CN1743990A - Transplatform virus detecting and killing method - Google Patents

Abstract

The method includes following steps: (1) installing a second operating system (OS) different from the OS, where there possible viruses to be searched and killed; (2) starting up the second OS; (3) loading the partition to be searched and killed; (4) loading up virus base; (5) carrying out operations of searching and killing computer viruses. Since format of executable files in the first OS is different from the format of executable files in the second OS, thus, executable files in the second OS are not possible to be executed in the first OS so that reciprocal infection of viruses between the executable files in the first OS and executable files in the OS is not possible. The second OS can call readable main program of killing computer viruses in the second OS. The said main program of killing viruses and engine for killing viruses are separated from the virus base. The said main program, engine and virus base are stored in readable storage media of computer.

Description

A kind of cross-platform killing poison method

Technical field

The present invention relates to computer realm, particularly a kind of killing virus method of computing machine.

Background technology

At present the antivirus applet of windows platform can't guarantee the pure nontoxic of running environment fully in the process of killing virus, because antivirus applet itself also might be by virus infections, and the interior virus of scavenge system at all so just.In order to carry out the killing Virus in a pure virus-free system environments, at present, the scheme that the floppy disk guiding of generally adopting is carried out adopts the DOS bootable floppy disk, enters pure DOS environment and carries out killing poison program.This scheme has following defective: 1. killer is a DOS executable program, will copy to from system in the floppy disk when making the viral promoter dish, and before this process, the Dos executable program might be infected by the Dos File Infector Virus; 2.DOS bootable floppy disk might be infected by the DOS leading viruses.

Summary of the invention

Technical matters to be solved by this invention is, a kind of cross-platform killing virus method is provided, and this method effectively killing is treated the intrasystem virus of killing.

Technical matters to be solved by this invention is achieved by the following technical solution:

A kind of cross-platform killing virus method is characterized in that, comprises the steps:

A) install one and differ from second operating system for the treatment of killing virus place first operating system;

B) start this second operating system;

C) the killing subregion is treated in loading;

D) load virus base;

E) killing virus.

In said method, the interior executable file file layout of executable file in this first operating system and second operating system is different, and the executable file on second operating system can't be carried out on first operating system, therefore, the interior executable file of the executable file in first operating system and second operating system infective virus mutually.Second operating system can be called the readable virus killing master routine of one second operating system, and this virus killing master routine separates with virus base with antivirus engine, and this virus killing master routine, antivirus engine and virus base can be stored in respectively in the computer-readable storage medium.

The present invention is because the virus killing master routine is second platform program, and they are different with the first operating system form, so can not infect the first operating system inner virus, have guaranteed that antivirus applet itself is nontoxic, and then reach the purpose of effective killing first operating system inner virus.In addition, the present invention adopts antivirus engine to separate with master routine with virus base, and the technology of dynamic load during execution has realized the transplanting of first platform program to second platform.The present invention also allows two platforms public overlap engine and virus bases, only writes again and looks into malicious master routine, has guaranteed the synchronism of upgrading like this, has reduced the transplanting cost.

Description of drawings

Fig. 1 is the cross-platform killing virus of the present invention method flow diagram;

Embodiment

Referring to Fig. 1, a kind of cross-platform killing virus method comprises the steps:

1. install one and differ from second operating system for the treatment of killing virus place first operating system;

2. start this second operating system;

3. load and treat the killing subregion;

4. loading virus base;

5. killing virus.

In said method, the interior executable file file layout of executable file in this first operating system and second operating system is different, and the executable file on second operating system can't be carried out on first operating system, therefore, the interior executable file of the executable file in first operating system and second operating system infective virus mutually.Second operating system can be called the readable virus killing master routine of one second operating system, and this virus killing master routine separates with virus base with antivirus engine, and this virus killing master routine, antivirus engine and virus base can be stored in respectively in the computer-readable storage medium.

Below in conjunction with the method for killing Windows system inner virus under linux system, introduce cross-platform killing virus method of the present invention:

I. make the linux system dish

A bootable Linux bootable floppy disk comprises three partial contents: boot, system kernel, basic file system.Bootable floppy disk is exploitation and composition under the Linux environment, uses following steps to obtain a floppy disk that can start under the basic Linux environment:

A) use Syslinux program creation boot;

B) reduce and recompilate the linux kernel source code, modules such as unwanted network, multimedia are removed, simplify volume.Through the bzip compression, the system kernel that obtains simplifying is the bzImage file;

C) after the system start-up, an image file through overcompression is called in calculator memory by system kernel, compression obtains the image.gz file through gzip again, finishes the making of basic file system.

With bzImage, the image.gz document copying just obtains the bootable floppy disk that can start in floppy disk.Obtain this floppy disk image file then.Can in the Windows environment, make bootable floppy disk later on by this image file.

II. make virus killing master routine dish

This dish is a FreeDos form floppy disk, and this floppy disk of format in the Windows environment duplicates the required file of killing poison program in this floppy disk.

III. make the virus base dish

This floppy disk is a FreeDos form floppy disk, comprises current virus characteristic library file.When virus base size during greater than the capacity of a floppy disk, will be divided into a plurality of parts and be placed on respectively on many floppy disks, start the back and merge automatically.

IV. start (SuSE) Linux OS

Above-mentioned linux system boot disk is inserted computing machine, floppy disk as boot disk, just can be started (SuSE) Linux OS.

V. load and treat killing virus subregion

Selected disk partition or the catalogue of preparing killing virus.

VI. load virus base

The above-mentioned virus base dish of making is inserted floppy drive, call in the virus killing master routine.

VII. begin virus killing

The present invention is because the virus killing master routine is second platform program, and they are different with the first operating system form, so can not infect the first operating system inner virus, have guaranteed that antivirus applet itself is nontoxic, and then reach the purpose of effective killing first operating system inner virus.In addition, cross-platform killing virus method adopts antivirus engine to separate with master routine, and the technology of dynamic load during execution is achieved cross-platform virus killing, has also realized the transplanting of first platform program to second platform.Can also allow two platforms public overlap engine and virus bases in the present invention, only write again and look into malicious master routine, guarantee the synchronism of upgrading like this, reduce the transplanting cost.

The present invention also has some other distortion or improvement.First operating system and second operating system can be FreeBSD, Unix etc. as described; And described virus killing master routine, antivirus engine and virus base also can be stored in the hard disc of computer or other computer-readable recording mediums such as floppy disk, CD or USB memory device etc.If those skilled in the art are subjected to the change or the improvement of the conspicuous unsubstantiality that inspiration of the present invention makes, all belong to the protection domain of claims of the present invention.

Claims (10)

1, a kind of cross-platform killing virus method is characterized in that, comprises the steps:

A. install one and differ from second operating system for the treatment of killing virus place first operating system;

B. start this second operating system;

C. load and treat the killing subregion;

D. load virus base;

E. killing virus.

2, cross-platform killing virus method according to claim 1 is characterized in that, this first operating system is Windows operating system, and this second operating system is (SuSE) Linux OS.

3, cross-platform killing virus method according to claim 1 is characterized in that, the executable file on this second operating system can't be carried out on first operating system.

4, according to claim 1 or 2 or 3 described cross-platform killing virus methods, it is characterized in that the readable virus killing master routine of this second operating system is stored in the computer-readable medium.

5, cross-platform killing virus method according to claim 4 is characterized in that, this computer-readable medium is floppy disk, CD or USB memory device.

6, cross-platform killing virus method according to claim 4 is characterized in that, an antivirus engine and a virus base are stored in the computer-readable medium, and can be called by described virus killing master routine.

7, according to claim 1 or 2 or 3 described cross-platform killing virus methods, it is characterized in that this second operating system is stored in the computer-readable medium.

8, cross-platform killing virus method according to claim 7 is characterized in that, is floppy disk, CD or USB memory device in this computer-readable medium.

9, cross-platform killing virus method according to claim 1 is characterized in that, file layout is different with first operating system in this second operating system.

10, cross-platform killing virus method according to claim 1 is characterized in that, executable file in this first operating system and the executable file in second operating system be infective virus mutually.

Images