Malicious code searching and killing method and device and storage medium

Abstract

The invention provides a malicious code searching and killing method and device and a storage medium, and relates to the technical field of computer system security. The method comprises the following steps: fusing a malicious code feature library with a first malicious code searching and killing program to form a second malicious code searching and killing program; reading malicious code feature data in the second malicious code searching and killing program to a memory; calling the second malicious code searching and killing program, traversing the whole file, and comparing the file with the malicious code feature data in the memory; if the malicious code feature data is matched with the malicious code feature data, judging that the code is a malicious code; and if the malicious code feature data is not matched with the malicious code feature data, judging that the code is a non-malicious code. The method is used for solving the problem that malicious code feature library files independently stored in a disk are analyzed and reversely cracked. The invention also provides a malicious file searching and killing device and a computer readable storage medium, which have the above beneficial effects.

Description

technical field [0001] The invention relates to the technical field of computer system security, in particular to a malicious code scanning and killing method, device and storage medium. Background technique [0002] With the rapid development of the mobile Internet, various smart devices have gradually become popular in people's lives and work, and various threats have followed, among which malicious code is one of the common threats. At present, the mainstream methods for detecting malicious code include: signature code method, checksum method, behavior monitoring method, software simulation method, and heuristic scanning. These methods are based on different principles, and the cost and detection range required for implementation are different. Each has its own strengths. The feature code method is the simplest and most direct method to detect known malicious codes. [0003] The traditional signature code method reads the known malicious code signature library file data...

AI Technical Summary

Problems solved by technology

[0004] The present invention provides a method, device, and storage medium for detecting and killing malicious codes. By integrating malicious code feature library files and malicious code checking and killing tool files into a whole, it increases the difficulty of exposing and cracking malicious code feature libraries, and solves the problem of malicious code features. The problem of library files being analyzed and reverse cracked

Images