Anti-viral device in anti-viral software and anti-viral method thereof

Abstract

The invention relates to an anti-viral device embedded in anti-viral software and an anti-viral method for anti-virus by using the anti-viral device. The anti-viral device in the anti-viral software comprises an anti-viral characteristic loading device, a source code compiling device and a native code execution device, wherein the anti-viral characteristic loading device is arranged in an anti-viral software engine and used for loading encrypted and compressed source code characteristics and transferring a result to the source code compiling device; the source code compiling device is arranged in the anti-viral software engine and used for compiling, discovering and clearing away the source code characteristics of virus and generating a native code which can be recognized by an instruction architecture; and the native code execution device is arranged in the anti-viral software engine and used for executing the native code generated by the source code compiling device and associating the native code and a functional function in the anti-viral software engine so as to control and execute the native code generated by the source code compiling device. The device allows antivirus software to use a storage characteristic with smaller size and can execute by higher efficiency.

Description

technical field [0001] The invention relates to the field of computer anti-virus software, in particular to an anti-virus device embedded in the anti-virus software, and an anti-virus method using the anti-virus device. Background technique [0002] In the anti-virus field, there are several types of viruses (such as polymorphic viruses, infectious viruses) that are relatively complex, and it is difficult to detect and kill such viruses by using ordinary feature comparison methods. For these types of viruses, anti-virus software needs to use complex methods to identify it or remove them. At present, general anti-virus software will adopt the following technical means: script machine technology, virtual machine technology or native instruction technology. However, these methods have certain disadvantages: [0003] Script machine technology, anti-virus scripts are inconvenient to debug during the process of writing by virus analysts; [0004] Virtual machine technology, the...

AI Technical Summary

Problems solved by technology

[0003] Script machine technology, anti-virus scripts are inconvenient to debug during the process of writing by virus analysts;

[0004] Virtual machine technology, the anti-virus code is executed in the virtual machine, not directly on the CPU, so the execution speed is slower than native instructions, and the most important thing is that the design and implementation of the entire system is very complicated;

[0005] Native command technology has the problem of cross-command architecture. Anti-virus software needs to prepare a native command code for each compatible command structure, and the storage volume is relatively large because the native command involves code relocation.