Patent ID: 7895654
Filing Date: 2011-02-22
Classification: G06F,H04L

Abstract:
1. A computer implemented method for efficiently scanning files for malicious code, the method comprising the steps of: maintaining a non-tamperable record of modifications to files on a volume, the record of modifications to files indicating modification statuses of the files, a modification status indicating when an associated file was last modified, wherein maintaining the non-tamperable record further comprises: receiving at least one malicious code signature; establishing a defined time period measured as an amount of time prior to a current time at which scanning is to be performed; establishing a high priority for files last modified within the defined time period; establishing a low priority for files last modified prior to the defined time period; and scanning files on the volume for the at least one malicious code signature responsive to the established priorities, the scanning comprising scanning files having established high priorities prior to scanning files having established low priorities.