201118642 五、本案若有化學式時，請揭示最能顯示發明特徵的化學 式： 無 六、發明說明： 【發明所屬之技術領域】 本發明是有關於一種快速掃描或治療惡意軟體之電 • 腦系統及其方法，特別是指一種安裝有兩個或以上作業 系統之電腦系統，可藉由其中一具有防毒軟體之作業系 統對另一作業系統進行快速掃描或治療惡意軟體，以提 高掃描或治療電腦系統中惡意軟體的便利性。 【先前技術】 在競爭力與講求效率的現代生活中，電腦系統儼然 成為現代人不可或缺的幫手，電腦系統可幫大眾處理相 B 當多的事務，譬如文件處理、繪圖、運算、寄信等功用， 提高了民幕於工作上處理事務的便利性。因此，藉由電 腦及網路儲存資料或下載資料，是一般大眾常使用電腦 的方式，而也因為資料的傳遞隨著電腦系統應用的曰漸 普及，資訊安全的問題也越來越受到重視。 而目前電腦系統所安裝使用之作業系統（Operation System，OS)大都是全球知名的微軟（Microsoft)公司所研 發出之Windows作業系統，因為微軟係為全球最大的軟 體公司，因此Windows作業系統在各類程式庫、週邊裝 201118642 置之驅動程式、人機界面及應用軟 晶片或平台上皆有良好㈣w =及在各豕硬體 ^—頁艮好的技術支杈，除此之外，還提供 1調配、官理與使用、企業等級的可靠性、可用性、 、輕鬆建立動態的企業網路和網際網路網 _ = 2應用程式伺服器加快開發速度及授權使用 仃夕項作業，以及降低支援成本等多項特點。 ，Windows作業系統提供強大之系統資源的優勢 :對的也增加其系統資源消耗的負載，致使其系統 穩疋度與啟動速率上皆受到影響，當使用者僅使用 Wmdows作業系統之單一應用程式時’必須等候過長的 啟動時間’導致時間的浪費，在現今講求效率的時代， 使用者希望電腦系統必須具高穩定性、系統消耗資源 低、短時間開啟能力、系統建構成本低等特性，就因如 此Linux作業系統也日益蓬勃發展，但是作業系 統發展上遠低於…匕如^作業系統，因此在可支援的應 用程式上，其相容性與普及性皆遠不及於作業 系統。 一 隨著使用者的需求愈來愈高，所以電腦系統所安裝 之防毒軟體程式、作業系統與應用程式必須時常更新， 以滿足使用者之需求。而因為wind〇ws作業系統開機程 序中，防毒軟體通常無法在第一時間載入，因此往往需 經過漫長的啟動時間後，才能對電腦系統進行掃描或治 療，造成所謂之空窗期。再者，病毒特徵及防毒引擎未 必能及時更新，如此一來顯得執行防毒軟體程式的效率 不足’對於資訊安全的維護來說也是一大隱憂。 201118642 ^ 聽習知技藝之各項問題’為 -本發明人基於多年研究開發與諸多實務：顧， 快速掃描或治療惡意軟體之電腦系統及其 、種 改善上述缺點之實現方式與依據。 、、，以作為 【發明内容】 有鑑於上述習知技藝之問題，本發 可快速啟動並執行惡意軟體掃描或治療： 系統及其方法，以解決—般防毒軟體必 溫電知 機程序後才能執行的缺失。 、、、’ 15 ^長的開 亞音2之=述目的’依本發明之快速掃描或治療 之電腦系統，其包含-第-作業系統、一第： -防毒機按紐。第—作㈣統褒設有-第 ;二=:業少-惡意軟體影響之機 防毒作ϊ系統完成啟動程序後即載入第-療。 丨第—作㈣統進行惡意軟㈣掃描或治 防毒擇性設定於第-作業系統開機後，第- 或於第-作業系統中之惡意軟體， 毒軟體掃描或;ί:Γ間隔後再以第一防 次/0療第一作業系統中之惡意軟體。 201118642 按知ϋΐί腦系統可包含—第二開機按起’第二開機 號後啟動第:C電腦系統於接收第二觸發訊 第-儲存丄第-作業系統所儲存之-之-第二儲存空間對第-儲存空間之外 體之的惡意軟 ,^中，電細系統可具有一網路連線裝置，第一作堂 路連:裝置連接至一遠端飼服器第 防t軟體之一防毒引擎或一病毒特徵 -儲=置，腦系統之第—作業系統可於本機上，讀取 第-防毒㈣。^ “特徵’用以更新該 軟體其：第電『!、統之第二作業系統可具有-第二防毒 爹體且第一防t軟體可對該第二防毒軟體 擎或-病毒特徵進行同步更新。㈣之防毒引 其中’該電腦系統可包含一顯示單元，該顯示單元 可顯不該防毒軟體掃描或治療該惡意軟體的結果。 =外’本發明更提出—種電腦系統快速掃描或治療 =意軟體之方法，其係用於安裝有―第—作業系統及一 第一作業系統之—電腦系統，第—作業系統裝設有一第 201118642 心忍軟體進行掃描或治療，且第 :=統啟動時間大於第一作業系統， 文惡意軟體影響之機率係高於第：系、，先 含下列步驟。首先，以一開機 生二第一締方法包 毒軟體。接著，利用第作業系統中之第-防 系統及其侦锉亡驻罢、母軟體掃描或治療第二作業201118642 5. If there is a chemical formula in this case, please disclose the chemical formula that best shows the characteristics of the invention: No. 6. Description of the invention: [Technical field of the invention] The present invention relates to an electric brain system for rapidly scanning or treating malicious software and The method, in particular, a computer system installed with two or more operating systems, can quickly scan or treat malicious software by one operating system with an anti-virus software to improve scanning or treating a computer system The convenience of malicious software. [Prior Art] In the modern life of competitiveness and efficiency, the computer system has become an indispensable helper for modern people. The computer system can help the public to deal with many transactions, such as file processing, drawing, computing, and sending letters. Such functions have improved the convenience of handling the affairs of the people at work. Therefore, storing data or downloading data through computers and the Internet is a common method used by the general public. Moreover, as the transmission of data has become more and more popular with the application of computer systems, the issue of information security has received more and more attention. At present, the operating system (OS) installed in the computer system is mostly the Windows operating system developed by the world-renowned Microsoft company. Because Microsoft is the world's largest software company, the Windows operating system is in each. There are good (4) w = and good technical support in each type of library, peripheral device and human interface and application software chip or platform. In addition, it also provides 1 deployment, government and use, enterprise level reliability, availability, easy to build dynamic corporate network and Internet network _ = 2 application server to speed up development and authorized use of the work, and reduce support Cost and many other characteristics. The Windows operating system provides the advantage of powerful system resources: it also increases the load of its system resources, which affects its system stability and startup rate. When the user only uses a single application of the Wmdows operating system. 'You must wait for a long start-up time' to waste time. In today's era of efficiency, users hope that the computer system must have high stability, low system consumption, short-time open capability, and low-level system construction. Because of this, the Linux operating system is also booming, but the operating system is far less developed than the operating system, so the compatibility and popularity of the supported applications are far less than the operating system. As the needs of users become higher and higher, the anti-virus software programs, operating systems and applications installed on the computer system must be updated frequently to meet the needs of users. Because the anti-virus software usually cannot be loaded in the first time in the wind〇ws operating system booting program, it is often necessary to scan or treat the computer system after a long startup time, resulting in a so-called empty window period. Furthermore, the virus signature and anti-virus engine may not be updated in time, so that the efficiency of implementing anti-virus software programs is insufficient. This is also a major concern for the maintenance of information security. 201118642 ^ The problems of listening to the skills of the students' is - the invention based on years of research and development and many practices: Gu, the rapid scanning or treatment of malicious software computer systems and their implementation and basis to improve the above shortcomings. In view of the above-mentioned problems of the prior art, the present invention can quickly initiate and execute a malicious software scan or treatment: the system and the method thereof, to solve the general anti-virus software The lack of implementation. , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , The first - for (4) reconciliation is set - the first; the second =: the industry is less - the machine affected by malware. The anti-drug system is loaded into the first treatment after the start-up procedure is completed.丨第—作(四)All malicious soft (4) scanning or anti-virus selection is set after the first-operation system is turned on, the malware in the first- or first-operation system, the toxic software scan or; ί: after the interval The first anti-time/zero treatment malware in the first operating system. 201118642 According to the knowledge of the brain system can be included - the second boot presses the 'second boot number after the start of the first: C computer system receives the second trigger message - the storage 丄 - the operating system stores - the second storage space For the malicious softness of the first-storage space, the electric thin system can have a network connection device, and the first one is connected to the device: the device is connected to one of the remote feeding devices. Anti-virus engine or a virus feature - storage = set, the brain system - the operating system can be on the machine, read the first - anti-virus (four). ^ "Features" is used to update the software: the second "!, the second operating system can have - the second anti-virus body and the first anti-soft can synchronize the second anti-virus software or virus features Update. (4) Anti-virus cited] 'The computer system can include a display unit, which can display the result of the anti-virus software scanning or treating the malicious software. = External' the invention further proposes a computer system for rapid scanning or treatment The method of intentional software is used for installing a computer system with a "first" operating system and a first operating system, and the first operating system is equipped with a 201118642 enamel software for scanning or treatment, and: The startup time is greater than that of the first operating system, and the probability of the influence of the malicious software is higher than the first: system, and the following steps are first included. First, the software is packaged by the first method of starting the second. Then, using the first operating system The first-defense system and its detectives, the mother software scan or the second job
作隼李。並且，得利用防毒軟體更新第二 乍菜系.·先之病t特徵及防毒引擎。 電腦太ί本發明之快速掃描或治療惡意軟體之 電向系統及其方法’其可具有―或多個下述優點： ⑴此快速掃描或治療惡意軟體m統及盆方 藉由一開機按峰速啟動—具有防毒軟體之第-業系統，在當使用者欲掃描第二作業系統及其所安 之該些應用程式時，提高防毒軟體掃描之便利性。、 (2)此快速掃m療惡意軟體之電腦系統及盆方 按：:i置；:固Γ個以上的開機按紐’當設置一個開機 ^時’可稭由—開機按钮快速啟動一具有防毒軟體之 第一作業系統，藉此可解決一般防毒軟體必須經過漫長 =開機程序後才能執行的缺失。纽置有多個開機按紐 ，除可利用原開機按鈕快速啟動第一作業系統外，更 可利用另一開機按钮直接啟動第二作業系統。 、、胃（3)此快速掃描或治療惡意軟體之電腦系統及其方 去2利用第一作業系統之防毒漱體更新第二作業系統之 病毒特徵及防毒引擎，藉此可解決一般防毒軟體必須經 201118642 過開機程序後才能執行病毒特徵及防毒引擎更 失’縮短開機至更新防毒軟體間的防毒空窗期。 、 兹為使、責審查委員對本發明之技術特徵及所達到 ^力^有更進纟之瞭解與認識，謹佐以較佳之實施例 及配合詳細之說明如後。 【實施方式】 以下將參照相關圖式，說明依本發明較佳實施例之 電腦系統快速掃描或治療惡意軟體之系統及其方法，為 使便於理解’下述實施例中之相同元件係以相同之 標示來說明。 … 下述之實施例係以掃描或治療惡意軟體之電腦系 統，或掃描或治療惡意軟體之方法來說日月，然並未偈限 於掃描或治療兩種亦可掃描及治療兩種方式同時進行。 ^請參閱第1圊，其係為本發明之快速掃描或治療惡 意軟體之電齡統功能方塊圖。圖中，開機按紐以兩ς 為例，但本發明在實際實施時，並不限於此。快速掃描 或’σ療惡意軟體之電腦系統1 〇〇包含一第一作業系統 U0、一第二作業系統120、一第一開機按紐13〇、二第 一開機按鈕140、一顯示單元190、一第一儲存裝置15〇 ^一中央處理單元180。第一作業系統·11〇安裝有一防 毒軟體111以掃描或治療至少一個惡意軟體122，第二 作業系統120設有一非必需的第二防毒軟體123。第一 開機按鈕130係產生一第一觸發訊號131以啟動一第一 201118642 ，業系統110。於此實施例中，第一儲存裝置15〇儲存 第-作業系統110與第二作業系統12〇。第一開機按： 130係產生一第一觸發訊號131以啟動一第一作業系 110。當按壓第一開機按鈕13〇後，第一開機按鈕1邛產 生=第一觸發訊號131以啟動第一作業系統110。第一 作業系統110完成啟動後，隨即载入防毒軟體m 對第二作業系統120中的惡意軟體122 二 療。其中’除了可掃描或治療第一作業系統 儲存空間外’亦可掃描或治療第一儲存空間以 二儲存空間。此第二儲存空間與第一儲 裝置之不同分割區，如皆位於第一儲存裝置=相： 或不同裝置，如分別位於第—健存裝置15G及第广、 2 151 °顯示單A 140係顯示第一防毒軟體in婦^ 或治療惡意軟體112的結果。 你描 其巾’ t腦系統1GG可由制者管理與規劃 、、先100之開機設定。本發明可設定為當第一作業系統㈣ =動後，立即載人第—时軟體ln，以對第、二作 ===惡意軟體122掃描或治療；或於第一作孝Ϊ 2 U0啟動-預設時間間隔後，再對第 ^ 進行惡意軟體122之掃描或治療。 Μ系統120 由於在實施本發明時，開機按鈕 上’電腦系統100亦可搭配開機 數3 -個以 之系統啟動程序。 頂以的數1，安排不同 舉例而言’在只有-個開機按紅(例如只有第一開機 201118642 按叙130)的情況下’使用者可壓觸第—開機 生-第-觸發訊號⑶，第一觸發訊號⑶逆二 處理單元18G，以啟動第-作業系統11()。=中央 第二作業系統120作惡意軟體122 ，右想對 擇性啟動第-防毒軟體⑴，以對苐療’可選 町弟一作業系統120及 其所安裝之應用程式m來進行掃描或治療。而於掃二 或治療結束後，系統可自動退出第—作業“⑽^ 換至第二作業系統120，或提供使用者進一步選 啟動第二作業系統no或直接離開第—作業系統n=。 再以兩個開機按鈕之設置方式為例，其中第一開 按知130係對應第-作業系、统11〇，第二開機按紐歼 14〇 係對應第二作業系統12〇。第一開機按鈕13〇之作動方 式與前述大致相同，故不予贅述。以下主要就第二開機 按紐140的部分做說明。 當電腦系統100處於未開機狀態，按壓第二開機按 鈕140後，將送出第二觸發訊號141至中央處理單元 18〇 ’以啟動第二作業系統12〇。 其中’電腦系統1 〇〇中务可包含一網路連線裝置 17〇’使第一防毒軟體lu透過網路連線裝置17〇連接至 一遠端伺服器200以更新第一防毒軟體！丨丨之一防毒引 擎或病毒特徵。另外，第一防毒軟體1Η亦可透過本機 之儲存裝置，例如：第二儲存裝置151例如光碟及隨身 碟（Flash disk)’以更新第一防毒軟體m之一防毒引 擎或病毒特徵。 201118642 其中，第二作業系統120更可設有一第二防毒軟體 123。若第一防毒軟體111與第二防毒軟體123可共享防 毒引擎或病毒特徵，則更可於第二作業系統12〇不啟動 的情況下，藉由第一作業系統11〇之第一防毒軟體I11 對第二防毒軟體123之一防毒引擎或一病毒特徵進行同 步更新。藉此，當第二作業系統120啟動後’其第二防 毒軟體亦已同步更新，更強化防毒軟體之防護能力。 φ 此外，第一作業系統110可為Linux作業系統。而 第二作業系統120可為一 FAT或一 NTFS之檔案格式， 如Windows系列之作業系統，即Windows NT、Window 98、Windows 2000、Windows XP、Windows Vista 或 Windows 7系列之作業系統，且於此圖式中，係設置兩 個開機按鈕，但實作上並不以兩個開機按鈕為限，當實 作上以一個開機按鈕實施時，其第二防毒軟體123、第 二開機按鈕140、第二觸發訊號141、網路連線裝置170 鲁 及遠端伺服器200於本發明中，為非必需之元件β 請參閱第2圖，其係為本發明之快速掃描或治療惡 意軟體之電腦系統較佳實施例示意圖。圖中，Linux作 業系統210及Windows作業系統220配置於一電腦系統 100上。其中，Linux作業系統210透過一 Linux開機按 鈕230啟動’ Windows作業系統220可經由Windows開 機按紐240啟動，於此實施例中，係設置兩個開機按奴， 但實作上並不以兩個開機按紐為限’本實施例之特徵在 於在Linux作業系統210中寫入一第一防毒軟體211。 11 201118642 在一般的狀態之下，Windows作業系統220必須在 載入所有周邊設備的狀態下才能正常運作，而Linux作 業系統210可在只具有核心的狀態下就已經是在可運作 的狀態。藉此，將防毒軟體211寫入Linux作業系統210 中，藉由Linux作業系統210較Windows作業系統220 可快速啟動的特性，以解決一般Windows作業系統220 需經過一完整的開機時程方能啟動的時效性問題。再 者，由於大部分之惡意軟體222與Linux作業系統210 φ 皆不相容，因此也較Windows作業系統220受惡意軟體 影響之機率為低。 此外，執行防毒軟體211以掃描或治療Windows作 業系統220中該些惡意軟體222時之備份檔案、隔離檔 案及病毒特徵比對檔案，亦可儲存於儲存裝置150中， 且若Windows作業系統220下之第二防毒軟體223與第 一防毒軟體211有共通之防毒引擎或病毒特徵，即可經 由Linux作業系統210於Windows作業系統220不啟動 _ 的情況下，由Linux作業系統提供更新或升級第二防毒 軟體223。 請參閱第3圖，其係為本發明之快速掃描或治療惡 意軟體之方法步驟流程圖。其中，電腦系統係安裝有一 第一作業系統及一第二作業系統，第一作業系統安裝有 至少一應用程式，第二作業系統設有一第一防毒軟體， 方法包含下列步驟。首先於步驟S310中，壓觸一開機按 鈕並產生一第一觸發訊號以啟動第一作業系統，並進行 步驟S320以執行第一作業系統中之第一防毒軟體。接著 12 201118642 • 進行步驟S330，利用防毒軟體掃描或治療第一作業系統 ' 及其所安裝之應用程式或其他儲存裝置。最後進行步驟 S340，利用第一防毒軟體治療第二作業系統及其所安裝 之應用程式中之惡意軟體，更可更新第二作業系統之防 毒引擎或病毒特徵及第二防毒軟體。 其中，上述之電腦系統係透過本地或網路連線裝置 連接至一遠端伺服器以升級防毒軟體或更新防毒軟體中 φ 的病毒特徵及防毒引擎。 其中，上述之第一作業參統較佳為Linux作業系 統。而第二作業系統較佳為一 FAT或一 NTFS之檔案格 式，如Windows系列之作業系統，即Windows NT、 Window 98、Windows 2000、Windows XP、Windows Vista 或Windows 7系列之作業系統。 以上所述僅為舉例性，而非為限制性者。任何未脫 離本發明之精神與範疇，而對其進行之等效修改或變 • 更，均應包含於後附之申請專利範圍中。 13 201118642 【圖式簡單說明】 第1圖係為本發明之快速掃描或治療惡意軟體之電腦 系統功能方塊圖； 第2圖係為本發明之快速掃描或治療惡意軟體之電腦 糸統實施例不意圖；以及 第3圖係為本發明之快速掃描或治療惡意軟體之方法 步驟流程圖。 【主要元件符號說明】 100 :電腦系統； 110 :第一作業系統； 111 :第一防毒軟體； 121 :應用程式； 120 :第二作業系統； 122 :硬碟惡意軟體； 123 :第二防毒軟體； 130 :第一開機按鈕； 131 :第一觸發訊號； 140 :第二開機按鈕； 141 :第二觸發訊號； 150 :第一儲存裝置； 201118642 151 :第二儲存裝置； 170 :網路連線裝置； 180 :中央處理單元； 190 :顯示單元； 200 :遠端伺服器； 210 ·· Linux作業系統； 211 :第一防毒軟體； 220 : Windows作業系統； 222 :惡意軟體； 223 :第二防毒軟體； 230 : Linux開機按鈕； 240 : Windows開機按鈕；以及 S310〜S340 :步驟流程。 15For Lee. In addition, it is necessary to use the anti-virus software to update the second cuisine. The characteristics of the disease and the anti-virus engine. The computer is too fast to scan or treat the malware system and method thereof. It may have one or more of the following advantages: (1) This fast scan or treatment of malicious software and the basin is controlled by a boot Quick Start - The first-industry system with anti-virus software improves the convenience of anti-virus software scanning when the user wants to scan the second operating system and the applications they have installed. (2) The computer system and the basin of the fast-sweeping m treatment are::i set;: more than one boot button 'when setting a boot ^', the straw can be quickly activated by the boot button The first operating system of the anti-virus software can solve the problem that the general anti-virus software must be executed after a long = booting process. There are multiple power-on buttons in the new button. In addition to using the original power-on button to quickly start the first operating system, another boot button can be used to directly start the second operating system. (3) This computer system for quickly scanning or treating malicious software and its side 2 use the anti-virus body of the first operating system to update the virus characteristics of the second operating system and the anti-virus engine, thereby solving the problem that the general anti-virus software must be After the 201118642 boot process, the virus signature and anti-virus engine can be executed to reduce the anti-virus window period between booting and updating the anti-virus software. For the sake of understanding and understanding of the technical features of the present invention and the abilities of the members of the present invention, the preferred embodiments and the detailed descriptions are as follows. [Embodiment] Hereinafter, a system for rapidly scanning or treating a malicious software in a computer system according to a preferred embodiment of the present invention and a method thereof will be described with reference to the related drawings, in order to facilitate understanding that the same components in the following embodiments are identical. The sign is used to illustrate. The following embodiments are for the computer system for scanning or treating malware, or for scanning or treating malware. However, the method is not limited to scanning or treatment, but also scanning and treatment. . ^ Please refer to the first block, which is a block diagram of the electrical age function of the fast scanning or treating malicious software of the present invention. In the figure, the power-on button is taken as an example, but the present invention is not limited to this in actual implementation. The computer system 1 includes a first operating system U0, a second operating system 120, a first power-on button 13A, two first power-on buttons 140, and a display unit 190. A first storage device 15 is a central processing unit 180. The first operating system 11 is equipped with an anti-virus software 111 to scan or treat at least one malicious software 122, and the second operating system 120 is provided with a non-essential second anti-virus software 123. The first power button 130 generates a first trigger signal 131 to activate a first 201118642 system. In this embodiment, the first storage device 15 stores the first operating system 110 and the second operating system 12A. The first power-on button: 130 generates a first trigger signal 131 to activate a first operating system 110. When the first power button 13 is pressed, the first power button 1 generates a first trigger signal 131 to activate the first operating system 110. After the first operating system 110 completes the startup, the anti-virus software m is loaded into the malware 122 in the second operating system 120. Wherein 'in addition to scanning or treating the first operating system storage space', the first storage space can be scanned or treated to two storage spaces. The second storage space and the different partitions of the first storage device are located in the first storage device=phase: or different devices, such as the first storage device 15G and the second and second 151° display single A 140 series. The result of displaying the first anti-virus software in the woman or treating the malicious software 112. You can describe the towel's brain system 1GG can be managed and planned by the maker, and the first 100 boot settings. The invention can be set to immediately load the first-time software ln when the first operating system (4) is activated, to scan or treat the first and second=== malicious software 122; or to start the first filial piety 2 U0 - After the preset time interval, the scanning or treatment of the malicious software 122 is performed on the second. Μ System 120 Since, in implementing the present invention, the computer system 100 on the power button can also be used with the system startup program. The number of the top is 1, the arrangement is different. For example, in the case of only one boot red (for example, only the first boot 201118642 according to the description of 130), the user can press the first-boot-first-trigger signal (3). The first trigger signal (3) is inversed by the processing unit 18G to activate the first operating system 11(). = The central second operating system 120 acts as a malicious software 122, and rightly selects the first anti-virus software (1) to scan or treat the optional operating system 120 and its installed application m. . After the second or the end of the treatment, the system can automatically exit the first job "(10)^ to the second operating system 120, or provide the user to further elect to start the second operating system no or directly leave the first operating system n=. Taking the setting mode of the two power-on buttons as an example, the first opening button 130 corresponds to the first working system, the system 11 〇, and the second power-on button 〇 14 对应 corresponds to the second working system 12 〇. The first power button The operation mode of the 13th is basically the same as the foregoing, so it will not be described. The following mainly explains the part of the second power button 140. When the computer system 100 is in the unpowered state, after pressing the second power button 140, the second button will be sent. The trigger signal 141 is sent to the central processing unit 18〇 to activate the second operating system 12〇. The computer system 1 can include a network connection device 17〇 to enable the first antivirus software to connect through the network. The device 17 is connected to a remote server 200 to update the antivirus engine or virus feature of the first antivirus software. In addition, the first antivirus software can also pass through the storage device of the device, for example: The storage device 151 is, for example, a disc and a flash disk to update the antivirus engine or virus feature of the first antivirus software m. 201118642 The second operating system 120 can further be provided with a second antivirus software 123. The software 111 and the second anti-virus software 123 can share the anti-virus engine or the virus feature, and the second anti-virus software I11 can be used for the second anti-virus by the first operating system 11 in the case that the second operating system 12 is not activated. The antivirus engine or a virus feature of the software 123 is synchronously updated. Thereby, when the second operating system 120 is started, the second antivirus software has also been updated synchronously, and the protection capability of the antivirus software is further enhanced. φ In addition, the first operation System 110 can be a Linux operating system, and second operating system 120 can be a FAT or an NTFS file format, such as a Windows operating system, namely Windows NT, Window 98, Windows 2000, Windows XP, Windows Vista, or Windows 7. The operating system of the series, and in this figure, two boot buttons are set, but the implementation is not limited to two boot buttons, when the implementation is one When the boot button is implemented, the second antivirus software 123, the second boot button 140, the second trigger signal 141, the network connection device 170, and the remote server 200 are optional elements in the present invention. Referring to FIG. 2, it is a schematic diagram of a preferred embodiment of a computer system for quickly scanning or treating malicious software according to the present invention. In the figure, a Linux operating system 210 and a Windows operating system 220 are disposed on a computer system 100. The system 210 is booted through a Linux boot button 230. The Windows operating system 220 can be booted via the Windows boot button 240. In this embodiment, two boot slaves are set, but the implementation does not use two boot buttons. The present embodiment is characterized in that a first anti-virus software 211 is written in the Linux operating system 210. 11 201118642 Under normal conditions, the Windows operating system 220 must be in a state where all peripheral devices are loaded to operate normally, and the Linux operating system 210 can already be in a working state in a state with only a core. In this way, the anti-virus software 211 is written into the Linux operating system 210, and the Linux operating system 210 can be quickly activated by the Windows operating system 220 to solve the aging effect of the general Windows operating system 220 after a complete boot time. Sexual problems. Moreover, since most of the malicious software 222 is incompatible with the Linux operating system 210 φ, it is also less likely to be affected by malicious software than the Windows operating system 220. In addition, the backup file, the quarantine file and the virus feature comparison file when the anti-virus software 211 is executed to scan or treat the malicious software 222 in the Windows operating system 220 may also be stored in the storage device 150, and if the Windows operating system 220 is under The second antivirus software 223 has a common antivirus engine or virus feature with the first antivirus software 211, and can be updated or upgraded by the Linux operating system via the Linux operating system 210 if the Windows operating system 220 does not start. Antivirus software 223. Please refer to Fig. 3, which is a flow chart showing the steps of the method for rapidly scanning or treating malicious software of the present invention. The computer system is provided with a first operating system and a second operating system. The first operating system is installed with at least one application, and the second operating system is provided with a first anti-virus software. The method comprises the following steps. First, in step S310, a power-on button is pressed and a first trigger signal is generated to start the first operating system, and step S320 is performed to execute the first anti-virus software in the first operating system. Then 12 201118642 • Proceed to step S330 to scan or treat the first operating system 'and its installed applications or other storage devices using the anti-virus software. Finally, in step S340, the first anti-virus software is used to treat the malicious software in the second operating system and the installed application, and the anti-virus engine or virus feature of the second operating system and the second anti-virus software are further updated. The above computer system is connected to a remote server through a local or network connection device to upgrade the antivirus software or update the virus characteristics of the φ and the antivirus engine in the antivirus software. The first operation reference is preferably a Linux operating system. The second operating system is preferably a FAT or an NTFS file format, such as a Windows operating system, that is, a Windows NT, Window 98, Windows 2000, Windows XP, Windows Vista, or Windows 7 operating system. The above is intended to be illustrative only and not limiting. Any changes or modifications to the spirit and scope of the present invention are intended to be included in the scope of the appended claims. 13 201118642 [Simplified illustration of the drawings] Figure 1 is a functional block diagram of a computer system for quickly scanning or treating malicious software of the present invention; Figure 2 is a computer system for quickly scanning or treating malicious software according to the present invention. Intention; and Figure 3 is a flow chart of the method steps of the present invention for quickly scanning or treating malicious software. [Main component symbol description] 100: computer system; 110: first operating system; 111: first anti-virus software; 121: application program; 120: second operating system; 122: hard disk malware; 123: second anti-virus software 130: first power button; 131: first trigger signal; 140: second power button; 141: second trigger signal; 150: first storage device; 201118642 151: second storage device; 170: network connection 180; central processing unit; 190: display unit; 200: remote server; 210 · · Linux operating system; 211: first anti-virus software; 220: Windows operating system; 222: malicious software; 223: second anti-virus Software; 230: Linux boot button; 240: Windows boot button; and S310~S340: step flow. 15