Patent Document ID: 8935788
Application ID: 12252205
Patent Flag: 1

Claim One:
1. A method of detecting a virus in a target file comprising: receiving a scan level, wherein said scan level is a first scan level, a second scan level or a third scan level; locating in the target file, using a computer, one or more target virus features belonging to a features list, wherein the features list contains virus features extracted from a set of virus patterns in a virus pattern file that represent known viruses, said set of virus patterns defining a border within a feature space; generating a target feature vector from the one or more located target virus features representing said target file; determining whether said target feature vector is located within said border of the feature space and ending said method of detecting when it is determined that said target feature vector is not located within said border; when said scan level is said second scan level or said third scan level and it is determined that said target feature vector is located within said border, determining whether the target file belongs to a virus group from a plurality of virus groups and ending said method of detecting when it is determined that said target file does not belong to one of said virus groups; and when said scan level is said third scan level and it is determined that said target file belongs to a virus group from said plurality of virus groups, matching the target file against a subset of said set of virus patterns stored within a segment of said virus pattern file, wherein the segment of said virus pattern file is associated with the virus group.