Patent ID: 8752179
Filing Date: 2014-06-10
Classification: G06F

Abstract:
1. A security arrangement for removing malware from a computer system, the security arrangement comprising: computing hardware, including a processor, a data store, and input/output facilities; an operating system and application programs executable on the computing hardware; an inspection module that monitors operation of the operating system and application programs for a presence of malware, and generates an inspection log representing operational history of the operating system and the application programs; a treatment scenario execution module that obtains, from the remote service a pre-evaluated treatment scenario which contains a specific set of instructions that represent a sequence of actions to be executed for removing any malware present on the computer system, as detected by the log analyzer module, the pre-evaluated treatment scenario having been generated specifically for use by the computer system by a scenario generator module based on the information contained in the inspection log and on a knowledge base of malware removal rules, the generated treatment scenario having been further pre-evaluated by a scenario side-effect evaluation module based on a knowledge base of side-effects relating to malware treatment actions and on the information contained in the inspection log, such that the actions represented by the instructions of the generated treatment scenario that are associated with a risk of damaging the operating system or the application programs of the computer system are automatically modified to reduce the risk; and