Abstract: Malware with fake or misleading anti-malware user interfaces (UIs) are detected. Processes running on a computer system are monitored and their window creation events are detected. The structures of the created windows are retrieved to detect presence of UI features that are commonly presented in known fake or misleading anti-malware UIs (“fakeAVUIs”). If a window includes a UI feature commonly presented in known fakeAVUIs, that window is determined suspicious and additional tests are applied to determine the validity of information in the window. If the information in the window is determined invalid, then the process that created the window is determined to be malware and a remediating action is applied to the process.

Abstract: In one embodiment, a computer accessible medium comprises a plurality of instructions which, when executed and if a computer system comprises at least one virtual hardware device, identify the virtual hardware device and a corresponding physical hardware device. The plurality of instructions also capture a device driver associated with the physical hardware device for use as the device driver in an install of an operating system on a second computer system having a same type of physical hardware device. Corresponding computer systems and methods are also described.

Abstract: In one embodiment, a backup/restore mechanism is contemplated which may be used to consolidate application servers from a cluster to a single node and/or to restore a clustered environment. The mechanism may automatically consolidate shared resources on a node during a restore, even if the resources were external to the nodes in the cluster (e.g. on a shared storage device). Thus, complex and error prone manual intervention may be avoided, in some embodiments. In some embodiments, the backup mechanism may include checking identifiers for each node and application server in a cluster server data base, to identify node backups as opposed to application server backups. Local node resources may be associated with the node backups, and shared resources may be associated with the application server backups.

Abstract: In some embodiments, a computer accessible medium comprises a plurality of instructions which, when executed: cause a modification of an image of files created from a computer system having first hardware; and cause the image to be copied to a computer system having second hardware different from the first hardware. A difference between the first hardware and the second hardware necessitates that the modification of the image be performed. For example, the difference may indicate that a different device driver is to be included in the image, or that HAL or kernel code is to be changed. A similar method of modifying the image and copying the image is also contemplated.

Abstract: A mapping tool for hierarchical storage mapping may include a storage hierarchy representation interface, a command interface and remapping software. The storage hierarchy representation interface may be configured to provide a user with representations of a source storage hierarchy and target storage devices, where the source storage hierarchy may include a source storage device with one or more contained storage devices. The command interface may allow the user to request a hierarchical mapping of the source storage device to one or more target storage devices. The remapping software may be configured to create a mapping of the source storage device and the contained storage devices to storage within the target storage devices.

Abstract: In one embodiment, a computer accessible medium comprises a plurality of instructions which, when executed, parse at least a section of an input file to identify: (i) one or more driver information files, if at least one driver information file is listed in the section, and (ii) one or more first device drivers, if at least one device driver is listed in the section. If at least one driver information file is listed in the section, the plurality of instructions parse each of the one or more driver information files to identify: (i) one or more second device drivers, if at least one device driver is included in the driver information file, and (ii) one or more miniport drivers, if at least one miniport driver is included in the driver information file. The plurality of instructions select a selected device driver from the first device drivers, the second device drivers, and the miniport drivers.