CN102867146B - 一种防止计算机病毒反复感染***的方法及*** - Google Patents
一种防止计算机病毒反复感染***的方法及*** Download PDFInfo
- Publication number
- CN102867146B CN102867146B CN201210350752.1A CN201210350752A CN102867146B CN 102867146 B CN102867146 B CN 102867146B CN 201210350752 A CN201210350752 A CN 201210350752A CN 102867146 B CN102867146 B CN 102867146B
- Authority
- CN
- China
- Prior art keywords
- module
- malice
- kernel
- driven
- record
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 238000000034 method Methods 0.000 title claims abstract description 82
- 241000700605 Viruses Species 0.000 title claims abstract description 50
- 230000008569 process Effects 0.000 claims abstract description 59
- 230000008929 regeneration Effects 0.000 claims abstract description 19
- 238000011069 regeneration method Methods 0.000 claims abstract description 19
- 230000026676 system process Effects 0.000 claims description 13
- 208000015181 infectious disease Diseases 0.000 claims description 12
- 230000000903 blocking effect Effects 0.000 claims description 8
- 238000012544 monitoring process Methods 0.000 claims description 7
- 230000006378 damage Effects 0.000 abstract description 4
- 230000007123 defense Effects 0.000 abstract description 2
- 230000002155 anti-virotic effect Effects 0.000 description 4
- 238000013461 design Methods 0.000 description 2
- 238000010586 diagram Methods 0.000 description 2
- 230000006870 function Effects 0.000 description 2
- 230000003612 virological effect Effects 0.000 description 2
- 230000009471 action Effects 0.000 description 1
- 238000004590 computer program Methods 0.000 description 1
- 238000007796 conventional method Methods 0.000 description 1
- 238000011161 development Methods 0.000 description 1
- 230000018109 developmental process Effects 0.000 description 1
- 238000003745 diagnosis Methods 0.000 description 1
- 230000000694 effects Effects 0.000 description 1
- 238000002474 experimental method Methods 0.000 description 1
- 238000002347 injection Methods 0.000 description 1
- 239000007924 injection Substances 0.000 description 1
- 238000012986 modification Methods 0.000 description 1
- 230000004048 modification Effects 0.000 description 1
- 238000011112 process operation Methods 0.000 description 1
- 230000001172 regenerating effect Effects 0.000 description 1
- 239000000243 solution Substances 0.000 description 1
- 230000003068 static effect Effects 0.000 description 1
Landscapes
- Debugging And Monitoring (AREA)
- Storage Device Security (AREA)
Abstract
Description
Claims (6)
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201210350752.1A CN102867146B (zh) | 2012-09-18 | 2012-09-18 | 一种防止计算机病毒反复感染***的方法及*** |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201210350752.1A CN102867146B (zh) | 2012-09-18 | 2012-09-18 | 一种防止计算机病毒反复感染***的方法及*** |
Publications (2)
Publication Number | Publication Date |
---|---|
CN102867146A CN102867146A (zh) | 2013-01-09 |
CN102867146B true CN102867146B (zh) | 2016-01-27 |
Family
ID=47446013
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN201210350752.1A Active CN102867146B (zh) | 2012-09-18 | 2012-09-18 | 一种防止计算机病毒反复感染***的方法及*** |
Country Status (1)
Country | Link |
---|---|
CN (1) | CN102867146B (zh) |
Families Citing this family (10)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN103679031B (zh) * | 2013-12-12 | 2017-10-31 | 北京奇虎科技有限公司 | 一种文件病毒免疫的方法和装置 |
CN105631329B (zh) * | 2015-12-21 | 2019-05-10 | 北京金山安全管理***技术有限公司 | Virut感染型病毒免疫方法及其装置 |
CN106203118B (zh) * | 2016-07-13 | 2019-01-22 | 北京金山安全软件有限公司 | 修改***标记闪烁时间的处理方法、装置及电子设备 |
TWI647585B (zh) * | 2017-06-27 | 2019-01-11 | 關隆股份有限公司 | Malicious virus protection method |
US10503898B2 (en) | 2017-10-03 | 2019-12-10 | Grand Mate Co., Ltd. | Method for defending against malware |
CN107612933A (zh) * | 2017-10-20 | 2018-01-19 | 广东岭南职业技术学院 | 一种新型计算机网络病毒防御*** |
CN109214186A (zh) * | 2018-08-29 | 2019-01-15 | 厦门快快网络科技有限公司 | 一种基于内核层的拦截木马病毒***及方法 |
CN110851831B (zh) * | 2019-11-12 | 2023-04-28 | 腾讯科技(深圳)有限公司 | 病毒处理方法、装置、计算机设备及计算机可读存储介质 |
CN110717183B (zh) * | 2019-12-09 | 2020-10-27 | 深信服科技股份有限公司 | 病毒查杀方法、装置、设备及存储介质 |
CN112784270A (zh) * | 2021-01-18 | 2021-05-11 | 仙境文化传媒(武汉)有限公司 | 一种使用注解方式加载代码文件的***及方法 |
Citations (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US7917955B1 (en) * | 2005-01-14 | 2011-03-29 | Mcafee, Inc. | System, method and computer program product for context-driven behavioral heuristics |
CN102194072A (zh) * | 2011-06-03 | 2011-09-21 | 奇智软件(北京)有限公司 | 一种处理计算机病毒的方法、装置及*** |
CN102629310A (zh) * | 2012-02-29 | 2012-08-08 | 卡巴斯基实验室封闭式股份公司 | 用于保护计算机***免遭恶意对象活动侵害的***和方法 |
-
2012
- 2012-09-18 CN CN201210350752.1A patent/CN102867146B/zh active Active
Patent Citations (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US7917955B1 (en) * | 2005-01-14 | 2011-03-29 | Mcafee, Inc. | System, method and computer program product for context-driven behavioral heuristics |
CN102194072A (zh) * | 2011-06-03 | 2011-09-21 | 奇智软件(北京)有限公司 | 一种处理计算机病毒的方法、装置及*** |
CN102629310A (zh) * | 2012-02-29 | 2012-08-08 | 卡巴斯基实验室封闭式股份公司 | 用于保护计算机***免遭恶意对象活动侵害的***和方法 |
Also Published As
Publication number | Publication date |
---|---|
CN102867146A (zh) | 2013-01-09 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
CN102867146B (zh) | 一种防止计算机病毒反复感染***的方法及*** | |
US9838415B2 (en) | Fight-through nodes for survivable computer network | |
US10032025B1 (en) | Behavior-based ransomware detection | |
US9473526B2 (en) | Fight-through nodes for survivable computer network | |
US9166997B1 (en) | Systems and methods for reducing false positives when using event-correlation graphs to detect attacks on computing systems | |
EP3712793B1 (en) | Integrity assurance during runtime | |
CN100504899C (zh) | 一种软件看门狗***和方法 | |
US20110173698A1 (en) | Mitigating false positives in malware detection | |
JP2006178936A (ja) | 仮想マシンまたは強化オペレーティングシステムなどにおけるコンピュータのセキュリティ管理 | |
US8402539B1 (en) | Systems and methods for detecting malware | |
WO2011050089A2 (en) | Preventing and responding to disabling of malware protection software | |
US10007785B2 (en) | Method and apparatus for implementing virtual machine introspection | |
CN101436234A (zh) | 一种确保操作环境安全的***和方法 | |
KR20190121483A (ko) | 화이트리스트 기반 악성코드 차단 장치 및 방법 | |
CN103593616A (zh) | 企业信息网络u盘病毒防控***和方法 | |
KR101500512B1 (ko) | 데이터 프로세싱 시스템 보안 장치와 보안방법 | |
WO2021217652A1 (zh) | 一种移动存储设备的控制方法、装置和计算机可读介质 | |
US10848463B2 (en) | Listen mode for machine whitelisting mechanisms | |
CN115086081B (zh) | 一种蜜罐防逃逸方法及*** | |
CN110889112A (zh) | 一种基于白名单机制的软件运行统一控制***及方法 | |
CN111624869B (zh) | 自动感知攻击行为方法、***及以太网交换机 | |
Daghmehchi Firoozjaei et al. | Parent process termination: an adversarial technique for persistent malware | |
CN105224871A (zh) | 一种病毒清除方法及装置 | |
Huang et al. | Identifying HID-based attacks through process event graph using guilt-by-association analysis | |
RU2739832C1 (ru) | Система и способ выявления измененных системных файлов для проверки на вредоносность в облачном сервисе |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
C06 | Publication | ||
PB01 | Publication | ||
C10 | Entry into substantive examination | ||
SE01 | Entry into force of request for substantive examination | ||
ASS | Succession or assignment of patent right |
Owner name: KINGSOFT CORPORATION LIMITED BEIKE INTERNET (BEIJI Effective date: 20130503 |
|
C41 | Transfer of patent application or patent right or utility model | ||
TA01 | Transfer of patent application right |
Effective date of registration: 20130503 Address after: Jingshan Hill Road, Lane 519015 Lianshan Jida Guangdong province Zhuhai City No. 8 Applicant after: ZHUHAI JUNTIAN ELECTRONIC TECHNOLOGY Co.,Ltd. Applicant after: BEIJING KINGSOFT INTERNET SECURITY SOFTWARE Co.,Ltd. Applicant after: SHELL INTERNET (BEIJING) SECURITY TECHNOLOGY Co.,Ltd. Applicant after: BEIJING KINGSOFT NETWORK TECHNOLOGY Co.,Ltd. Address before: Jingshan Hill Road, Lane 519015 Lianshan Jida Guangdong province Zhuhai City No. 8 Applicant before: Zhuhai Juntian Electronic Technology Co.,Ltd. |
|
C14 | Grant of patent or utility model | ||
GR01 | Patent grant | ||
CP03 | Change of name, title or address | ||
CP03 | Change of name, title or address |
Address after: 519070 Guangdong city of Zhuhai Province town Harbour Road Technology Road No. 10 building six layer 601F Co-patentee after: BEIJING KINGSOFT INTERNET SECURITY SOFTWARE Co.,Ltd. Patentee after: ZHUHAI JUNTIAN ELECTRONIC TECHNOLOGY Co.,Ltd. Co-patentee after: Beijing Cheetah Mobile Technology Co.,Ltd. Co-patentee after: Beijing Cheetah Network Technology Co.,Ltd. Address before: Jingshan Hill Road, Lane 519015 Lianshan Jida Guangdong province Zhuhai City No. 8 Co-patentee before: BEIJING KINGSOFT INTERNET SECURITY SOFTWARE Co.,Ltd. Patentee before: Zhuhai Juntian Electronic Technology Co.,Ltd. Co-patentee before: SHELL INTERNET (BEIJING) SECURITY TECHNOLOGY Co.,Ltd. Co-patentee before: BEIJING KINGSOFT NETWORK TECHNOLOGY Co.,Ltd. |
|
TR01 | Transfer of patent right | ||
TR01 | Transfer of patent right |
Effective date of registration: 20191125 Address after: Room 105-53811, No. 6 Baohua Road, Hengqin New District, Zhuhai City, Guangdong Province Patentee after: Zhuhai Leopard Technology Co.,Ltd. Address before: 519070, No. 10, main building, No. six, science Road, Harbour Road, Tang Wan Town, Guangdong, Zhuhai, 601F Co-patentee before: BEIJING KINGSOFT INTERNET SECURITY SOFTWARE Co.,Ltd. Patentee before: Zhuhai Juntian Electronic Technology Co.,Ltd. Co-patentee before: Beijing Cheetah Mobile Technology Co.,Ltd. Co-patentee before: Beijing Cheetah Network Technology Co.,Ltd. |