| 摘要 |
A method for scanning files for spyware and malware comprises identifying file names in a registry of at least one computer 602 and then scanning files associated with the file names 604. Since malware and spyware often manipulate the registry to ensure they are run by the operating system, the method scans all software that utilizes the registry in any manner. In another method a scan 654 is conditionally performed based on whether a change in the registry has been identified 652. In another method a scan may be scheduled e.g. on a periodic basis (701, fig. 7), or prompted by a change in the registry (702). Duplicate file names found in the registry may be removed prior to the scan (704, 710). The time required for performing the scan may be less than the time required for scanning files on hard-disks of the computer.
|
