1. A computer implementable method of monitoring file integrity comprising computer-executable code stored on a computer-readable medium, for performing the steps of:
(a) intercepting an operating system request to change a timestamp of a file by detecting an invocation of the operating system timestamp change function;
(b) in an antivirus application, maintaining a counter of a number of times the timestamp change function was invoked;
(c) updating the counter each time the timestamp change function is invoked to change the timestamp;
(d) in the antivirus application, comparing the counter to a prior value, so as to detect a change of the timestamp using the operating system timestamp function that occurred without a file system writing to the file, where the counter changed but the timestamp of the file does not accurately reflect the change; and
(e) performing additional analysis of the file by the antivirus application if the counter does not match the prior value that was maintained by the antivirus application.
2. The method of claim 1, wherein steps (a)-(d) are performed for multiple files, and wherein each file has a corresponding counter and a corresponding timestamp.
3. The method of claim 2, wherein the counters are maintained in a database.
4. The method of claim 2, wherein the antivirus application maintains a database of a number of times the timestamps of the files have been modified.
5. The method of claim 1, wherein the operating system timestamp change request is generated by a user application.
6. The method of claim 1, wherein access to the counter is restricted to a timestamp monitoring driver that maintains the counter.
7. The method of claim 1, wherein access to the counter is granted to a timestamp monitoring driver that maintains the record.
8. A system for monitoring file integrity, the system comprising:
a processor;
a memory operatively coupled to the processor;
computer loaded into the memory, the computer code implementing the following functionality:
an operating system timestamp change function that sets a file modification time upon invocation;
an interceptor that detects when the timestamp change function is invoked without using a file system to write to the file;
a record associated with the file and updated when a timestamp of the file is changed using the timestamp change function, the record including a counter of a number of times the timestamp has been modified using the operating system timestamp change function; and
an antivirus application that changes its behavior if a current value of the counter does not correspond to the a prior value of the counter maintained by the antivirus application, where the counter changed but the timestamp of the file does not accurately reflect the change,
wherein the antivirus application performs additional antivirus analysis of the file if the current value and the prior value of the counter do not match.
9. The system of claim 8, wherein the system maintains records for multiple files, and wherein each file has a corresponding record.
10. The system of claim 9, wherein the records are maintained in a database.
11. The system of claim 8, further comprising a antivirus application database that the antivirus application uses to compare the record of the driver with its own records.
12. The system of claim 8, wherein the record contains an update on each invocation of the operating system timestamp change function.
13. The system of claim 8, wherein the antivirus application maintains a database of timestamp counters.
14. A computer useable storage medium having computer program logic for monitoring file integrity stored thereon, the computer program logic used for executing on a processor, the computer program logic comprising:
computer program code means for intercepting an operating system request to change a timestamp of a file by detecting an invocation of the operating system timestamp change function;
in an antivirus application, computer program code means for maintaining a counter of a number of times the timestamp change function was invoked
computer program code means for updating the counter each time the timestamp change function is invoked to change the timestamp;
in the antivirus application, computer program code means for comparing the counter to a prior value, so as to detect a change of the timestamp using the operating system timestamp function that occurred without a file system writing to the file, where the counter changed but the timestamp of the file does not accurately reflect the change; and
computer program code means for performing additional analysis of the file by the antivirus application if the counter does not match the prior value that was maintained by the antivirus application.
15. A computer implementable method of monitoring file integrity comprising computer-executable code stored on a computer-readable medium, for performing the steps of:
(a) intercepting a system request to change a timestamp of a file;
(b) updating a record of a number of times the timestamp has been changed;
(c) in response to an antivirus application requesting the record, providing, to the antivirus application, the record for comparison with information maintained by the antivirus application; and
(d) changing behavior of a user application if the record does not correspond to the information maintained by the antivirus application, where the record changed but the timestamp of the file does not accurately reflect the change.
16. The method of claim 1, wherein the antivirus application stores a previous value of the timestamp and also compares the previous value of the timestamp to a current value of the timestamp.
17. The method of claim 1, further comprising automatically starting an antivirus scan of the file if the counter changed but the timestamp of the file does not accurately reflect the change.
18. The method of claim 6, further comprising querying the monitoring driver for the timestamp and the counter value.
19. The method of claim 2, wherein steps (a)-(d) are performed for some, but not for all, files of the file system.
The claims below are in addition to those above.
All refrences to claim(s) which appear below refer to the numbering after this setence.
1. Electrical appliance that can also be used in industry for cooling or freezing products with maximum speed (1), characterized by being configured from enclosing walls (4), consisting of a metal plate support (3) that covers moisture-proof, fire-retardant or other insulators insulation paneling (2), so that these walls (4) generate a receptacle or interior space (6), being assembled with each other through, for example, brackets (5) , anchored at the rear of the electrical appliance (1), which will always have an opening in which to install a door (7), hinged or removable by sliding.
2. Electrical appliance that can also be used in industry for cooling or freezing products with maximum speed (1), according to the previous claim, characterized by the incorporation of turbines (8) on the inner face of all or part of the walls (4) generating the electrical appliance (1) itself, redirecting all of the air (9) into the interior space (6), as well as by the incorporation of a coil (13) with inlet port (14) and outlet port (16) which are connected directly to a compressing motor (15), said coil (13) being housed in a space or chamber (12) which is created between the turbines (8) and perforated plates (11), delimiting the entire interior space (6) where the foods or beverages (24) that need to be cooled or frozen with maximum speed of execution shall be deposited on a swivel base (25), being also possible to replace the simple coil (13) by a coil (13) integrated in a radiator or condenser with many cells that dissipate all the air (9) much more effectively to the interior space (6), and even another radiator or condenser configuration, tubular or enveloping, with or without cells, linked in any case to a coil (13) through which the gas (10) flows.
3. Electrical appliance that can also be used in industry for cooling or freezing products with maximum speed (1), according to the previous claims, characterized by a gas (10) called R410A being preferably the gas (10) used as refrigerant, or, in the case of disappearance of specifically that gas (10), one with the most similar characteristics as possible, acquiring it packaged in cylinders or cartridges (17) equipped with safety valves (19) together with special pressure gauges (20), suitable for the high pressures of this gas (10) R410A, such that the cartridge (17) is linked to the compressing motor (15) by ducts (18) and, therefore through the inlet (14) and outlet (16) port to the coil (13), creating a circulation circuit of the gas (10) R410A, which, if appropriate and in order to lengthen the life of the electrical appliance (1) may be mixed with non-mineral oils, such as for example polyester oil or polyvinyl ether oil.
4. Electrical appliance that can also be used in industry for cooling or freezing products with maximum speed (1), according to all the previous claims which is characterized by having a console or control panel (21), associated with a circuit board (22), from which are selected processing times, temperatures and other programmed or programmable actions and, also characterized by including, like any electrical appliance that operates with air (9), a relief area (23), through which the air (9) may exit without prejudice of the features provided in the interior space (6) of the electrical appliance (1).
5. Electrical appliance that can also be used in industry for cooling or freezing products with maximum speed (1), according to all the previous claims, characterized by the novel double filtration system (26) object of the addition, incorporated in the apparatus (1) for industrial or domestic use which achieves very rapid cooling of products such as beverages or food, for example, cans, bottles, tarts, etc. (24), in a few minutes, which being applicable for domestic and commercial use in bars, restaurants, ice cream parlors, etc, where it can serve for rapid cooling, which is characterized by being configured from the claims already mentioned in the initial patent, incorporating the new double filtration system (26), which specifically assembled in the outlet duct of the evaporator coil (13) generates speed in the relative times of the process thus accelerating the cooling and reducing the cycle time, which system is also applicable in industry for cooling with maximum speed, according to all the previous claims that characterize the system essential for accelerating the processes and cooling features, this system can have two or more filters, for greater cooling efficiency and uniformity; the terms used for describing the present claims of the patent shall always be construed broadly and without limitation.