Mcafee, Inc.

Robert Edward Moore

Lee Codel Lawson Tarbotton

Fraser Peter Howard

Daniel Joseph Wolff

Lee Codel Tarbotton

A computer file may be scanned for suspicious wordsoccurring within suspicious contextsThus, messages embedded by malware authors within their malware may be detected. The detection of such embedded messages may be used to identify otherwise unknown items of malware or as a pre-filtering technique for controlling the use of further scanning techniques.

Identifying malware containing computer files using embedded text

An anti computer virus program uses a library of virus drivers that includes an indication of whether a particular virus can cause irreparable damage and data indicating enhanced user warnings and actions that might be associated with such viruses. If a detected computer virus is one that can cause irreparable damage, then an enhanced user warning () is issued indicating this to the user and a notification () of the possibility of such corruption is added into the repaired computer file. The notification may take the form of an electronically signed () banner message or the like.

User alerts in an anti computer virus system

A computer file may be scanned for suspicious wordsoccurring within suspicious contexts. Thus, messages embedded by malware authors within their malware may be detected. The detection of such embedded messages may be used to identify otherwise unknown items of malware or as a pre-filtering technique for controlling the use of further scanning techniques.

Growing community of inventors

Aylesbury, United Kingdom

Robert Edward Moore