Patent ID: 8739284

Claim:
A computer-implemented method for blocking and removing Internet-traversing malware, the method comprising: identifying, at a computing device of a user that comprises at least one processor, a cookie file that was created by a web browser installed on the computing device and that contains session information that is used to access an account of the user; identifying, at the computing device, an attempt by the web browser executing on the computing device to access the cookie file; determining that the web browser is attempting to access the cookie file on behalf of an executable object; determining, at the computing device, that the executable object is not authorized to access the cookie file by: generating a score based at least in part on at least one of: multiple characteristics of the executable object that indicate that the executable object's attempt to access the cookie file is unauthorized; multiple characteristics of the web browser's attempt to access the cookie file that indicate that the executable object's attempt to access the cookie file is unauthorized; determining that the score exceeds a predetermined threshold; and in response to determining that the executable object is not authorized to access the cookie file, blocking the attempt by the web browser to access the cookie file.