Response to a computer virus outbreak
View Patent ↗When a computer virus outbreak is detected, a predefined sequence of steps are automatically or manually followed using rule definitions, that may include office hours, to invoke anti-virus counter-measures. The counter-measures can include reducing virus notification, increasing scanning options, blocking E-mail attachments, hiding E-mail address books and the like. The predetermined sequence of actions may be varied with the time of day and day of week.
1. A computer program product embodied on a computer readable medium for responding to detection of an outbreak of a computer virus on a computer apparatus, said computer program product comprising:
(i) sequence data defining a sequence containing a plurality of predefined actions to be followed upon detection of said outbreak;
(ii) outbreak detection code operable to detect said outbreak; and
(iii) sequence following code operable to follow said sequence of predefined actions;
wherein said sequence of predefined actions varies in dependence upon time of day.
2. A computer program product as claimed in claim 1 , wherein said sequence of predefined actions is user defined.
3. A computer program product as claimed in claim 1 , wherein one or more of said predefined actions is performed after receipt of a user input confirming said predefined action.
4. A computer program product as claimed in claim 1 , wherein one of said predefined actions is reducing virus detection notifications.
5. A computer program product as claimed in claim 1 , wherein one of said predefined actions is switching from virus quarantining to virus deletion when a computer virus is detected.
6. A computer program product as claimed in claim 1 , wherein one of said predefined actions is increasing scan options that control how thoroughly said computer system is scanned to detect a computer virus.
7. A computer program product as claimed in claim 1 , wherein one of said predefined actions is sending a copy of said detected computer virus to a remote site for analysis.
8. A computer program product as claimed in claim 1 , wherein one of said predefined actions is downloading a latest virus definition file from a remote site.
9. A computer program product as claimed in claim 1 , wherein one of said predefined actions is downloading a latest virus definition file from a remote site.
10. A computer program product as claimed in claim 1 , wherein one of said predefined actions is performing a complete virus scan of all computer files stored in at least a portion of said computer apparatus.
11. A computer program product embodied on a computer readable medium for responding to detection of an outbreak of a computer virus on a computer apparatus, said computer program product comprising:
(i) sequence data defining a sequence containing a plurality of predefined actions to be followed upon detection of said outbreak;
(ii) outbreak detection code operable to detect said outbreak; and
(iii) sequence following code operable to follow said sequence of predefined actions;
wherein said sequence of predefined actions varies in dependence upon day of week.
12. A computer program product embodied on a computer readable medium for responding to detection of an outbreak of a computer virus on a computer apparatus, said computer program product comprising:
(i) sequence data defining a sequence containing a plurality of predefined actions to be followed upon detection of said outbreak;
(ii) outbreak detection code operable to detect said outbreak; and
(iii) sequence following code operable to follow said sequence of predefined actions;
wherein one of said predefined actions is blocking e-mail attachments;
wherein said predefined action of blocking e-mail attachments blocks identical attachments appearing in excess of a threshold level.
13. A computer program product embodied on a computer readable medium for responding to detection of an outbreak of a computer virus on a computer apparatus, said computer program product comprising:
(i) sequence data defining a sequence containing a plurality of predefined actions to be followed upon detection of said outbreak;
(ii) outbreak detection code operable to detect said outbreak; and
(iii) sequence following code operable to follow said sequence of predefined actions;
wherein one of said predefined actions is rendering non-accessible e-mail distribution lists and e-mail address books of e-mail clients coupled to said computer apparatus.
14. A computer program product embodied on a computer readable medium for responding to detection of an outbreak of a computer virus on a computer apparatus, said computer program product comprising:
(i) sequence data defining a sequence containing a plurality of predefined actions to be followed upon detection of said outbreak;
(ii) outbreak detection code operable to detect said outbreak; and
(iii) sequence following code operable to follow said sequence of predefined actions;
wherein one of said predefined actions is restarting in administrator mode an e-mail post office coupled to said computer apparatus.
15. A computer program product embodied on a computer readable medium for responding to detection of an outbreak of a computer virus on a computer apparatus, said computer program product comprising:
(i) sequence data defining a sequence containing a plurality of predefined actions to be followed upon detection of said outbreak;
(ii) outbreak detection code operable to detect said outbreak; and
(iii) sequence following code operable to follow said sequence of predefined actions;
wherein one of said predefined actions is closing down an e-mail post office coupled to said computer apparatus.
16. A method of responding to detection of an outbreak of a computer virus on a computer apparatus, said method comprising:
(i) defining a sequence containing a plurality of predefined actions to be followed upon detection of said outbreak;
(ii) detecting said outbreak; and
(iii) following said sequence of predefined actions;
wherein said sequence of predefined actions varies in dependence upon time of day;
wherein said sequence of predefined actions is user defined.
17. A method of responding to detection of an outbreak of a computer virus on a computer apparatus, said method comprising:
(i) defining a sequence containing a plurality of predefined actions to be followed upon detection of said outbreak;
(ii) detecting said outbreak; and
(iii) following said sequence of predefined actions;
wherein said sequence of predefined actions varies in dependence upon time of day;
wherein one or more of said predefined actions is performed after receipt of a user input confirming said predefined action.
18. A method of responding to detection of an outbreak of a computer virus on a computer apparatus, said method comprising:
(i) defining a sequence containing a plurality of predefined actions to be followed upon detection of said outbreak;
(ii) detecting said outbreak; and
(iii) following said sequence of predefined actions;
wherein said sequence of predefined actions varies in dependence upon time of day;
wherein one of said predefined actions is reducing virus detection notifications.
19. A method of responding to detection of an outbreak of a computer virus on a computer apparatus said method comprising:
(i) defining a sequence containing a plurality of predefined actions to be followed upon detection of said outbreak;
(ii) detecting said outbreak; and
(iii) following said sequence of predefined actions;
wherein said sequence of predefined actions varies in dependence upon time of day;
wherein one of said predefined actions is switching from virus quarantining to virus deletion when a computer virus is detected.
20. A method of responding to detection of an outbreak of a computer virus on a computer apparatus, said method comprising:
(i) defining a sequence containing a plurality of predefined actions to be followed upon detection of said outbreak;
(ii) detecting said outbreak; and
(iii) following said sequence of predefined actions;
wherein said sequence of predefined actions varies in dependence upon time of day;
wherein one of said predefined actions is increasing scan options that control how thoroughly said computer system is scanned to detect a computer virus.
21. A method of responding to detection of an outbreak of a computer virus on a computer apparatus said method comprising:
(i) defining a sequence containing a plurality of predefined actions to be followed upon detection of said outbreak;
(ii) detecting said outbreak; and
(iii) following said sequence of predefined actions;
wherein said sequence of predefined actions varies in dependence upon time of day;
wherein one of said predefined actions is sending a copy of said detected computer virus to a remote site for analysis.
22. A method of responding to detection of an outbreak of a computer virus on a computer apparatus, said method comprising:
(i) defining a sequence containing a plurality of predefined actions to be followed upon detection of said outbreak;
(ii) detecting said outbreak; and
(iii) following said sequence of predefined actions;
wherein said sequence of predefined actions varies in dependence upon time of day;
wherein one of said predefined actions is downloading a latest virus definition file from a remote site.
23. A method of responding to detection of an outbreak of a computer virus on a computer apparatus, said method comprising:
(i) defining a sequence containing a plurality of predefined actions to be followed upon detection of said outbreak;
(ii) detecting said outbreak; and
(iii) following said sequence of predefined actions;
wherein said sequence of predefined actions varies in dependence upon time of day;
wherein one of said predefined actions is performing a complete virus scan of all computer files stored in at least a portion of said computer apparatus.
24. A method of responding to detection of an outbreak of a computer virus on a computer apparatus, said method comprising:
(i) defining a sequence containing a plurality of predefined actions to be followed upon detection of said outbreak;
(ii) detecting said outbreak; and
(iii) following said sequence of predefined actions;
wherein one of said predefined actions is blocking e-mail attachments;
wherein said predefined action of blocking e-mail attachments blocks identical attachments appearing in excess of a threshold level.
25. A method of responding to detection of an outbreak of a computer virus on a computer apparatus, said method comprising:
(i) defining a sequence containing a plurality of predefined actions to be followed upon detection of said outbreak;
(ii) detecting said outbreak; and
(iii) following said sequence of predefined actions;
wherein one of said predefined actions is rendering non-accessible e-mail distribution lists and e-mail address books of e-mail clients coupled to said computer apparatus.
26. A method of responding to detection of an outbreak of a computer virus on a computer apparatus, said method comprising:
(i) defining a sequence containing a plurality of predefined actions to be followed upon detection of said outbreak;
(ii) detecting said outbreak; and
(iii) following said sequence of predefined actions;
wherein one of said predefined actions is restarting in administrator mode an e-mail post office coupled to said computer apparatus.
27. A method of responding to detection of an outbreak of a computer virus on a computer apparatus, said method comprising:
(i) defining a sequence containing a plurality of predefined actions to be followed upon detection of said outbreak;
(ii) detecting said outbreak; and
(iii) following said sequence of predefined actions;
wherein one of said predefined actions is closing down an e-mail post office coupled to said computer apparatus.
28. A system including a computer program product embodied on a computer readable medium for responding to detection of an outbreak of a computer virus on a computer apparatus, said computer program product comprising:
sequence data storage storing sequence data defining a sequence containing a plurality of predefined actions to be followed upon detection of said outbreak;
outbreak detection logic operable to detect said outbreak; and
sequence following logic operable to follow said sequence of predefined actions;
wherein said sequence of predefined actions varies in dependence upon time of day.
29. A computer program product as claimed in claim 28 , wherein said sequence of predefined actions is user defined.
30. A computer program product as claimed in claim 28 , wherein one or more of said predefined actions is performed after receipt of a user input confirming said predefined action.
31. A computer program product as claimed in claim 28 , wherein one of said predefined actions is reducing virus detection notifications.
32. A computer program product as claimed in claim 28 , wherein one of said predefined actions is switching from virus quarantining to virus deletion when computer virus is detected.
33. A computer program product as claimed in claim 28 , wherein one of said predefined actions is increasing scan options that control how thoroughly said computer system is scanned to detect a computer virus.
34. A computer program product as claimed in claim 28 , wherein one of said predefined actions is sending a copy of said detected computer virus to a remote site for analysis.
35. A computer program product as claimed in claim 28 , wherein one of said predefined actions is downloading a latest virus definition file from a remote site.
36. A computer program product as claimed in claim 28 , wherein one of said predefined actions is downloading a latest virus definition file from a remote site.
37. A computer program product as claimed in claim 28 , wherein one of said predefined actions is performing a complete virus scan of all computer files stored in at least a portion of said computer apparatus.
38. A system including a computer program product embodied on a computer readable medium for responding to detection of an outbreak of a computer virus on a computer apparatus, said computer program product comprising:
sequence data storage storing sequence data defining a sequence containing a plurality of predefined actions to be followed upon detection of said outbreak;
outbreak detection logic operable to detect said outbreak; and
sequence following logic operable to follow said sequence of predefined actions;
wherein said sequence of predefined actions varies in dependence upon day of week.
39. A system including a computer program product embodied on a computer readable medium for responding to detection of an outbreak of a computer virus on a computer apparatus, said computer program product comprising:
sequence data storage storing sequence data defining a sequence containing a plurality of predefined actions to be followed upon detection of said outbreak;
outbreak detection logic operable to detect said outbreak; and
sequence following logic operable to follow said sequence of predefined actions;
wherein one of said predefined actions is blocking e-mail attachments;
wherein a said predefined action of blocking e-mail attachments blocks identical attachments appearing in excess of a threshold level.
40. A system including a computer program product embodied on a computer readable medium for responding to detection of an outbreak of a computer virus on a computer apparatus, said computer program product comprising:
sequence data storage storing sequence data defining a sequence containing a plurality of predefined actions to be followed upon detection of said outbreak;
outbreak detection logic operable to detect said outbreak; and
sequence following logic operable to follow said sequence of predefined actions;
wherein one of said predefined actions is rendering non-accessible e-mail distribution lists and e-mail address books of e-mail clients coupled to said computer apparatus.
41. A system including a computer program product embodied on a computer readable medium for responding to detection of an outbreak of a computer virus on a computer apparatus, said computer program product comprising:
sequence data storage storing sequence data defining a sequence containing a plurality of predefined actions to be followed upon detection of said outbreak;
outbreak detection logic operable to detect said outbreak; and
sequence following logic operable to follow said sequence of predefined actions;
wherein one of said predefined actions is restarting in administrator mode an e-mail post office coupled to said computer apparatus.
42. A system including a computer program product embodied on a computer readable medium for responding to detection of an outbreak of a computer virus on a computer apparatus, said computer program product comprising:
sequence data storage storing sequence data defining a sequence containing a plurality of predefined actions to be followed upon detection of said outbreak;
outbreak detection logic operable to detect said outbreak; and
sequence following logic operable to follow said sequence of predefined actions;
wherein one of said predefined actions is closing down an e-mail post office coupled to said computer apparatus.