Patent ID: 8763129

Claim:
A computer implemented method comprising: recognizing that a first software module is being loaded into a first operating system process running on a computer; checking to see if the first software module is a known vulnerable software module and if the first software module is a known vulnerable software module then marking the first operating system process as a vulnerable process, and if the first software module is not a known vulnerable software module then checking to see if the first software module is marked do not run and if the first software module is marked do not run then blocking the first software module from loading; recognizing that a new file is being written in the computer by the first operating system process; and checking to see if the new file is an executable file and if the new file is an executable file then checking to see if the first operating system process is marked as a vulnerable process, and if the first operating system process is marked as a vulnerable process then marking the new file as do not run.