Generic disinfection of programs infected with a computer virus

Details Generic disinfection of programs infected with a computer virus Generic disinfection of programs infected with a computer virus

1994-11-21

1997-03-18

Tarcza, Thomas H.

Cryptography

Cryptanalysis

395186, 39518701, 39518801, 39518312, 39518314, 39518315, 3642854, 3642864, 380 25, H04L 900, H04K 100

Patent

active

056130023

ABSTRACT:
A method for restoring a computer program infected with a computer virus to its non-viral condition. The method uses certain information about an uninfected host program recorded prior to infection without relying upon pre-existing knowledge of the computer virus. The method includes: recording a checksum of the uninfected original program, the length of the program, and information pertaining to bytes located near the beginning and end of the original program; and, subsequent to any modification of the original program that is deemed suspicious, generating one or more trial reconstructions based on the recorded information and information contained in the modified file; comparing a checksum of each generated trial reconstruction with the checksum of the original program stored in the database; and outputting a trial reconstruction as the original uninfected program if its checksum matches that of the original program.

REFERENCES:
patent: 5050212 (1991-09-01), Dyson
patent: 5349655 (1994-09-01), Mann
patent: 5367682 (1994-11-01), Chang
patent: 5408642 (1995-04-01), Mann
patent: 5442699 (1995-08-01), Arnold et al.
patent: 5473769 (1995-12-01), Cozza
patent: 5475625 (1995-12-01), Glaschick
patent: 5485575 (1996-01-01), Chess et al.
"Calculating CRC's By Bits and Bytes" Sep. 1986 pp. 115-124 Bytes Magazine, Greg Morse.
"Virus Verification and Removal--Tools and Techniques" Virus Bulletin Nov. 1991 UK pp. 7-11 D. M. Chess.

Affiliated with

Also associated with

Rating

Generic disinfection of programs infected with a computer virus does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Generic disinfection of programs infected with a computer virus, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Generic disinfection of programs infected with a computer virus will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-1711868