Root Virus Removal via Privilege Escalation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In Unix and UNIX-like systems, root-privileged viruses pose a challenge as they cannot be killed by users without root privileges, requiring devices to search for vulnerabilities to obtain root privileges, which is time-consuming.

Innovation Solution

A method and apparatus that quickly obtain root privileges by scanning for root-privileged virus files, executing them to trigger system vulnerabilities, and using the resulting process to remove the virus, including terminating processes and deleting files.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the device searches for system vulnerabilities to obtain root privileges, then root privileges can be obtained, but the process takes a long time

Engineering Contradiction:
Improveability to obtain root privilegesVSAvoidtime to obtain root privileges
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent applies preliminary action by pre-acquiring root privileges before the virus executes. The system detects potential root-privileged viruses and obtains root privileges in advance through vulnerability exploitation, so that when the virus needs to execute, the privileges are already available. This eliminates the time delay of searching for vulnerabilities during virus execution.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent applies the skipping principle by directly exploiting known system vulnerabilities to quickly obtain root privileges without traversing multiple possible vulnerability paths. The system uses predetermined vulnerability exploitation methods to rapidly gain root access, skipping the time-consuming process of searching and testing various vulnerability avenues.

Inventive Principle:
Principle #21Skipping (Rushing through)

2Reliability

If the device traverses various system vulnerabilities to find a solution, then root privileges can be obtained, but the virus removal speed decreases

Engineering Contradiction:
Improveability to remove root-privileged virusVSAvoidvirus removal speed
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The system performs preliminary vulnerability exploitation to obtain root privileges before virus removal operations begin. This preliminary action ensures that root privileges are ready in advance, allowing immediate virus removal without the productivity loss of traversing vulnerabilities during the removal process.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent converts the harmful presence of root-privileged viruses into a benefit by using the viruses' own execution context to identify and exploit system vulnerabilities. The virus execution triggers vulnerability exploitation, which then provides root privileges that enable complete virus removal, turning the initial threat into a useful mechanism for gaining necessary privileges.

Inventive Principle:
Principle #22Blessing in disguise (Convert harm into benefit)

3Ease of operation

If the device obtains root privileges by exploiting system vulnerabilities, then root-privileged viruses can be killed, but the process is time-consuming

Engineering Contradiction:
Improveability to kill root-privileged virusesVSAvoidtime to kill viruses
Core Design Contradiction:
Ease of operationVSLoss of time

Solution Approach 1:

The system applies preliminary action by obtaining root privileges through vulnerability exploitation before attempting to kill the viruses. This ensures that when virus termination is needed, the necessary privileges are already in place, eliminating the time delay of performing vulnerability exploitation during the killing process.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent applies skipping by directly using predetermined vulnerability exploitation methods to quickly gain root privileges, rather than traversing multiple possible exploitation paths. This rushed approach to privilege acquisition significantly reduces the time required to enable virus termination.

Inventive Principle:
Principle #21Skipping (Rushing through)

Data Source

PatentUS10783249B2Root virus removal method and apparatus, and electronic device
Publication Date: 2020.09.22 BEIJING KINGSOFT INTERNET SECURITY SOFTWARE CO LTD
  • US10783249B2 patent drawing
  • US10783249B2 patent drawing
  • US10783249B2 patent drawing

AI summary

Embodiments of the present application provide a method and apparatus for removing a root-privileged virus and an electronic device. The method includes: scanning the smart device to find a root-privileged virus file; obtaining a root-privileged removing process according to the virus file; and removing the root-privileged virus file according to a preset removing strategy by using the root-privileged removing process. As a root-privileged process is directly obtained in this embodiment by using a found virus file, the smart device can obtain the root privileges more quickly, improving the speed of killing the root-privileged virus.