Android Ransomware Cleanup via Background Switching
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for cleaning up screen locking ransomware Trojans on Android devices are either data-intensive, requiring factory resets, or limited by the need for USB debugging mode, which can be obstructed by the malware, and lack universality in application.
Innovation Solution
A method that displays a customized input interface on the locked screen, allowing users to obtain identifier information and switch the ransomware to run in the background for safe removal without affecting user data or enabling debugging modes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a factory reset is performed to clean up screen locking ransomware, then the virus program is removed, but all user data is lost
Solution Approach 1:
The patent extracts and removes only the malicious virus program components (the screen locking ransomware application and its associated services) while preserving the rest of the system and user data. This is achieved by identifying and uninstalling the specific malicious package rather than performing a complete factory reset, thus removing the harmful element while keeping beneficial data intact.
2Ease of operation
If USB debugging mode is enabled to allow remote cleanup, then the virus can be removed remotely, but the malware may obstruct debugging mode activation
Solution Approach 1:
The system performs self-diagnosis and self-cleanup by automatically detecting the presence of screen locking ransomware and executing removal operations without requiring external assistance. The device monitors itself for malicious conditions and autonomously initiates the cleanup process, eliminating the need for USB debugging mode or remote intervention.
3Adaptability or versatility
If traditional cleanup methods are used, then some viruses may be removed, but the methods lack universality across different virus types
Solution Approach 1:
The patent implements a universal detection and cleanup mechanism that identifies screen locking ransomware based on characteristic behaviors (forced screen locking, input field hijacking) rather than specific virus signatures. This behavior-based approach enables the system to detect and remove various types of screen locking malware regardless of their specific implementation, providing broad adaptability while maintaining reliable removal effectiveness.
Data Source
AI summary
A method of cleaning up a virus program, in an electronic terminal including at least one processor, is provided. An operable interface is displayed on a terminal locked page in response to a first operation instruction on the terminal locked page, the terminal locked page being a page of the virus program and displayed on a screen of the electronic terminal. A second operation instruction on the operable interface is obtained, and identifier information of the virus program is obtained in response to the second operation instruction. The virus program is controlled to run by displaying an auxiliary page on the screen of the electronic terminal in a bring-to-front manner. The virus program is cleaned up based on the identifier information.