Patent ID: 8863289

Claim:
A method for detection and treatment of computer malware, the method comprising: connecting a portable security device to a computer; performing at least one malware detection experiment by the security device on the computer, wherein the at least one malware detection experiment includes simulating by the security device a connection to the computer of a simulated data storage device containing a predefined set of data, wherein the connection of the simulated data storage device to the computer is simulated by transferring at least a portion of the predefined set of data by the security device to the computer; identifying modifications in the set of data contained in the simulated data storage device after termination of the at least one malware detection experiment; performing antivirus analysis of the modified set of data to determine if the modifications to the set of data were performed by a malware on the computer; determining a treatment mechanism for the detected malware; and performing treatment of the detected malware on the computer.