REMOVING TRACK OF HARMFUL ACTIVITY FROM OPERATING SYSTEM, WHICH IS NOT DOWNLOADED ON COMPUTER DEVICE AT PRESENT

摘要

FIELD: information technology.;SUBSTANCE: invention relates to a system and method for eliminating the consequences of deleting a harmful file during an anti-virus scan of an inactive operating system (OS) that is installed and not started on the computer. The system contains: an OS enumeration tool designed to find the installed inactive OS, to determine the logical drive identifiers for each installed inactive OS; a file searching tool designed to conduct an anti-virus check of the files of the inactive OS; an inactive OS cleaning tool configured to find and remove data associated with the removed harmful file on the logical drives of the checked inactive OS, based on the comparison of the logical drive identifiers in the active OS and in the checked inactive OS when specifying the full path to the file; a critical file monitoring tool designed to test the remote harmful file on the criticality and when the file is critical to the inactive OS, to install a safe file version in the remote location of the harmful file.;EFFECT: preventing errors when starting or performing of the operating system after removing a harmful file from the specified operating system when the operating system is inactive.;6 cl, 5 dwg, 1 tbl