CLASSIFYING RANSOM NOTES IN RECEIVED FILES FOR RANSOMWARE PROCESS DETECTION AND PREVENTION

摘要

The present invention analyzes the text of a received file to determine if the file likely is a forensic artifact of a ransomware attack on a computer system. If the computer system concludes that the file is likely an artifact of a ransomware attack, the system terminates or ignores all related processes, thereby minimizing the harm caused to the computer system.