Patent ID: 9392016
Filing Date: 2016-07-12
CPC Classification: G06F,H04L

Claim Text:
1. An article of manufacture, comprising: a non-transitory computer readable medium; computer-executable instructions carried on the non-transitory computer readable medium, the instructions readable by a processor, the instructions, when read and executed, for causing the processor to: trap, at a higher priority than all operating systems of the electronic device, an attempted access to a particular memory location in memory of the electronic device, the attempted access indicating a presence of self-modifying malware, the electronic device including one or more operating systems; analyze information in the history associated with the particular memory location to determine suspicious behavior with respect to the particular memory location, wherein analyzing information includes: initiate corrective action in response to determining suspicious behavior respect to the particular memory location; determine whether the particular memory location has been affected by malware; and initiate further corrective action in response to determining that the particular memory location has been affected by malware, comprising at least one of: