METHOD OF PROACTIVE SCANNING FOR MALICIOUS SOFTWARE Russian patent published in 2017 - IPC G06F21/56 

FIELD: information technology.

SUBSTANCE: method of scanning for detecting the malicious software presence is proposed, in which a directory access table is kept for tracking the access to the files contained in the general directory by the application, wherein the directory access table includes the path to the directory that contains the name or the logical location of the general directory, the number of operations, indicating the number of events of the access to the files in the general directory, and the state of the record, indicating whether the directory is in the state before scanning, the scanning state, or the state of the performed scanning; the events of the applications access to the files contained in the general directory are detected; the detected access events are used for the identification of one or more groups of files contained in the general directory, the access to which the application may want to implement in the future, while running the application; the specified one or more groups of files are scanned for detecting the malicious software presence while running the application and before the application tries to perform the access to the files of the group or groups.

EFFECT: minimization of delays while running the applications caused by scanning.

21 cl, 7 dwg