The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Mar. 12, 2019

Filed:

Feb. 13, 2018
Applicant:

Malwarebytes Inc., Santa Clara, CA (US);

Inventors:

Mark William Patton, San Jose, CA (US);

Zohiartze Herce San Martín, Algorta, ES;

Jorge Alejandro Duran Royo, Santurce, ES;

Sherab Giovannini, Portugalete, ES;

Assignee:

Malwarebytes Inc., Santa Clara, CA (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
G06F 21/56 (2013.01); G06F 21/55 (2013.01); G06F 21/60 (2013.01);
U.S. Cl.
CPC ...
G06F 21/566 (2013.01); G06F 21/554 (2013.01); G06F 21/565 (2013.01); G06F 21/602 (2013.01); G06F 2221/034 (2013.01);
Abstract

An anti-malware application detects and remediates ransomware. The anti-malware application monitors processes executing on a computing device and detects that a process is opening a file for editing. A portion of the original file is saved prior to being edited by the process. Once the edited file is saved, the anti-malware application compares a portion of the edited file to the portion of the original file to determine if the edited file is encrypted. The anti-malware application may determine the process is associated with ransomware based on whether the edited file is encrypted.


Find Patent Forward Citations

Patton, Mark. (2019). Detecting ransomware based on file comparisons (U.S. Patent No. 10229269). U.S. Patent and Trademark Office. https://idiyas.com/patent/badge/10229269

Data source: USPTO (United States Patent and Trademark Office) public patent records. Weekly synchronization. How IDiyas builds this profile

Loading…