Patent ID: 8381298
Filing Date: 2013-02-19
Classification: G06F

Abstract:
1. A computer-implemented method for detecting and managing potential malware, the method comprising: receiving a preliminary signature for detection of potential malware; scanning content items for the potential malware using the preliminary signature; identifying, from among the content items that have been scanned, a particular content item having a characteristic that matches the preliminary signature; detaining the particular content item in a detention location at a start time; receiving an updated signature for detection of the potential malware before expiration of the time period; upon receipt of the updated signature, releasing the particular content item from detention, and automatically rescanning the particular content item for the potential malware using the updated signature; managing the particular content item in accordance with a policy whose outcome depends upon a result of the rescanning, and quarantining the particular content item within the detention location if the time period expires during which an updated signature is not received, wherein the quarantined content item is encoded to prevent re-scanning, and