Patent ID: 8776233

Claim:
A computer program product embodied on a non-transitory computer readable medium comprising instructions stored thereon to cause one or more processors to: identify a system as being infected with malware while the system in online mode; identify portions of the malware that can be fully removed from the system while the system remains in online mode; determine that at least a portion of the malware cannot be removed while the system remains in online mode; create, while the system is in online mode, a list of tasks to fully remove the malware from the system while the system is in offline mode, the list of tasks providing a description of actions required to fully remove the malware; obtain the list of tasks in a pre-boot environment while the system is in offline mode, wherein the pre-boot environment is provided by a chipset extension of the one or more processors; and process the list of tasks to complete removal of the malware while the system is in the pre-boot environment and in offline mode, wherein the system is in offline mode when the system is in the pre-boot environment and the system is not executing code of an operating system, a basic input output system (BIOS), or booting the operating system.