Patent ID: 8621610
Filing Date: 2013-12-31
Classification: G06F,H04L

Abstract:
1. A system for detecting, analyzing and quarantining unwanted files in a computing environment, comprising: a computer processor; a file history data store that stores an indicia for each of a plurality of candidate files previously analyzed by the system; a detection engine that receives the plurality of candidate files for inspection, analyzes the plurality of candidate files to identify an unwanted candidate file, and logs indicia for each of the plurality of candidate files in the file history data store, wherein the detection engine sends an indicia for the unwanted candidate file to a retrospective detector and is embodied as computer executable instructions executed by the computer processor; and the retrospective detector is configured to receive the indicia for the unwanted candidate file analyzed by the detection engine and operates, in response to the indicia for the unwanted candidate file, to search the plurality of candidate files in the file history data store for candidate files that match the unwanted candidate file, the retrospective detector performs corrective action in relation to any candidate file in the plurality of candidate files that match the unwanted candidate file and is embodied as computer executed instructions executed by the computer processor.