Patent ID: 8904525

Claim:
A method of detecting malware on a mobile device which stores a virtual machine image, the method comprising: establishing a connection from an electronic malware detection apparatus to the mobile device, the electronic malware detection apparatus being external to the mobile device; transferring mobile device data from the mobile device to the electronic malware detection apparatus through the connection to form a copy of the virtual machine image within the electronic malware detection apparatus; performing, by the electronic detection apparatus, a set of malware detection operations on the copy of the virtual machine image to determine whether the mobile device is infected with malware; and further comprising: prior to transferring the mobile device data from the mobile device to the electronic malware detection apparatus, transitioning the mobile device from (i) a normal operating mode in which the mobile device data is allowed to dynamically change to (ii) a quiesced mode in which the mobile device data is unchanging.