Malware searching and killing method and device

Abstract

The invention provides a malware searching and killing method and device. The method includes: acquiring a specified file in a terminal operation system; scanning whether preset malware features are included in the specified file or not; when the preset malware features are included in the specified file, executing operation of refreshing a system partition of the operation system; the specified file is stored in the system partition. By the method and device, when the preset malware features are protected in the file of a mobile terminal, malware such as ROM (read only memory) viruses registered in the operation system partition can be cleared thoroughly by execution of the operation for refreshing the operation system partition, the problem that the malware such as the ROM viruses cannot be searched and killed thoroughly is solved, the malware can be prevented from charging, causing traffic, popping up various spam and stealing user privacy, security and the like of mobile payment of users is guaranteed, and the malware which cannot be searched and killed normally by the mobile terminal antivirus engine can be cleared thoroughly.

Description

technical field [0001] The invention relates to the field of computers, in particular to a method and device for checking and killing malicious programs. Background technique [0002] At present, mobile terminals are more and more widely used, and there are more and more malicious programs targeting mobile terminals, and it is becoming more and more difficult to remove. [0003] The Android operating system is a mainstream operating system for mobile terminals. Its system file boot.img is stored in the BOOT partition in the form of a compressed package. When the terminal starts, the system file is decompressed and released into the memory to complete the operating system. of loading. [0004] The ROM mentioned here refers to the system firmware of various mobile devices such as mobile phones and tablet computers. After the user unlocks the mobile phone, the system firmware of the device can be replaced. So there is the term "flash", which is actually writing a new ROM, tha...

AI Technical Summary

Problems solved by technology

These malicious applications will privately send text messages to customize SP services, secretly consume data while connecting to the Internet, and then bombard advertisements to interfere with users

This undoubtedly caused confusion for users

[0006] However, the inventor found that the ROM virus has higher permissions and has the same permission attributes as system files. The current anti-virus method can only clear its files in memory. After the terminal restarts, it will be decomposed from the boot.img again. Compress and release it into the memory. For example, killing the virus may display "Series60kinsSupport: ROM software cannot be deleted". At present, there is no effective way to fundamentally remove the virus.

Images