Patent ID: 7877809

Claim:
A computer-implemented method of protecting a computer system against malware, comprising: using a processor to perform method steps comprising: detecting a malware infection in a first storage device volume of the computer system, wherein the malware causing the malware infection is a form of malware known to require a clean boot of the computer system for remediation of the malware; responsive to the detection of the malware infection, a security module of the computer system automatically modifying a basic input/output system (BIOS) boot sequence of the computer system to designate a second storage device volume to be a primary boot device for the computer system, causing the computer system to automatically boot from the second storage device volume of the computer system at a next reboot of the computer system; executing update software stored in the first storage device volume; updating, by execution of the update software, security software stored in the second storage device volume, the second storage device volume being a fixed read-only volume; and remediating the malware infection using the updated security software stored in the second storage device volume.