Method and device for removing malicious programs

Abstract

The invention provides a method and a device for removing malicious programs, and the method comprises the following steps: firstly constructing a database, wherein files which are not infected with virus and file information which corresponds to the files are stored in the database; matching information of a file infected with the virus with the file information which is not infected with the virus and stored in the database when confirming that the certain file in a client computer is infected with the virus; loading the file which is not infected with the virus and corresponds to the file information which is not infected with the virus in the database into the client computer, and replacing the file infected with the virus. The utilization of the method and the device can effectively avoid damaging the file or solve the problem that the file can not be implemented after removing the virus or Trojan and other malicious programs in the computer, facilitate the treatment of the file infected with the virus for a user of the computer and provide a virus removal scheme which is safer and more effective.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a method and device for eliminating malicious programs. Background technique [0002] With the wide application of computer technology in various fields of social life, malicious programs (Malwar, malicious software) also follow one after another just like its accessories. Due to the infectiousness, replicability and destructiveness of these malicious programs, they have become a major problem plaguing computer use. [0003] Malicious program is an umbrella term for any software program intentionally created to perform unauthorized and often harmful acts. Computer viruses, backdoor programs, keyloggers, password stealers, Word and Excel macro viruses, boot sector viruses, script viruses (batch, windows shell, java, etc.), Trojan horses, crimeware, spyware and adware, etc., These are examples of what could be called malicious programs. [0004] For the convenience ...

AI Technical Summary

Problems solved by technology

[0008] Yet the existing method of this virus removal is not always effective, and the reason is that after removing some codes in the infected file, the original program may not be able to run, and in serious cases, some system files may also be damaged. It cannot be executed, so that it cannot be normally opened and entered into the user's computer system. Therefore, users sometimes do not dare to perform virus removal actions easily.

Images