Unlock instant, AI-driven research and patent intelligence for your innovation.

Method and device for processing computer viruses

A computer virus and antivirus engine technology, applied in the computer field, can solve the problems of easily reducing system security and wasting system resources, and achieve the effect of improving security and saving system resources

Active Publication Date: 2014-11-05
北京鸿享技术服务有限公司
View PDF6 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0004] The embodiment of the present application provides a method and device for dealing with computer viruses, so as to solve the problem that the existing antivirus engine easily reduces system security and wastes system resources when scanning and killing compound files

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Method and device for processing computer viruses
  • Method and device for processing computer viruses
  • Method and device for processing computer viruses

Examples

Experimental program
Comparison scheme
Effect test

no. 1 example

[0061] see figure 1, the flow chart of the first embodiment of the method for processing computer viruses in this application:

[0062] Step 101: Obtain the file to be checked and killed.

[0063] Step 102: Analyzing the compound files in the files to be killed, and the analyzed files to be killed and non-compound files in the files to be killed form an updated file to be killed.

[0064] Wherein, the composite file includes ordinary compressed files and PE (Portable Execute, portable executable) compressed files; ordinary compressed files can specifically include: compressed files with an extension of rar and an extension of zip; PE compressed files can specifically include self-extracting files compressed files and UPS packed compressed files.

[0065] When parsing the normal compressed file in the file to be killed, read the file extension in the file to be killed, and when the read file extension matches the file extension type of the normal compressed file, determine th...

no. 1 example

[0100] see Figure 4 , is the block diagram of the first embodiment of the device for processing computer viruses in this application:

[0101] The device includes: an acquiring unit 410 , an analyzing unit 420 and a scanning unit 430 .

[0102] Wherein, the obtaining unit 410 is used to obtain the file to be checked and killed;

[0103] The parsing unit 420 is configured to analyze the composite file in the file to be checked and killed, and the parsed file to be checked and killed and the non-compound file in the file to be checked and killed form an updated file to be checked and killed;

[0104] The scanning unit 430 is configured to call a plurality of preset antivirus engines to scan the updated files to be checked and killed, and obtain a checked and killed result.

no. 2 example

[0105] see Figure 5 , is the block diagram of the second embodiment of the device for processing computer viruses in this application:

[0106] The device includes: a saving unit 510 , an acquiring unit 520 , an analyzing unit 530 and a scanning unit 540 .

[0107] Wherein, the saving unit 510 is used to pre-save the analysis method for analyzing each conforming file;

[0108] An acquisition unit 520, configured to acquire the file to be checked and killed;

[0109] The parsing unit 530 is configured to analyze the composite file in the file to be checked and killed, and the parsed file to be checked and killed and the non-compound file in the file to be checked and killed form an updated file to be checked and killed;

[0110] The scanning unit 540 is configured to call a plurality of preset antivirus engines to scan the updated files to be checked and killed, and obtain a checked and killed result.

[0111] Wherein, the parsing unit 530 may include ( Figure 5 not shown...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The embodiment of the invention discloses a method and a device for processing computer viruses. The method comprises the following steps: acquiring files to be scanned; parsing compounded files in the files to be scanned; forming updated files to be scanned by the parsed files to be scanned and the uncompounded files of the files to be scanned; and invoking a plurality of preset antivirus engines to scan the updated files to be scanned and obtaining a scanned result. When the method and the device disclosed by the embodiment of the invention are used for scanning, the compounded files in the files to be scanned are parsed in advance, i.e. packed files are unpacked, and then are scanned by the antivirus engines, so that antivirus engines which do not have unpacking capability can also be used for scanning files, and the security of a system is enhanced; when a plurality of antivirus engines which have the unpacking capability exist in the system, the compounded files in the files to be scanned are parsed in a unifying manner, thus not every antivirus engine has the need of parsing the compounded files, and the system resources are saved.

Description

technical field [0001] The present application relates to the field of computer technology, in particular to a method and device for processing computer viruses. Background technique [0002] A computer virus is data compiled or inserted into a computer program that destroys computer functions, which will affect the normal use of the computer and can replicate itself, usually in the form of a set of computer instructions or program codes. The antivirus engine is a set of technical mechanisms for judging whether the behavior of a specific program is a virus program (including suspicious programs). The anti-virus engine is the main part of the anti-virus software, which is a program for detecting and discovering viruses, and the virus database is a collection of features of the viruses that have been found. During the anti-virus process, the features in the virus database are used to compare all the programs or files in the machine, and the programs or files that meet these f...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & Authority Patents(China)
IPC IPC(8): G06F21/56
Inventor 谢重阳邹贵强
Owner 北京鸿享技术服务有限公司
Features
  • R&D
  • Intellectual Property
  • Life Sciences
  • Materials
  • Tech Scout
Why Patsnap Eureka
  • Unparalleled Data Quality
  • Higher Quality Content
  • 60% Fewer Hallucinations
Social media
Patsnap Eureka Blog
Learn More

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic, Popular Technical Reports.

© 2025 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap|About US| Contact US: help@patsnap.com