Computer virus checking and killing method based on data stream

A computer virus, data flow technology, applied in computing, electrical digital data processing, digital data processing components and other directions, can solve problems such as inability to detect and kill

Active Publication Date: 2006-07-12
ZHUHAI BAOQU TECH CO LTD
View PDF0 Cites 9 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

The current computer virus detection and killing method generally uses the method of adding an offset to the entry to locate the virus signature. If the virus adopts the above changes, the virus si...

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Computer virus checking and killing method based on data stream
  • Computer virus checking and killing method based on data stream

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0020] The present invention will be described in detail below in conjunction with the accompanying drawings.

[0021] A method for checking and killing computer viruses based on data streams. The virus is checked and killed by matching the characteristics of the virus signature database with the data streams (generated by memory modules or files) that need to be checked and killed. In the virus killing method, the virus characteristic database can be updated automatically.

[0022] see figure 1 As shown, the memory checking and antivirus method includes the following processes:

[0023] A. Extract the common characteristics of viruses from existing viruses;

[0024] B, building a database program, all the characteristics are assembled, and are made into a virus signature database;

[0025] C. Traverse all process modules in the memory, and regard each process module as a data stream;

[0026] D. Determine whether there is a data stream that has not been filtered, if there...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention discloses a checking and diminishing method of computer virus in the computer appliance domain, which is characterized by the following: basing on computer virus checking and diminishing method of data flow through matching the virus feature data with the checked and diminished data flow (internal memory mode or file generation data flow); containing internal memory checking and diminishing virus method and file checking and diminishing virus method; providing the identification of new variant of known virus or partial new virus without updating or less updating; analyzing and extracting binary code of known virus as virus feature to find new variant of virus or new virus in the internal memory mode or file; extracting the file feature automatically (if the internal memory mode corresponds to the file)to generate new file virus feature; updating the virus database automatically; finishing checking and diminishing task through scanning the new variant of known virus and partial new virus and other all duplicates.

Description

technical field [0001] The invention relates to the field of computer applications, in particular to a method for checking and killing computer viruses. Background technique [0002] In recent years, computers have been widely used in various fields, but the accompanying computer viruses have brought threats to its practical application. Coupled with the latent, contagious, and destructive nature of computer viruses, the prevention of viruses is more complicated. Today's computer viruses usually have an automatic update function. Virus authors are used to quickly releasing virus variants by means of packing, recompilation, and small-scale modification of virus engineering, and making new viruses by recombining multiple shared virus modules, so that Antivirus software cannot detect and kill the changed virus. Current computer virus scanning and killing methods generally use the method of adding an offset to locate the virus signature code. If the virus adopts the above-ment...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
IPC IPC(8): G06F1/00
Inventor 戴光剑赵闽王陈姚辉蔡山枫
Owner ZHUHAI BAOQU TECH CO LTD
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap