter Viljoen

A computer system uses a clean boot technique to protect against malware attacks. Upon certain detection of a malware infection, the computer system is configured to clean boot off of a fixed secure volume containing its own operating system and security software. The security software in the fixed secure volume is usable to remediate the malware attack by itself or by relying at least in part on security software installed in the infected volume.

Secure automatable clean boot system

A technique is disclosed for tracking a virus. For each of at least a subset of received network packets it is determined whether the packet comprises an open packet. Information usable to determine a sender of the packet in the event the a virus associated with a network transmission with which the packet is associated is determined to have been received is copied from each packet determined to be an open packet, but not from at least a subset of packets not determined to be open packets.

Tracking computer infections

A technique is disclosed for tracking a virus. The technique comprises copying information from a first packet; passing through a second packet; saving the copied information; determining whether an infection has been received, wherein the infection is associated with a network transmission, and wherein the network transmission is also associated with the first packet; and retrieving the saved information.

Growing community of inventors

Seal Beach, CA, United States of America

Richard B Sutton