METHOD FOR DIAGNOSING A DATA-PROCESSING INSTALLATION INFECTED WITH COMPUTER VIRUSES

摘要

The method is characterised by using a virus-free program P containing an algorithm, from which a program authentication code PAC = f (P) is formed with the aid of the algorithm at time x = to and is stored together with the program. For testing purposes, this virus-free program is then input as decoy program into the data processing system to be investigated at later times x' = t1, t2, t3,...tn, and started, the program authentication code PAC' produced during this process in each case is compared with the stored program authentication code PAC and an error signal is generated if they are not equal.