초록 ▼

A computer system uses a clean boot technique to protect against malware attacks. Upon certain detection of a malware infection, the computer system is configured to clean boot off of a fixed secure volume containing its own operating system and security software. The security software in the fixed

A computer system uses a clean boot technique to protect against malware attacks. Upon certain detection of a malware infection, the computer system is configured to clean boot off of a fixed secure volume containing its own operating system and security software. The security software in the fixed secure volume is usable to remediate the malware attack by itself or by relying at least in part on security software installed in the infected volume.

대표청구항 ▼

What is claimed is: 1. A computer-implemented method of protecting a computer system against malware, comprising:using a processor to perform method steps comprising:detecting a malware infection in a first storage device volume of the computer system, wherein the malware causing the malware infecti

What is claimed is: 1. A computer-implemented method of protecting a computer system against malware, comprising:using a processor to perform method steps comprising:detecting a malware infection in a first storage device volume of the computer system, wherein the malware causing the malware infection is a form of malware known to require a clean boot of the computer system for remediation of the malware;responsive to the detection of the malware infection, a security module of the computer system automatically modifying a basic input/output system (BIOS) boot sequence of the computer system to designate a second storage device volume to be a primary boot device for the computer system, causing the computer system to automatically boot from the second storage device volume of the computer system at a next reboot of the computer system;executing update software stored in the first storage device volume;updating, by execution of the update software, security software stored in the second storage device volume, the second storage device volume being a fixed read-only volume; andremediating the malware infection using the updated security software stored in the second storage device volume.