Systems and methods for optimizing antivirus determinations

Abstract

Systems and methods for optimizing an antivirus determination for executable files are disclosed. Optimization by excluding from an antivirus check executable files such as dynamic libraries and / or resource files that do not contain executable code speeds up the overall antivirus determination. An optimization system generally includes an antivirus system. The antivirus system generally includes a check tool and an executable file detection system. The executable file detection system generally includes a breakdown tool, an analysis tool, and a database. The antivirus system can be operably coupled to an antivirus server via the Internet.

Description

[0001] related application [0002] This application claims the benefit of Russian Federation Patent Application No. 2015145266 filed on October 22, 2015, which is hereby incorporated by reference in its entirety. technical field [0003] Embodiments generally relate to antivirus checks on executable files. More specifically, embodiments relate to systems and methods for strategically excluding executable files from antivirus checking to optimize the antivirus evaluation process. Background technique [0004] Executing executable files or portable executable (PE) files, each of which may include dynamic libraries or dynamic link libraries (DLLs), can be dangerous to users of the computer system. Malicious codes are mainly spread using such executable files (such as viruses and Trojan horse programs, for example). Therefore, antivirus determinations (or inspections) of such files are recommended before executing or running executable files. Traditional antivirus checking ...

AI Technical Summary

Problems solved by technology

However, these methods have a very big disadvantage; specifically, the aforementioned list (manifest) needs to be established in advance

Images