Okamoto & Benedicto LLP
Detection of fake antivirus in computers
Detection of fake antivirus includes classifying text content of a user interface of an application program and scanning files associated with the application program for suspicious code. The user interface may be a graphical user interface (GUI) window of the application program. The text content may be obtained from a painted portion of the GUI window and by intercepting text changing operations performed on the GUI window. The text content may be input to a learning model to determine whether or not the application program belongs to the antivirus category. The application program is deemed to be fake antivirus when the application program is classified as belonging to the antivirus category and has a file with suspicious code.
Trend Micro Incorporated
H G G G H G G G G
H04L G06F G06F G06F H04L G06F G06F G06F G06F
additional inventional additional inventional additional inventional additional additional additional
Chia-Chi Che-Fu Sheng-Chuan
Chang Yeh Yen