The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Jan. 04, 2022

Filed:

Sep. 13, 2017
Applicant:

Symantec Corporation, Mountain View, CA (US);

Inventors:

Lei Gu, Bedford, MA (US);

Ilya Sokolov, Boston, MA (US);

Assignee:

NortonLifeLock Inc., Tempe, AZ (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
G06F 12/14 (2006.01); G06F 21/56 (2013.01); G06F 21/55 (2013.01); G06F 12/16 (2006.01); G06F 21/57 (2013.01);
U.S. Cl.
CPC ...
G06F 21/568 (2013.01); G06F 21/554 (2013.01); G06F 21/564 (2013.01); G06F 21/565 (2013.01); G06F 21/57 (2013.01);
Abstract

The disclosed computer-implemented methods for automatically recovering from malware attacks may include (1) saving, in response to determining that a reputation of a process is unknown, a backup copy of a file on a remote storage device prior to allowing the process to modify the file; (2) determining, after the process has modified the file, that the process is potentially malicious; and (3) restoring, in response to determining that the process is potentially malicious, the backup copy of the file from the remote storage device. The provided methods may automatically recover computers from ransomware attacks and other malware attacks which encrypt file systems. Various other methods, systems, and computer-readable media are also disclosed.


Find Patent Forward Citations

Loading…