Patent ID: 7971258
Filing Date: 2011-06-28
Classification: G06F,H04L

Abstract:
1. A system for detecting malware in a computer storage drive that stores computer readable code implementing at least a first operating system, said computer storage drive being installed in a computer system, the system comprising: a second operating system different from said first operating system; an analysis module configured to execute under said second operating system, said analysis module being further configured to ascertain, while said first operating system is inactive, at least a first boot-up parameter of said first operating system that would be involved in booting up said computer system if said first operating system had been activated instead, said analysis module being further configured to identify at least one of a first file and a first folder that said first boot-up parameter refers to; and a malware scanning engine configured for scanning, while said first operating system is inactive, said at least one of said first file and said first folder after said at least one of said first file and said first folder has been identified by said analysis module, said malware scanning engine being further configured for neutralizing said malware responsive to said scanning if said at least one of said first file and said first folder includes said malware, wherein said second operating system is configured to become dormant after said malware is neutralized in order to enable said first operating system to boot up said computer system.