Patent ID: 8826424

Claim:
A computer program product embodied in a non-transitory computer readable medium that, when executing on one or more computers, performs the steps of: scanning code and discovering that the code is infected with malware; based on information obtained during the scan, predicting a function of the malware that presents a malware threat based on known patterns of malware infection relating to a type of executable software containing the code; in response to the prediction, adding a remediation software component to the code, the remediation software component providing a shell for the code that (a) permits the code to execute whereby original content of the code remains, and (b) disables execution of the function that is predicted to present the malware threat external to the shell, thereby remediating the malware threat by externally neutralizing the infection; identifying an unintended result of the remediation software component; and removing the remediation software component from the code at or prior to runtime of the code to restore the code to an original form.