Patent ID: 9514309
Filing Date: 2016-12-06
CPC Classification: G06F

Claim Text:
1. A computer-implemented method for protecting files from malicious encryption attempts, at least a portion of the method being performed by a computing device comprising at least one processor, the method comprising: detecting, using a filter that monitors activity on the computing device, an attempt to alter a file stored on the computing device; identifying at least one characteristic of the attempt to alter the file; determining, based on the characteristic of the attempt to alter the file, that the attempt to alter the file comprises a malicious attempt by a third party, which is not a legitimate owner of the file, to encrypt the file in a manner that would prevent the legitimate owner of the file from both decrypting and accessing the file; and performing, in response to determining that the attempt to alter the file comprises the malicious attempt by the third party to encrypt the file, a security action that allows the legitimate owner to continue to access an unencrypted version of the file despite the malicious attempt by the third party to encrypt the file.