System, method, and computer program product for removing malware from a system while the system is offline

摘要

A system, method, and computer program product are provided for removing malware from a system while the system is offline. In use, a system is identified as being infected with malware. Additionally, it is determined whether the malware can be fully removed from the system while the system is online. Further, at least part of the malware is conditionally removed from the system while the system is offline, based on the determining.

主权项

1. A computer program product embodied on a non-transitory computer readable medium comprising instructions stored thereon to cause one or more processors to:
identify a system as being infected with malware while the system in online mode; identify portions of the malware that can be fully removed from the system while the system remains in online mode; determine that at least a portion of the malware cannot be removed while the system remains in online mode; create, while the system is in online mode, a list of tasks to fully remove the malware from the system while the system is in offline mode, the list of tasks providing a description of actions required to fully remove the malware; obtain the list of tasks in a pre-boot environment while the system is in offline mode, wherein the pre-boot environment is provided by a chipset extension of the one or more processors; and process the list of tasks to complete removal of the malware while the system is in the pre-boot environment and in offline mode, wherein the system is in offline mode when the system is in the pre-boot environment and the system is not executing code of an operating system, a basic input output system (BIOS), or booting the operating system.