Granted Patent B1

US 8,561,191 · App. 11/625,094 · Granted Oct 15, 2013

Abstract

Claims (29)

1. A method comprising:

scanning a computer using a detection system that includes a processor;

identifying unwanted code and at least one attribute of the unwanted code; and

generating an encoded name for the unwanted code, which includes malware, at least a portion of the encoded name including a hexadecimal value representing the at least one attribute of the unwanted code, wherein the encoded name reflects, at least, data utilized in detection of instances of the unwanted code in the computer, and wherein the encoded name is decoded and used for a notification that reflects a plurality of attributes of the unwanted code identified by the detection system, wherein generating the encoded name for the unwanted code comprises:

setting a bit associated with each of the at least one attribute, and wherein the bit is included in a series of bits, each of the bits being associated with a different attribute, wherein the encoded name of the unwanted code includes a value representing the at least one attribute of the unwanted code and a unique identifier, and wherein the name of the unwanted code is encoded utilizing a bitmask, wherein the bit is associated with a unique value, and wherein attribute information and unique value information is stored in a database for each bit.

2. The method of claim 1 , wherein the at least one attribute includes a type of the unwanted code.

3. The method of claim 1 , wherein the at least one attribute includes an effect of the unwanted code.

4. The method of claim 1 , wherein the at least one attribute includes a file format of the unwanted code.

5. The method of claim 1 , wherein the unique value includes a decimal value.

6. The method of claim 1 , wherein the unique value is utilized in encoding the name of the unwanted code.

7. The method of claim 1 , wherein generating the encoded name for the unwanted code further comprises calculating a sum of unique values associated with each set bit.

8. The method of claim 7 , wherein generating the encoded name for the unwanted code further comprises converting the sum to a different format.

9. The method of claim 8 , wherein converting the sum to the different format includes converting the sum from a decimal format to a hexadecimal format.

10. The method of claim 1 , and further comprising unencoding the name of the unwanted code utilizing an algorithm.

11. The method of claim 10 , wherein the unencoded name identifies the at least one attribute.

12. The method of claim 1 , wherein the hexadecimal value makes up the entire encoded name for the unwanted code.

13. The method of claim 1 , wherein the at least one attribute of the unwanted code is associated with an attribute topic, the attribute topic including mal ware attributes or file attributes.

14. The method of claim 13 , wherein a first attribute of the at least one attribute of the unwanted code is associated with a first attribute topic, and a second attribute of the at least one attribute of the unwanted code is associated with a second attribute topic.

15. A computer program product embodied on a non-transitory computer readable medium for performing operations, comprising:

scanning a computer;

identifying unwanted code and at least one attribute of the unwanted code; and

generating an encoded name for the unwanted code, which includes malware, at least a portion of the encoded name including a hexadecimal value representing the at least one attribute of the unwanted code, wherein the encoded name reflects, at least, data utilized in detection of instances of the unwanted code in the computer, and wherein the encoded name is decoded and used for a notification that reflects a plurality of attributes of the unwanted code identified by a detection system, wherein generating the encoded name for the unwanted code comprises:

setting a bit associated with each of the at least one attribute, and wherein the bit is included in a series of bits, each of the bits being associated with a different attribute, wherein the encoded name of the unwanted code includes a value representing the at least one attribute of the unwanted code and a unique identifier, and wherein the name of the unwanted code is encoded utilizing a bitmask, wherein the bit is associated with a unique value, and wherein attribute information and unique value information is stored in a database for each bit.

16. A system, comprising:

a computer including a processor, wherein code to be executed by the processor is configured for:

identifying unwanted code in a computer, and at least one attribute of the unwanted code;

generating an encoded name for the unwanted code, which includes malware, wherein at least a portion of the encoded name including a hexadecimal value that represents the at least one attribute of the unwanted code, wherein the encoded name reflects, at least, data utilized in detection of instances of the unwanted code in the computer, and wherein the encoded name is decoded and used for a notification that reflects a plurality of attributes of the unwanted code identified in the computer, wherein generating the encoded name for the unwanted code comprises:

setting a bit associated with each of the at least one attribute, and wherein the bit is included in a series of bits, each of the bits being associated with a different attribute, wherein the encoded name of the unwanted code includes a value representing the at least one attribute of the unwanted code and a unique identifier, and wherein the name of the unwanted code is encoded utilizing a bitmask, wherein the bit is associated with a unique value, and wherein attribute information and unique value information is stored in a database for each bit.

17. The system of claim 16 , further comprising a display and memory coupled to the processor via a bus.

Assignments (10)