Patent ID: 7640583
Filing Date: 2009-12-29
Classification: G06F

Abstract:
1. A method for protecting information used by an anti-malware program from an attack by a mal ware program, the method comprising: identifying an item of information used by an anti-malware program to be protected from an attack by a malware program; obfuscating the identified information by altering the identification of the information, altering the identification of the information comprising each of changing a file name of a first file, changing a file signature of the first file, and changing a file size of the first file; and identifying a signature of a detection engine employed by the malware program, the detection engine is employed by the malware program to detect the obfuscated information and the identified signature of the detection engine facilitates detection of the malware program by the anti-malware program, a signature of employment of a detection engine comprising at least one of opening a file associated with the detection engine, writing to a file associated with a detection engine, altering identification of information of a file associated with a detection engine, or changing the value of a variable found in the code for a detection engine; wherein changing the file signature of the first file includes: