A method, device and electronic equipment for deleting registry startup items

Abstract

An embodiment of the invention discloses a method and a device for deleting starting items of registries and an electronic device, relates to a computer software technology and can effectively solve the problem of low system safety caused by the fact that starting items of a malicious program cannot be deleted in the prior art. The method for deleting a malicious file comprises steps as follows: registry key value data in the starting items of the registries is acquired and saved in a pointer of a preset data structure, and the preset data structure further comprises data length values corresponding to the registry key value data; first registry key value data with a first character as a beginning character is acquired from the registry key value data; a data length value of the first registry key value data is acquired according to the preset data structure; if the data length value of the first registry key value data is larger than 0, first registry starting items corresponding to the first registry key value data are deleted. The method and the device are applicable to antivirus software.

Description

technical field [0001] The invention relates to computer software technology, in particular to a method, device and electronic equipment for deleting registry startup items. Background technique [0002] With the development of Internet technology, malicious software such as viruses and Trojan horses emerge in an endless stream. [0003] The registry startup items of general programs are stored in: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, and there are registry key values, such as "av1", "acb" and other LPCTSTR type strings. In C language development, strings end with "\00" characters. For example, if a registry key value is "av1\00", in practical applications, "av1" can be used as a parameter to delete the startup item of the malicious program through the delete function RegDeleteValue. [0004] However, in specific applications, in order to prevent deletion, malicious programs usually construct special registry key values, such as "\00av1". Sinc...

AI Technical Summary

Problems solved by technology

[0005] In view of this, the embodiments of the present invention provide a method, device, and electronic device for deleting registry startup items, which can solve the problem of low system security caused by the inability to delete malicious program startup items in the prior art

Images