Abstract: A system, method, and computer program product for identifying malware components on a computer, including detecting an attempt to create or modify an executable file or an attempt to write to a system registry; logging the attempt as an auditable event; performing a malware check on executable files of the computer; if malware is detected on the computer, identifying all other files created or modified during the auditable event, and all other processes related to the auditable event; terminating the processes related to the auditable event; deleting or quarantining the executable files created or modified during the auditable event; and if the deleted executable files include any system files, restoring the system files from a trusted backup. Optionally, all files and processes having a parent-child relationship to a known malware component or known infected file are identified. A log of auditable events is maintained, and is recoverable after system reboot.

Abstract: A system, method and computer program product for treating a malware in a computer having multiple copies of the same malicious code activated, where the multiple copies monitor each other's existence, including (a) identifying a presence of the malicious code on the computer; (b) blocking actions that permit one active copy of the malicious code to activate another copy of the malicious code; (c) deleting, from persistent storage, a file containing executable code of the malware; and (d) rebooting the computer. The actions include disabling writes to the persistent storage, disabling writes to a system registry, and/or blocking activation of new processes. The blocking utilizes a driver loaded into the kernel space. The identifying can use signature identification for malware detection.

Abstract: An apparatus for use in imaging an area of interest within a patient's body, including a stationary frame; a rotating assembly mounted on the stationary frame, the rotating assembly including an axle assembly having a substantially horizontal axis of rotation, an X-ray source having a focal spot that coincides with the horizontal axis of rotation; a collimator from which a fan-shaped X-ray beam exits towards a detector assembly, and a rotating frame mechanically coupled to the detector assembly and pivoting about the horizontal axis of rotation. The detector assembly includes a linear X-ray detector for detecting radiation of the fan-shaped X-ray beam after the beam passes through the area of interest, and is mechanically coupled to a motor that enables arcuate movement of the detector assembly in a transverse direction. The motor is mechanically coupled to the rotating assembly to enable rotational movement of the rotating assembly.

Abstract: A computer system includes an Open Bus Hypervisor having the highest privilege level. An Open Bus Hypervisor is a set of modules that operate on the root level. The Open Bus Hypervisor provides support for processing, filtering and redirecting of low level events. The Open Bus Hypervisor is used primarily for maintenance and support of computer virtualization features, which are implemented within computer system CPU. Additionally, the Open Bus Hypervisor can be used for supporting new hardware and software modules installed on a computer system. A Virtual Machine Monitor (VMM) runs with fewer privileges than the Open Bus Hypervisor. A Primary Virtual Machine (PVM) runs without system level privileges and has a Primary Operating System (POS) running within it.

Abstract: A system, method and computer program for launching an application into a host OS, include storing a snapshot/image of a Virtual Execution Environment (VEE) on a portable device, wherein the VEE snapshot is packed into a self-extracting file; launching the VEE from the portable device on a computer connected to the portable device; and starting a user application within the VEE. The VEE snapshot can be restricted in one of its total usage time or absolute time. The VEE can be, e.g., a Virtual Private Server or a Virtual Machine. The user application is a non-native application for a host OS of the computer. The VEE is launched from an icon on the portable device. The portable device can be, e.g., an iPod, a flash memory card, a digital player, a mobile phone device, a portable gaming device, rewritable CD/DVD/HD DVD/Blu Ray disk and write-once CD/DVD/HD DVD/Blue Ray disk.

Abstract: The present invention discloses a cable-driven manipulator comprising an operating unit having a drive motor, and a pulley rotated by the drive motor. An upper arm is coupled, through a joint, to one side of the operating unit. A forearm coupled, through a joint, to the other side of the upper arm by the cable. A gripper of an end effector operably coupled to the forearm, a cable compensation device is installed between the upper arm and the forearm so as to maintain constant the length of the cable that transmits the power of the operating unit to the end effector during the pivoting of the forearm. It is thus possible to prevent the variation of tensile force due to the variation of the length of the cable for operating the end effector during the pivoting of the forearm or the unintended malfunction of the end effector.

Abstract: A method, system and computer program product for managing tasks, including receiving an e-mail from a user, the e-mail including a subject line and at least one recipient, wherein the recipient is or is not registered in a task management system; parsing the e-mail to identify a task; adding the task to a task database of the task management system; adding the sender and recipient to a database of the task management system if needed. A web interface is provided for the sender and the recipient to interface with the task management system. The e-mail can be sent to multiple recipients and some of the recipients might not be registered with the task management system. The subject line of the e-mail is parsed for the task identification like name of the task. The subject line of the e-mail is also parsed for a due date and the due date is added to task parameters. The subject line of the e-mail is also parsed for groups in which the task should be included.

Abstract: The present invention is directed to method, system and computer program product for managing dynamic content of website. The proposed method employs processing of database elements by using active descriptors. The active descriptors contain the generic descriptions of the database elements, which properties may change with time. The dynamic descriptors are used for describing database objects. The controls build are universal and can be employed for processing several classes of objects. Each class object has sets of assigned attributes containing additional descriptions of the class object. The proposed method allows using a lightly loaded thin nucleus of the DBMS, which does not contain the information about the class attributes. The class attributes are defined by active descriptors of each particular instance of the class object.

Abstract: A system, method and computer program product for controlling virtual servers includes a plurality of virtual servers running on a host computer. An address and a unique identifier can be associated with each virtual server. A control procedure(s) is within each corresponding virtual server, and can be used to control that virtual server in response to control commands. A control interface is outside the virtual servers and can be used for control of the virtual servers in response to control commands. The virtual server can be a Virtual server. The control command can be executable by both the control procedure(s) and the control interface, or can be executable by the control interface if the control procedure(s) is unreachable, or can be executable by the control interface if the virtual server has failed, or can be executable even if the virtual server is inaccessible. The control interface can be accessible by using multiple addresses and identifiers.

Abstract: A system and method for managing administration of security services provided to users includes a computer system and an operating system running on the computer system. A plurality of Virtual Execution Environments (VEEs) are executed on the computer system. The VEEs can be any of a Virtual Private Server, a Virtual Machine, a Hypervisor-based Virtual Machine, and a Lightweight Hypervisor-based Virtual Machine, a session of Terminal Server and a session of Presentation Server, Lightweight Hypervisor-based Virtual Machines, VMM-based VMs or hypervisor-based VMs. Each VEE provides a set of services to remote users. One or more designated VEE(s) provide security services to each of the VEEs based on the needs of the remote users of the particular VEEs. The security services provided by the designated VEE can be firewall services, spam filtering and anti-virus protection.

Abstract: A system and method for multivolume file system backup without suspending activity of user application programs uses a file system snapshot of two and more partitions or volumes of the storage device, or two and more data storages, significantly increasing computer system availability and allows backing up two and more partitions of the storage device without interrupting computer services. Backup procedure is performed online, simultaneously creates snapshots of two and more partitions of the storage device or storage devices in the pre-selected point of time and copies data blocks from partitions into the backup storage device, optionally through the intermediate storage device.

Abstract: A method for managing archived data includes creating a plurality of images of storage devices of computing systems and for, different users, each image being associated with a restore point of a particular storage device; storing the images for the different users in different storage locations, the storage locations being controlled by a single backup server and belonging to storage pools. Multiple locations of one user are stored in different pools on different storage devices. The method also involves moving contents of locations of one user from one pool to another in predefined direction, simultaneously with reorganizing images within the locations. Each image is a backup of one user's data. At least some of one location's content is frozen so that it is never moved from one pool to another.

Abstract: A system, computer program product and method for a running process migration with planned minimized down-time. The method facilitates fast and efficient process migration by performing background data synchronization prior to actual process migration. The service slowdown is reduced by employing two-stage transfer method. During a first stage the service, being executed on the original machine, does not stop and all the available data required by this process is being copied. After the first stage is completed the service continues to be executed without an interruption, while the most of the data associated with the service process is already transferred to the new machine. During the second stage the execution of the service on the first machine is stopped. The files, which were not available during the first stage, are now copied. Then the execution of service is started on the second machine. The down-time is reduced to the duration of the second stage.

Abstract: A system, method and computer program product for consolidation of backups, wherein each backup includes data and a backup map with offsets that point to data of current and/or previous backups, including selecting a plurality of backups to be consolidated; combining the offsets in the backup maps of the selected backups into a single set of offsets; consolidating the selected backups to a new backup that contains the latest data from the selected backups, the latest data determined based on the offsets in the single set; updating the offsets in the single set to point to the data in the new backup; and storing the updated offsets in the new backup as part of a backup map of the new backup. The selected backups comprise one initial full backup and at least one backup. In the combining step, the addresses from the backup maps of first backup of the selected sequence of backups up to the last created backup is checked. The selected backups are organized into a tree.

Abstract: A system and method for optimizing a process of synchronization of a database of files checked by an anti-virus (AV) application implemented as a special AV driver. The database is updated by a special interface application using a log file and the AV driver cache. The AV driver monitors modifications of the files and records modification-related information in the context of the modified files. The AV driver creates and maintains a log of modified files. The AV driver supports a circular cache containing minimal required information about the modified files. This information is used for identification of the modified files by an application providing an interface between the AV driver and the database of checked files.

Abstract: Self-expandable bifurcation stent and systems for delivery and implantation of the self-expandable bifurcation stent, comprising a self-expandable bifurcation stent made of a material possessing shape memory, capable of shaping a mesh with cylindrical surface and marked by radioactive labels, and the delivery system for its implantation, comprising a polymeric tubular catheter with a cap at the distal end, a guiding wire and a pushing wire, where the tubular catheter is executed double-barreled, one lumen accommodating the guiding wire, and the second lumen accommodating the pushing wire with a cap at its distal end, which cap is executed in the shape of a polymeric elastic cap put over the tubular catheter accommodating, between the polymeric elastic cap and the tubular catheter, the stent in the first position with the reduced diameter, the cap is executed with the capability of distal 5 moving along the guiding wire and along the tubular catheter accommodating the stent, by means of the pushing wire, and w

Abstract: Continuous data protection is performed as two parallel processes: copying a data block from the storage device into the backup storage device (creating initial backup) and copying the data block to be written to the data storage into the incremental backup. When a write command is directed to a data storage block, it's intercepted and redirected to the backup storage, and data, which is to be written in accord to the write request, is written to the incremental backup on the backup storage. If write command is also directed to a data storage block identified for backup that has not yet been backed up, the identified data storage block is copied from the storage device to the intermediate storage device, the write command is executed on the identified data storage block from the storage device, and the data storage block is copied from the intermediate storage device to the backup storage device. In case of an error accessing a block on the storage device, the block is marked as invalid.

Abstract: A method and system for balancing the load of computer resources among a plurality of computers having consumers consuming the resources is disclosed. After defining the lower threshold of the consumption level of the resources and obtaining the consumption level of the resources for each of the consumers and for each of said computers, the consumption level for each of the computers is compared during a period with its associated lower threshold. Whenever a computer having a consumption level of the resources higher than the lower threshold is identified, a new layout of computer resources for each of the consumers is determined. Consumers are then shifted from their current location in the computer to a corresponding location in another computer according to the layout, so that the consumption level of the resource(s) for a computer may be reduced.

Abstract: A system, method and computer program product for anti-malware processing of data stream that includes a plurality of logical data streams formed from a primary data stream; and a plurality of stream buffers, each buffering data of a corresponding logical data stream. A plurality of processing handlers each associated with one of the data streams, where the handlers are processing the data of the logical data stream buffered by its stream buffer. Each processing handler is associated with a particular functionality and at least one processing handler scans its logical data stream for malware presence. Each stream buffer has a configurable buffering policy. At least one of the processing handlers decompresses the data into one or more secondary streams. At least one of the processing handlers parses its logical data stream, creating one or more instances of secondary data streams. The scanning can be based on a signature search.

Abstract: A method of on-the-fly patching of executable code includes placing a block of modified instructions in memory, identifying a block of code to be changed, storing instructions to be changed from the block of code to be changed in a storage location, change the instructions to be changed to mark instructions, and adding a jump to the block of modified instructions in the block of code to be changed. Prior to the placing and the identifying steps, a write flag for a page in memory where the block of code to be changed is located is set to allow writes, and interrupts are masked. The instructions are replaced in reverse order. The mark instructions are the same length, in bytes, as the instructions to be changed. The modified instructions include a resolver to determine a number of instructions of the block of code to be changed that had already been executed. If the number is less than a number of instructions to be changed, then a “no patch installed” scenario is imitated.