초록 ▼

An on-demand cleanup application running locally removes malware and its effects from a computer system. A virus scan engine scans the computer system to identify any malicious files. A system information collector tool executes to create a log file containing detailed information about the computer

An on-demand cleanup application running locally removes malware and its effects from a computer system. A virus scan engine scans the computer system to identify any malicious files. A system information collector tool executes to create a log file containing detailed information about the computer system and the location of all files. Identified malicious files are matched against the log file to determine the extent of the infection by the malicious files. Computer code is generated using a blank cleanup template to automatically delete the malicious files and their effects in the computer system and placed into a final cleanup template. The cleanup template is executed by a cleanup engine in order to remove the malware and its effects from the computer. A CRC tool is used to positively identify files that are to be deleted.

대표청구항 ▼

We claim: 1. A method of cleaning up a computer system after a malware infection, said method comprising:scanning at least a portion of a computer system to identify at least one malicious software file having a file name;executing a system information collection tool to identify features of said co

We claim: 1. A method of cleaning up a computer system after a malware infection, said method comprising:scanning at least a portion of a computer system to identify at least one malicious software file having a file name;executing a system information collection tool to identify features of said computer system including information from a computer system registry;logging results of said executing into a collection log file as a plurality of entries;automatically analyzing said collection log file to determine entries of said log file that include said malicious software file name; andcreating a cleanup file including computer code arranged to delete malicious software associated with said entries that include said malicious software file name.