FIELD: information technology.
SUBSTANCE: method of correcting antivirus records includes steps of checking availability of status correction data for the detected antivirus record when checking an entity on a personal computer. Further, status correction data are transmitted to the computer if there are status correction data for the detected antivirus record, and actions provided by status correction data for the detected antivirus record are also carried out. Data on the entity and the detected antivirus record are also transmitted to a remote server when checking said entity if there are no status correction data for the detected antivirus record, to which the checked entity corresponds, in order to determine collision and correct the status of the detected antivirus record.
EFFECT: minimising false triggering when using status corrections for detected records which define a trusted and clean entity as a malicious entity.
17 cl, 5 dwg
