Patent ID: 7269851

Claim:
A program stored on a computer-readable medium for controlling a managing computer to manage malware protection within a computer network containing a plurality of network connected computers, said computer program product comprising: receiving code for receiving at said managing computer a plurality of log data messages identifying detection of malware by respective ones of said plurality of network connected computers; detecting code for detecting from said plurality of log data messages received by said managing computer a pattern and a network-wide threshold of malware detection across said plurality of network connected computers matching at least one predetermined trigger, the network-wide threshold being applied to a sum of detections, the detections each being associated with a different one of the network connected computers; wherein said plurality of network connected computers each have a malware scanner for scanning computer files to detect malware within said computer files; action performing code, responsive to detection of one of said at least one predetermined trigger to perform at least one predetermined anti-malware action; wherein predefined network-wide thresholds and patterns are provided as templates; and wherein the predefined network-wide thresholds and patterns are customized based on a network being protected.