SYSTEM AND METHOD FOR NEUTRALIZING PESTWARE THAT IS LOADED BY A DESIRABLE PROCESS
摘要
<p>Systems and methods for managing pestware on a protected computer are described. In one implementation, a pestware construct is identified. Threads loaded by the pestware construct into a desirable process are identified and suspended. Neutralization of the pestware construct is accomplished by preventing code underlying pestware functions exported by the pestware construct from executing. In variations of the invention, registry entries associate with the pestware construct are detected and deleted, and the pestware construct is scheduled for deletion after the next reboot of a protected computer.</p>
申请公布号
WO2007050767(A2)
申请公布日期
2007.05.03
申请号
WO2006US41799
申请日期
2006.10.26
申请人
WEBROOT SOFTWARE, INC.;WILSON, MICHAEL, C.;HORNE, JEFFERSON, D.