Granted Patent B2

US 8,752,171 · App. 12/876,037 · Granted Jun 10, 2014

Abstract

Claims (33)

1. A non-transitory computer readable medium comprising instructions stored thereon that when executed, cause one or more processors to:

identify a plurality of events on a system utilizing behavioral tracking, wherein the plurality of events includes one or more classified events and one or more unclassified events;

display a list of one or more of the unclassified events of the plurality of events, that are associated with user-initiated actions;

receive user input associated with an unclassified event of the displayed list of one or more unclassified events, wherein the input includes a selection by the user associated with a symptom resulting from the at least one of the unclassified events, wherein the at least one of the unclassified events is determined to be associated with the symptom; classifying the unclassified event as an unwanted event; and

undoing the associated user-initiated action in response to receiving the input, placing the system in a state as though the associated user-initiated action had not occurred.

2. The non-transitory computer readable medium of claim 1 , wherein the behavioral tracking includes analyzing behaviors of the system to identify the unclassified events.

3. The non-transitory computer readable medium of claim 1 , wherein the unclassified events include at least one of accessing content and executing code.

4. The non-transitory computer readable medium of claim 1 , wherein the user input includes selection of an unclassified event of the displayed list of unclassified events.

5. The non-transitory computer readable medium of claim 1 , wherein the list of unclassified events include at least a portion of the unclassified events identified within a predetermined amount of time.

6. The non-transitory computer readable medium of claim 1 , wherein the list of unclassified events is displayed to the user in response to a user request.

7. The non-transitory computer readable medium of claim 6 , wherein the user request is received in response to the user selecting a preconfigured option from a drop down menu displayed upon selection by the user of an icon on a task bar.

8. The non-transitory computer readable medium of claim 1 , wherein the symptom includes at least one pop-up window.

9. The non-transitory computer readable medium of claim 1 , wherein the at least one of the unclassified events is determined to be a source of the symptom.

10. The non-transitory computer readable medium of claim 1 , wherein the at least one of the unclassified events is automatically determined to be associated with the symptom.

11. The non-transitory computer readable medium of claim 1 , wherein the at least one of the unclassified events is manually determined to be associated with the symptom.

12. The non-transitory computer readable medium of claim 1 , wherein the at least one of the unclassified events associated with the input is automatically classified as an unwanted event.

13. The non-transitory computer readable medium of claim 1 , wherein the at least one of the unclassified events associated with the input is manually classified as an unwanted event.

14. A method, comprising:

identifying, by a processor, a plurality of events on a system utilizing behavioral tracking, wherein the plurality of events includes one or more classified events and one or more unclassified events;

displaying a list of one or more of the unclassified events of the plurality of events that are associated with user-initiated actions;

receiving, by the processor, user input associated an unclassified event of the displayed list of one or more unclassified events, wherein the input includes a selection by the user associated with a symptom resulting from the at least one of the unclassified events, wherein the at least one of the unclassified events is determined to be associated with the symptom;

classifying the unclassified event as an unwanted event; and

undoing, by the processor, the associated user-initiated action in response to receiving the user input, placing the system in a state as though the user-initiated action had not occurred.

15. A system, comprising:

a processor;

a memory, coupled to the processor, on which are stored instructions, comprising instructions that when executed cause the processor to:

identify a plurality of events on a system utilizing behavioral tracking, wherein the plurality of events includes one or more classified events and one or more unclassified events;

display a list of one or more of the unclassified events of the plurality of events-that are associated with user-initiated actions;

receive user input associated with an unclassified event of the displayed list of one or more unclassified events, wherein the input includes a selection by the user associated with a symptom resulting from the at least one of the unclassified events, wherein the at least one of the unclassified events is determined to be associated with the symptom;

classify the unclassified event as an unwanted event; and

undo the associated user-initiated action in response to the receipt of the input, placing the system in a state as though the user-initiated action had not occurred.

16. The method of claim 14 , wherein the user input includes a selection by the user associated with a symptom resulting from the at least one of the unclassified events, wherein the at least one of the unclassified events is manually determined to be associated with the symptom.

17. The system of claim 15 , wherein the input includes a selection by the user associated with a symptom resulting from the at least one of the unclassified events, wherein the at least one of the unclassified events is manually determined to be associated with the symptom.

Assignments (10)