发明名称 System, method, and computer program product for simulating at least one of a virtual environment and a debugging environment to prevent unwanted code from executing
摘要 A system, method, and computer program product are provided for simulating at least one of a virtual environment and a debugging environment to prevent unwanted code from executing. In use, at least one of a virtual environment and a debugging environment is simulated. Additionally, unwanted code is prevented from executing as a result of the simulation.
申请公布号 US8782615(B2) 申请公布日期 2014.07.15
申请号 US200812102512 申请日期 2008.04.14
申请人 McAfee, Inc. 发明人 Kollberg Dirk;Kumar Lokesh;Gudgion Kevin Andrew
分类号 G06F9/44;G06F9/455;G06F11/36 主分类号 G06F9/44
代理机构 Wong, Cabello, Lutch, Rutherford & Brucculeri, LLP 代理人 Wong, Cabello, Lutch, Rutherford & Brucculeri, LLP
主权项 1. A non-transitory computer readable medium comprising computer executable instructions stored thereon to cause a processor to: identify a request to execute an executable file on a computer system, the executable file containing unwanted code that is created to be disabled from executing in at least one of a virtual environment and a debugging environment; and simulate at least one of the virtual environment and the debugging environment based on the identification, wherein the unwanted code determines not to execute as a result of the simulation, wherein the simulation comprises one or more innocuous actions to make the computer system appear to the unwanted code to be executing at least one of the virtual environment and the debugging environment when there is no virtual environment or debugging environment active.
地址 Santa Clara CA US