Patent ID: 8266243

Claim:
A computer-implemented method of identifying a source of malicious code, comprising: under control of one or more computer systems configured with executable instructions, receiving a feedback submission from at least one user device indicating a potential problem with malicious code corresponding to supplemental content provided by a third party content provider, the feedback submission including at least one piece of identifying information added to the submission by code executing on the user device; comparing information from the feedback submission with other received feedback information to determine whether at least a threshold number of feedback submissions have been received that relate to a similar potential problem; if at least a threshold number of feedback submissions relate to a similar potential problem: joining information for the feedback submissions with session data stored for users generating the feedback submissions; analyzing the joined information to assign percentages for at least a plurality of combinations of relevant parameters of the joined information, the percentages identifying a likelihood that the potential problem is related to a particular parameter value or combination of parameter values; and ranking at least a portion of the parameter values and combinations of parameter values by the assigned percentages; and providing the ranked values to at least one entity able to initiate an action to address the potential problem based at least in part upon the ranked values.