WO2012156782A1

WO2012156782A1 - Safety system and portable filter module with several connection means for reading, virus identification and removal from data transport devices and computers in general

Info

Publication number: WO2012156782A1
Application number: PCT/IB2011/052168
Authority: WO
Inventors: Edson Ruivo DA SILVA
Original assignee: Da Silva Edson Ruivo
Priority date: 2011-05-17
Filing date: 2011-05-17
Publication date: 2012-11-22
Also published as: BR112013029431A2

Abstract

Safety system and portable filter module with several connection means for reading, virus identification and removal from data transport devices and computers in general, more precisely, this is a system of the type conceived to prevent, detect and eliminate viruses ( V) from equipment such as computer (PC) and other data transport ( DT) devices, such as pen-drives (a), mobile phones (b), cameras ( c ), memory cards (d) and other apparatuses, or also computers ( PC ), notebooks (Nb), tablets (Tb) and the like; the security system (1) is configured in a portable filter module (2), where said system (1) comprises a computer program (3) having a processor (P) and memories (M) containing a database (BD1) with several antiviruses (AV1), previously installed in the filter module (2), which is also equipped with several connector models (C1) for several types of data transport (DT) devices, and equipped with a communicating means (C2 ) for access, at real time, to Internet server (s) (SI) and databases (BD2 ) with several antiviruses (AV2 ); the portable filter module provides an interface panel (PF) with the user, composed of a display (T) and buttons (B),

Description

"SAFETY SYSTEM AND PORTABLE FILTER MODULE WITH SEVERAL CONNECTION MEANS FOR READING, VIRUS IDENTIFICATION AND REMOVAL FROM DATA TRANSPORT DEVICES AND COMPUTERS IN

GENERAL" ,

The present invention provides a safety system and. product as a portable filter module applied for reading, identification and removal of virus existing in data (information) transport devices, such as pen-drives, microcomputers, notebooks, mobile phones and other apparatuses, wherein said system includes a computer program having several antiviruses, previously installed or real-time updated, upon filter module use, whose said portable filter module is equipped with several connection means, allowing coupling of several kinds of apparatus for data transport device and/or computers scanning before the data transfer, as well as promotes infected data transport devices and/or computers healing.

FIELD OF THE ART

The creation of mobile and portable data transport devices triggered the creation of several threats to computerized systems, and this is a concern in computers time. As those data transport devices grow, such as pen- drives, mobile phones, cameras, notebooks and the like, as well as access to operating systems, Internet servers or known applications installed on most computers worldwide gets easier, the communication network increased data interchange, resulting in the infection of uncountable computers and said data transport devices.

For the aforementioned reason, and considering data query exchange in data transport devices computers within environments as schools, colleges, universities, the invasions of threats transported by users increased, when they connect their devices (mobile phone, cameras, GPS, memory cards, tablets, among other data transports) to several computers.

Those threats and infections took on several forms, and are usually related to computer virus, which, once installed in any device, infects the system to which it is connected, replicates itself and tries to spread to other computers, by using several auto-executable means, or other malicious codes forms. Some viruses are broadly known, such as "Time-bomb", programmed to become ertain times established by their creator (e.g.: "Friday 13^th", "Michelangelo"); others are programmed to damage the system of infected users and start programming their viruses in such a way that they only replicate, without he purpose of causing severe damage to the system (Worms) ; or other additional ones, such as Tro ans, Hi_jackers (programs or scripts "hijacking" Internet browsers, among others.

On the other hand, current antiviruses are part of an operating system with applications which, usually installed in computers, analyze the data within the system and try to operate as per their characteristics, which may be by scanning known viruses, heuristic sensing, algorithmic search, integrity checking or other forms of execution.

However, it is known in the art that those analyses may not be a secure assurance for the system, as usually the computers or devices are not scanned or read by ail kinds of existing programming, thus, there is the huge disadvantage that the reading by installed antivirus (es ) does not detect all viruses effectively, allowing, then, threats to enter the system.

The scenario is still worse when computers are connected to one or more data transport devices, because, as it is known in the art , a large part of those devices are not read before the connect to computers , and might jeopardize all their security .

BACKGROUND OF THE ART

Several computer programs are already known in the art, which work as antiviruses, such as Norton

Antivirus Security®, AVG Internet Antivirus SEcurity® and others, mostly of the type installed in the equipment to be checked periodically.

Recently, Kaspersky Labs, a cybersecurity group with headquarters in Russia, was granted the patent for an antivirus via hardware, i.e., an apparatus trying to secure the computer by means of a physical element connected to its hard drive, below rootkit access. The solution proposed is providing the computer with an antivirus getting deeper than the virus can get. This is the apparatus as it was explained in the patent: An antivirus ( AV ) system based on an AV module implemented via hardware for healing infected computer systems and as a method for updating AV databases for healing infected systems. The hardware based AV system is located between a PC and a disk device. The hardware based system may be implemented as a separate device or may be incorporated to a disk controller. An AV database updating method uses a two-phase method. First, updating is transferred from a reliable utility to an AV system updating sector. Then, updates are validated within the AV system and AV database are updated. The AV system has its own CPU and memory, which may be used in conjunction with AV application.

The disadvantage of that system is that it is not available yet to be used in a itinerant way and provided with ail existing data transports.

PURPOSE AND OBJECTS OF THE INVENTION

Considering the requirements from national and international market, a portable filter module has been planned, which is intended to remove threats from data transports before they are connected to computers, household equipment and other electronic devices. The invention provides more security, as the portable filter module including the protection system comprises an independent hardware, capable of updating existing antiviruses at real time and of analyzing, out of any operating system or applications, any type of data transport device before it is connected to the computer. Hence , secure protection is provided to data transport , devices, equipment , household appliances , and the like . DESCRIPTION OF THE INVENTION

The present invention comprises a security system and product as a portable filter module applied for reading,- identification and removal of virus existing in data (information; transport devices. Said filter module is intended to provide an on-line or off-line antivirus system to heal the infected data transports, analyze data correction and analyze correct operation.

The invention allows its user to transport the filter module anywhere, and it may have varying formats, such as a keychain, for easier handling, applied to equipment as computers, notebooks, mobile phones, household appliances, or even automobiles and anywhere else the user wishes or is required to use.

The invention provides a portable module which removes threats and recognizes any data transport device when it is connected to it, and which is automatically started or started by the user. The invention includes a security system comprising a database with several types of antiviruses capable of analyzing and filtering data (information) present in the transport devices, by comparing those antiviruses present in the database to extraction methods in digital signatures, malicious codes, malicious codes standards and the like, with the comparison to its database using several parameters , such as size, date, binary codes and the like .

The database is accessed when a device or equipment is connected to any of the filter module ports by means of two operating modes, namely: (a) off-line - the memories containing the antivirus listing are accessed by the filter module disconnected from the network; and (b) on-line - the database is updated at real-time remotely using several remote connection servers via cable or wireless network.

The portable filter module off-line mode works with a communication processor between the memories, communication ports and their input ports facing the several connectors in the data transport equipment .

When recognizing the equipment connected to their ports, the system checks if the device or equipment is working, and informs its status to the user by means of an interface, for example, via led, sound device or display. Thus, the system shows the user that the device or equipment reading process has automatically started, and so, the user, by means of the display interface and cleaning or quarantine buttons, may choose that:

The system automatically starts monitoring and scanning for threats, and when finding them, warns the user by means of visual or sound warnings, removing them and continuing scanning;

Option CLEAR starts monitoring and scanning for threats, and when finding them, warns the user by means of visual or sound warnings, deleting threats pointed out;

- Option "Quarantine" starts monitoring and scanning for threats, and when finding them, warns the user by means of visual or sound warnings, compacting or making the threats found inoperable, by moving them to a specific folder named "QUARANTINE"; thus, after checking and monitoring, the user may analyze this folder later in his computer .

Invention mode "on-line", on its turn, works with a communication processor between memories, corctiu.n c3.tion DO! s and connection ports to data transport equipment .

When recognizing the equipment connect to one of its ports, the system checks, at first, if it is working, and informs such status to the user by means of visual or sound warnings, indicating, thereafter, that device scanning is automatically started via remote communication. At that time the portable filter module connects to several servers for on-line analysis of data from the equipment connected, allowing the user, by using the display and other control buttons, to choose:

- automatic mode where the system starts monitoring and scanning for threats, and when finding them, warns the user by means of visual or sound warnings, removing them and continuing scanning ;

- Option Clear starts monitoring and scanning for threats, and when finding them, warns the user by means of visual or sound warnings, automatically deleting the threats ;

- Option "Quarantine" starts monitoring and scanning for threats, and when finding them, warns the user by means of visual or sound warnings, compacting or making that threat found inoperable, by moving it to a specific folder named "QUARANTINE" ; thus, after checking and monitoring, the user may analyze this folder in his compute ;

The invention portable filter module may be developed in several formats, with several types of universal access ports for connecting electronic devices and equipment, with an interface to indicate equipment status to the user, checking them by the internal system of the filter module itself, located in internal memories, and it is executed by a processor fed by internal or external battery energy.

Said portable filter module, in a construction option, may be applied to computers, notebooks, household appliances, car dashboards, mobile phones, tablets, telephones and electronic equipment structures, regardless the equipment, by using only electrical power for feeding, ensuring, thus, higher security to the equipment, for being separated from an interconnection. This model may be considered an external filter for analysis of data transport devices or equipment, before they connect to other equipment.

Examples: A) - On the sides of his notebook, the user connects a data transport device, analyzes it with the module filter and then connects it to another notebook with higher security; B) installed on the side of household appliances, such as TV, with the same function; C) Car dashboard; 4) Mobile phone side; 5) Telephones; 6} Tablets; 8) every electronic equipment with data systems.

Although the exemplary environment described herein uses a pen-drive, a flash memory, a removable unit and other removable devices, it shall be considered by those skilled in the art any other types of data transport devices transporting and storing data / information, such as flash memory cards, external hard drive, portable computers, mobile phones, telephones and the like.

The portable filter module has an internal battery that may be charged via USB connection in the computer, USB or solar output source.

The filter module databases updating has a two-phase approach. First, updates are transferred via cable connected to a computer, which connects the database to the remote server , discharging, thus , new updates for internal memories, and another one via direct connection to the se ve , using a wire-provided or wireless network, discharging information obtained from internal memories.

Other characteristics and advantages of the invention will be defined in the following description, and will in part be visible from the description, or may be learned from practicing the invention. The invention advantages will be performed and attained by the structure especially indicated in the written description and its claims, as well as the appended drawings.

It shall be clear that both the general description above and the detailed description as follows are exemplary and for explaining purposes, and are intended to provide more explanations on the claimed invention.

BRIEF DESCRIPTION OF THE DRAWINGS

The accompanying drawings, which are included to proviae better understanding of the invention, and are incorporated and a part of the present specification, illustrate concreti zaticns of the invention and, along with the description, are intended to explain the invention principles.

Figure 1 depicts a general scheme of the system and portaole filter module used for scanning and cleaning viruses from data transport devices such as pen- drives, computers, cameras , and the like;

Figure 2 depicts a structural diagram of elements comprised by the security system, including a block diagram of the main components / functions present in the portable filter module when on off-line mode;

Figure 3 depicts a structural diagram of the elements comprised by the security system, including a block diagram of the main components / functions present in the portable filter module when on on-line mode, however, using the access to the se ver by means of a direct connection to the network, or wireless;

Figure 4 depicts a structural diagram of the elements comprised by the security system, including a block diagram of the main components / functions present in the portable filter module when on on-line mode, however, using the access to the server b means of computer;

Figure 5 depicts a flowchart for the operation of the security system executed by the portable filter module through operating modes, namely, on-line and off-line;

Figure 6 shows a perspective view of the portable filter module, representing the invention by means of a preferred constructive embodiment;

Figure 7 shows a perspective top view of the portable filter module showing the opposite side to the one in the previous figure;

Figure 8 depicts the portable filter module in perspective and at least two inlet options for battery electric power charging, i.e., by a pin connector or USB;

Figure 9 depicts the filter module connection to a computer for charging power via USB cable;

Figure 10 depicts a first access option from the filter module to the remote server for updating its internal database, in this example, by means of communication through wireless mobile phone technology;

Figure 11 depicts a second access option from the filter module to the remote server for updating its internal database, in this example, by means of communication through wireless wi-fi technology;

Figure 12 depicts a third access option from the filter module to the remote server for updating its internal database, in this example, by means of communication through network cable;

Figure 13 depicts a fourth access option from the filter module to the remote server for updating its internal database, in this example, by means of connection via a USB cable to a computer, here a notebook, which is connected to an Internet modem;

Figure 14 depicts a fifth access option from the filter module to the remote server for updating its internal database, in this example, the portable filter module connects to a microcomputer (notebook) , which, on its turn, accesses the server by means of a wireless apparatus;

Figure 15 depicts the portable filter module performing reading and cleaning on a mobile phone by means of a USB connection, and updating its internal database, m this example, by wireless system, to a remote server;

Figure 16 depicts the portable filter module performing reading and cleaning on a camera by means of a USB connection, and updating its internal database, in this example, by wireless system, to a remote server;

Figure 16 depicts the portable filter module performing reading and cleaning on a tablet by means of a USB connection, and updating its internal database, in this example, by communication via cable to a modem and the latter to a remote server;

Figure 18 depicts the portable filter module performing reading and cleaning on a pen-drive by means of a USB connection, and updating its internal database, in this example, by communication via USB cable to a microcomputer and the latter, on its turn, to a modem communicating with the remote server;

Figure 19 depicts the portable filter module performing reading and cleaning on a pen-drive by means of appropriate connecters , and updating its internal database, in this example, by communication, via a wireless system, from a microcomputer related to a modem and remote server;

Figures 20 and 21 depict several security system application versions performed by the portable filter module via USB cable or the like, related to data / information transport devices or equipment;

Figure 22 depicts the portable filter module performing reading and cleaning on a conventional CPU hard disk, by means of a USB connection, and updating its internal database, in this example , by communication from the CPU to a modem and the latter, to a remote server;

Figure 23 depicts the portable filter module performing reading and cleaning on a conventional notebook hard disk, by means of a USB connection, and updating its internal database, in this example, by remote communication to a modem and the latter, to a remote server;

Figures 24 and 25 depict the several connection means developed for the several data transport devices and equipment,

DETAILED DESCRIPTION OF THE INVENTION

According to the appended figures, the present invention security system (1) and product as a portable filter module (2), both applied for reading, identification and removal of virus (V) existing in data I information) transport (DT) devices, such as pen-drives (a) , mobile phones (b) , cameras (c) , memory cards ( d) and other apparatuses , or also computers (PC), notebooks (Nb) , tablets (Tb) and the like, capable of being connected to module (2) by means of several connectors (CI) or data cables (Cb) said system (1) including a computer program (3) having a processor (P) and memories (M) containing a database ( BD1 ) with several antiviruses (AVI), previously installed in the filter module (2) . Said portable filter module (2) is also equipped with a connection means (C2) for access, at real time, to Internet server (s } (SI) to programs providing databases (BD2) with several antiviruses (AV2) . The portable filter module provides an interface panel (PF) with the user, composed of a display (T) and buttons (B) , explained later on herein.

Said portable filter module (see figures 1 and 2) is equipped with ports (PI) and converters (V) for connectors (CI ; identification, for direct coupling of several types of data transport (DT) devices (s) and/or computers (PC) to, by means of the processor (PRC), perform the reading of files (AQ) in said devices (DT) / computers (PC), in order to promote their scanning / healing, either if they are infected with viruses (V) or not.

Said filter module (2) (see figures 1 and

3) is also equipped with port(s) (P2 } and converter (s) (V) for connecting a communicator (C2 ) , which, by means of the processor ( P ) , operates on apparatuses (API), equipped with remote communicators, such as wi-fi systems, radiofrequency and the like, with or without data cables, capable of communicating with Internet servers (SI) and respective programs providing databases (BD2 ) with several antiviruses ( AV2 } , in order to perform files (AQ) reading for said devices (DT) / computers (PC) , in order to promote their scanning / healing, either if they are infected with viruses (V) or not .

In a construction varying when compared to the previous one , the filter module (2) (see figures 1 and

4) is also equipped with port is) (P3) and converter (s) (V) for connecting a cable or communicator (C2) , which, by means of the processor (P) , operates in computers (PC), notebooks (Nb) , or others equipped with remote communicators ( C 3 ) , capable of communicating with Internet servers (SI) and respective programs providing databases (BD2) with several antiviruses (AV2), m order to perform files (AQ) reading for said devices (DT), in order to promote their scanning / healing, either if they are infected with viruses (V) or not .

Said portable filter module (2) comprises, in a preferred construction option, a small box, composed of base (2a) and cover or fairing (2b), on which the on/off button (20) is disposed. The fairing (2b) top face comprises the interface with the user, comprising a status panel or display with indicator lights (10), namely: (i) green, for on status (10a), (ii) yellow for scanning status (10b) and (iii) red for threats found (10c) and buttons for choosing on-line mode (11a), off-line mode (lib) and decision buttons, namely quarantine button (11c) and cleaning button. ("Clear") (lid) . A sound interface is provided, composed of an amplifier and a sound box (12) . The fairing top face (2a) includes a liquid crystal display (T) or the like, used for text alphanumeric communication.

The portable filter module (2) box provides several types of connectors or inlets (CI) for several models of data transport ( DT) devices, and the main ones are: USB connector (13) for data cables or other device, such as pen-drive (a), connector RJ45 (14), retractable wi- fi antenna (15), micro SD inlet (16), pin connector (17) for battery charger (Bt) cable (Cb' ) , SD / MC / memory stick/duo inlet, Compact Flash, Smart Media (18) and the like, appropriate to any type of media or data transport device (DT) requiring their files (AQ) to be checked for viruses .

System (1) operation by means of the portable filter module (2) is simple. Thereto, the main operating steps are as follows:

a) When turning the device on, it will light the green indicator or led (10a) , and wait for the user to connect to any inlet or connector (CI), a data transport (DT) device;

b) when connecting the transport device (DT), the status display ( 11 ) is started, and stares informing, on the interface panel ( PF) display (T) if the user wishes to choose using on-line or off-line mode for executing the antiviruses (AV1/AV2), which choice shall be defined by using buttons (11a) and (lib), respecti ely;

c } if the user chooses on-line mode (11a) , the module (2) connects to a database (BD2) in an Internet server (SI), by means of a network via cable (Cb) or remote connection - wireless - C2/C3 , to start scanning the data transport (DT) device connected to any of the connectors (CI);

a) when that is done, the interface panel (10) warns the user, by means of the yellow indicator or led (10b) , about the scanning status;

e) if any threat or virus (V) is found, the sound interface (12) is activated, sending a warning signal, while lighting the red indicator or led (10c);

f ) the interface panel (PF) , by means of the display (T) , shows two options for the user to decide: (i) "clean threats / viruses" (V) or (ii) "store in quarantine"; any of the decisions shall be taken by selecting buttons (lie) or (lid);

5) if the user chooses button "cleaning" (11c) , the virus (V) will be deleted from the data transport (DT) device, allowing the scanning to continue, and, when it finds another hrea ., the option is again shown on the display, and so on;

i) if the user chooses the button "quarantine" (lid), the program or software (3) creates, automatically, a file folder in the data transport (DT) device itself, a file self-named as "quarantine", and also compacts this threat / virus and transfers it to said folder, allowing the user to, on a later time, analyze it in an appropriate computer;

i) when that is done, the scanning is continued until ending;

li the sound interface (12) warns about the scanning operation ending via a message on the display (T) and sound effect ,

Claims

l^a) "SAFETY SYSTEM AND PORTABLE FILTER MODULE WITH SEVERAL CONNECTION MEANS FOR READING, VIRUS IDENTIFICATION AND REMOVAL FROM DATA TRANSPORT DEVICES AND COMPUTERS IN GENERAL" , more precisely, this is a system of the type conceived to prevent , detect and eliminate viruses (V) f om equipment such as computer (PC) and other data transport (DT) devices , such as pen-drives (a) , mobile phones (b) , cameras ( c ) , memo cards (d) and other apparatuses, or also computers (PC), notebooks (Nb) , tablets (Tb) and the like, characterized in that the security system (1) is configured in a portable filter module (2), wherein said system (1) comprises a computer program (3) having a processor (P) and memories (M) containing a database (BD1) with several antiviruses (AVI), previously installed in the filter module (2), which is also equipped with several connector models (CI) for several types of data transport (DT) devices, and equipped with a communicating means (C2) for access, at real time, to Internet server (s) (SI) and databases (BD2) with several antiviruses (AV2) the portable filter module provides an interface panel (PF) with the user, composed of a display (T) and buttons (B) . 2^a) "SECURITY SYSTEM AND PORTABLE FILTER MODULE", according to claim 1 and on an operating option, characterized in that the portable filter module is equipped with ports (PI) and converters (V) for connectors (CI) identification for direct coupling to several types of data transport { DT) devices and/cr computers (PC); the processor (PRC) performs reading / scanning / healing of files (AQ) in said devices (DT) / computers (PC), eliminating any viruses (V) .

3^a) " SECURITY SYSTEM AND PORTABLE FILTER MODULE" , according tc claim 1 and on another operating option, characterized in that the portable filter module (2) is equipped with pert ( s ) ( P2 } and converter ( s ) ( V) for connecting a communicator (C2 ) ; the processor ( P ) operates on apparatuses (API) , equipped with remote communicators, such as wi-fi systems, radiofrequency or the like, with or without data cables, capable of communicating with Internet servers (SI) and respective programs providing databases (BD2) with several antiviruses (AV2) , performing reading / scanning / healing of files (AQ) in said devices (DT) / computers (PC), eliminating any viruses (V) .

4^a ) " SECURITY SYSTEM AND PORTABLE FILTER MODULE " , according to claim 1 and on another operating option, characterized in that the portable filter module (2) is equipped with port(s) (P3) and converter is) (V) for connecting a cable or communicator (C2); the processor (P) operating on computers (PC), notebooks (Nb) or the like, equipped with remote communicators (C3 ) , capable of communicating with Internet servers (SI) and respective programs providing databases (BD2) with several antiviruses (AV2) , performing reading / scanning / healing of files (AQ) in said devices (DT) / computers (PC) , eliminating any viruses (V ) .

5^a) "SECURITY SYSTEM AND PORTABLE FILTER MODULE" , according to claim 1 and in a preferred construction option, characterized in that the portable filter module (2) comprises a small box, composed of base (2a) and cover or fairing (2b) , on which the on/off button (20) is disposed; the fairing (2b) top face comprises the interface ( P F ) , composed of a status panel or display with indicator lights (10) and buttons for choosing on-line mode or offline mode, and decision buttons for eliminating or applying quarantine to the virus ( V) found in file(s) (AQ) ; a liquid crystal display (T) or the like is included on the fairing top face ( 2a ) .

6" ) "SECURITY SYSTEM AND PORTABLE FILTER MODULE" , according to claims 1 and 5, characterized i that the status panel or display with indicator lights (10) with indicator lights comprises the following indicators; (i) green, for on status (10a) , ( ii ) yellow for scanning status (10b) and (iii) red for threats found (10c) ,

7^a) "SECURITY SYSTEM AND PORTABLE FILTER MODULE", according to claims 1 and 5, characterized in that the buttons (11) on the portable filter module (2) comprises the following buttons: choosing on-line mode (11a), off- line mode (lib) and "quarantine" decision (11c) and cleaning ("Clear") (lid) .

8^a) "SECURITY SYSTEM AND PORTABLE FILTER MODULE " , according to claim 1, characterized in that the main connectors or inlets (CI) for several models of data transport ( DT) devices, are of the type: USB connector (13) for data cables or other device, such as pen-drive (a) , connector RJ45 (14), retractable wi-fi antenna (15), micro SD inlet (16), pin connector (17) for battery charger (Bt) cable (Cb' ) , SD / MMC / memory stick/duo inlet, Compact Flash, Smart Media (18) inlet.

9^a) " SECURITY SYSTEM" according to the previous claims, characterized i that the portable filter module (2) and system (1) execute the following operating steps :

a) When turning the device on, it will light the green indicator or led (10a), and wait for the user to connect to any inlet or connector (CI), a data transport (DT) device;

b) when connecting the transport device (DT), the status display (11) is started, and starts informing, on the interface panel (PF) display (T) if the user wishes to choose using on-line or off-line mode for executing the antiviruses (AV1/AV2) , which choice shall be defined by using buttons (11a) and (lib), respectively;

c) if the user chooses on-line mode (11a), the module (2) connects to a database (BD2) in an Internet server (SI), by means of a network via cable (Cb) or remote connection - wireless - C2/C3, to start scanning the data transport (DT) device connected to any of the connectors (CI);

when that is done, the interface panel (10) warns the user, by means of the yellow indicator or led (10b), about the scanning status;

if any rhreat or virus (V) is found, the sound interface (12) is activated, sending a warning signal, while lighting the red indicator or led (10c);

the interface panel ( PF) , by means of the display (T) , shows two options for the user to decide: (i) "clean threats / viruses" (V) or ( ii ) "store in quarantine"; any of the decisions shall be taken by selecting buttons (lie) or (lid);

if the user chooses button "cleaning" (11c), the virus (V) will be deleted from the data transport (DT) device, allowing the scanning to continue, and, when it finds another threat, the option is again shown on the display, and so on;

if the user chooses the button "quarantine" (lid) , the program or software (3) creates, automatically, a file folder in the data transport (DT) device itself, a file self-named as "quarantine", and also compacts this threat; / virus and transfers it to said folder, allowing zhe user to, on a later time, analyze it in an appropriate computer;

when that is done, the scanning is continued until ending;

the sound interface (12) warns about the scanning operation ending via a message on the display (T) and sound effect .