Patent ID: 8082587

Claim:
A method for detecting undesirable content in a computer directory comprising: determining whether the computer directory contains more than a predetermined number of files having an acceptable file format, the computer directory storing different types of files that are separately usable in different operations of a computer, the determining being performed with respect to the different types of files in the computer directory; if the computer directory does not contain more than the predetermined number of files having the acceptable file format, flagging the directory as undesirable and stopping detecting undesirable content in the computer directory; if the computer directory contains more than the predetermined number of files having the acceptable file format, performing a size check on a digital file in the computer directory, the size check returning a first passing condition or a first failing condition; if the size check returns the first passing condition, the method further comprises: performing one or more behavioral indicator checks on the digital file; and determining whether the digital file contains undesirable content based on the one or more behavioral indicator checks.