CN102831049A - Method and system for detecting software - Google Patents
Method and system for detecting software Download PDFInfo
- Publication number
- CN102831049A CN102831049A CN2011101578119A CN201110157811A CN102831049A CN 102831049 A CN102831049 A CN 102831049A CN 2011101578119 A CN2011101578119 A CN 2011101578119A CN 201110157811 A CN201110157811 A CN 201110157811A CN 102831049 A CN102831049 A CN 102831049A
- Authority
- CN
- China
- Prior art keywords
- software
- file
- information
- destination folder
- matching
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Images
Landscapes
- Stored Programmes (AREA)
- Information Retrieval, Db Structures And Fs Structures Therefor (AREA)
Abstract
The invention relates to a method for detecting software and a system for detecting the software. The method comprises the following steps: building a software feature base, wherein the software feature base stores key file information, feature file information and matching weight corresponding to the feature file information; scanning a target folder, detecting whether the key file is in a target folder and matched with the target folder successfully according to the key file information, if so, determining a root directory where the target folder belongs, and otherwise, finishing the operation; matching the feature file in the target folder according to the feature file information to obtain the corresponding matching weight, calculating the matching parameter value according to the matched weight; judging whether the calculated matching parameter value is more than or equal to the threshold value, if so, determining the software type where the target folder belongs according to the root directory and the feature file information and obtaining the basic information of the software from the software feature base; and otherwise, finishing the operation. The method and the system for detecting the software do not need a registry and cannot cause the detection leakage phenomenon of the software.
Description
[technical field]
The present invention relates to the computer software application field, particularly a kind of method and system that detect software.
[background technology]
Can generate the essential information of software when traditional software is installed on the terminal, this essential information is recorded in the registration table, can confirm the software classification through the essential information that detects in the registration table.The essential information of software comprises installation path, Uninstaller path, icon file, version information etc., software classification such as MPC player software, sudden peal of thunder player software, QQ player software etc.
Yet,, can't confirm the software classification through the essential information that detects in the registration table when the essential information in the registration table is destroyed or some software when being installed in the essential information that generates on the terminal and not being recorded in the registration table.
[summary of the invention]
Based on this, be necessary to provide a kind of method of detection software that need not through registration table and can not cause the omission phenomenon of software.
A kind of method that detects software may further comprise the steps:
Set up the software features storehouse, the coupling weights that said software features library storage critical file information, profile information and profile information are corresponding;
The scan objects file according to said critical file information, detects and whether to have critical file in the destination folder and mate successfully, if, then confirm the root directory that said destination folder is affiliated, otherwise end;
According to said profile information matching characteristic file in destination folder, obtain the corresponding matched weights, and calculate the matching parameter value according to the coupling weights;
Whether judge the matching parameter value calculate more than or equal to threshold value, if then confirm software classification under the destination folder, and from said software features storehouse, obtain the essential information of said software, otherwise finish according to said root directory and profile information.
Preferably, when said profile information is a plurality of profile information,, obtain the corresponding matched weights, and specifically comprise according to the step that the coupling weights calculate the matching parameter value according to said profile information matching characteristic file in destination folder:
According to said profile information matching characteristic file one by one in destination folder, mate successfully after, obtain the corresponding matched weights;
The coupling weights that obtain are superposeed obtain said matching parameter value.
Preferably, said matching condition according to profile information matching characteristic file in destination folder comprises a kind of in mating of file name coupling and file md5 value at least.
Preferably, said matching condition also comprises one or both in version numbers match and the digital signature matches.
Preferably; When said critical file information is a plurality of; According to said critical file information, detect and whether to have critical file in the destination folder and mate successfully, if; Then confirm the root directory that said destination folder is affiliated, otherwise the step that finishes is: said software features stock contains the priority that a plurality of critical file information are set in advance; Priority height according to said a plurality of critical file information matees critical file successively in destination folder, if mate successfully, then confirm the root directory that said destination folder is affiliated, otherwise finish.
In addition, also be necessary to provide a kind of system of detection software that need not through registration table and can not cause the omission phenomenon of software.
A kind of system that detects software comprises:
Create module, be used to set up the software features storehouse, the coupling weights that said software features library storage critical file information, profile information and profile information are corresponding;
Scan module; Be used for the scan objects file, and according to said critical file information, detect and whether have critical file in the destination folder and mate successfully; And detecting when having critical file and mating successfully, confirm the root directory under the said destination folder;
Matching module is used for according to said profile information obtaining the corresponding matched weights at destination folder matching characteristic file, and calculates the matching parameter value according to the coupling weights;
Judge module is used to judge that whether the matching parameter value that calculates is more than or equal to threshold value;
Identification module is used for when judging that said judge module is judged the matching parameter value greater than threshold value, confirms software classification under the destination folder according to said root directory and profile information, and from said software features storehouse, obtains the essential information of said software.
Preferably; When said profile information is a plurality of profile information; Said matching module also is used for according to said profile information at destination folder matching characteristic file one by one; After mating successfully, obtain the corresponding matched weights, the coupling weights that will obtain again superpose and obtain said matching parameter value.
Preferably, said matching module comprises a kind of in mating of file name coupling and file md5 value at least according to the matching condition of profile information matching characteristic file in destination folder.
Preferably, said matching condition also comprises one or both in version numbers match and the digital signature matches.
Preferably, when said critical file information was a plurality of, said software features also stored the priority that a plurality of critical file information are set in advance in the storehouse; Said scan module also is used for mating critical file at destination folder successively according to the priority height of said a plurality of critical file information, and when mating successfully, then confirms the root directory under the said destination folder.
The method and system of above-mentioned detection software are through setting up the software features storehouse, the scan objects file; Through confirm the root directory under the destination folder according to critical file information matches critical file, further according to profile information matching characteristic file in destination folder, obtain the corresponding matched weights again; Calculate the matching parameter value, with matching parameter value and threshold ratio, when the matching parameter value more than or equal to this threshold value; Then can confirm the software classification under the destination folder according to root directory and profile information; Thereby realized the detection of software, need not, can not cause the omission phenomenon of software through registration table.
[description of drawings]
Fig. 1 is the process flow diagram that detects the method for software among the embodiment;
Fig. 2 is the particular flow sheet that calculates the matching parameter value among the embodiment;
Fig. 3 is the structural representation that detects the system of software among the embodiment.
[embodiment]
Below in conjunction with concrete embodiment and accompanying drawing the technical scheme of the method and system of detection software is carried out detailed description.
As shown in Figure 1, in one embodiment, a kind of method that detects software may further comprise the steps:
Step S110 sets up the software features storehouse, the coupling weights that this software features library storage critical file information, profile information and profile information are corresponding.
For identification software, need set up the software features storehouse in advance.Critical file information in this software features storehouse is meant the fileinfo that is used for confirming the software root directory, like software startup fileinfo (QQ.exe fileinfo) etc.; Profile information is meant the fileinfo that is used for further confirming software; This document information can be selected by the user; As in the QQ software loginpanel.dll (Dynamic Link Library, dynamic link library) fileinfo, mainframe.dll fileinfo, im.dll fileinfo etc.; The corresponding coupling weights of profile information are meant gives corresponding weights when preset profile information is mated; As loginpanel.dll the corresponding coupling weights of fileinfo be 100, mainframe.dll the corresponding coupling weights of fileinfo be 100.
Critical file information and profile information can be one or more.
Critical file information can comprise the relation of critical file title, critical file identification number, the relative software root directory of critical file and expect root directory etc.The relation of the relative software root directory of critical file as Bin in software root directory AB and abc.exe differ 2 levels; The root directory relation value of AB can be made as-2, and expression AB is the parent directory of abc.exe parent directory, and is same;-1 expression differs 1 level; Bin is the parent directory of abc.exe, and 0 is illustrated in same level, and the like.The expectation root directory is a minimum parent directory under the All Files, wherein, can set a property value and confirm whether the root directory of software must be consistent with expectation root directory coupling.
In one embodiment, write down following information in the software features storehouse:
Wherein, SymbolFile representes a critical file, and RootRelativePath representes the relation of this document with respect to the software root directory;-2 expressions differ two levels, and Priority representes that a plurality of critical file information confirm the priority of root directory, matees from high to low successively; Coupling can be confirmed root directory, and RootName representes the root directory title expected, and whether the Strict attribute representation is necessary for this title; If represent that then this root directory is necessary for this title.
Confirm destination folder according to critical file information matches critical file under during root directory; Can the attribute of field Strict be mated; Like the attribute of Strict is that root directory must mate this expectation root directory under the 1 expression destination folder, and the attribute of Strict is that the affiliated root directory of 0 expression destination folder not necessarily matees this expectation root directory.In addition; Possibly there is different versions in same software; The file structure of each version maybe be different; Therefore same software can be set up different critical file information, profile information to different editions, also can set up same critical file information and profile information in the interval correspondence of a version.
Step S120, the scan objects file detects according to critical file information and whether to have critical file in the destination folder and mate successfully, if, execution in step S130, otherwise end.
The scan objects file can be realized the scan objects files through the whole disks of scanning, also can be according to the scan objects file of User Defined scanning pattern, but or obtain the shortcut of user's appointment or the scan objects file is carried out in the position of executive software.
According to critical file information the file in the scan objects file is detected, the coupling critical file if mate successfully, then can be confirmed the root directory that this destination folder is affiliated.The matching condition of coupling critical file comprises a kind of in mating of file name coupling and file Md5 value at least, also comprises in version numbers match and the digital signature matches one or both.
When critical file information when being a plurality of, comprise QQ.exe fileinfo, TXpaltform.exe fileinfo like the critical file information of QQ software.In the software features storehouse, also store the priority of a plurality of critical file information that are provided with in advance.Step S120 is specially: the scan objects file, in destination folder, mate critical file successively according to a plurality of critical file information priority level height, and if mate successfully, then confirm the root directory that this destination folder is affiliated.Mate one by one according to a plurality of critical file information priority levels, after whole coupling successes, can confirm the root directory that this destination folder is affiliated.
Step S130 confirms the root directory that this destination folder is affiliated.
Confirm the root directory that this destination folder is affiliated, promptly tentatively confirmed the classification of software.
Step S140 according to profile information matching characteristic file in destination folder, obtains the corresponding matched weights, and calculates the matching parameter value according to the coupling weights.
At least comprise a kind of in mating of file name coupling and file Md5 value according to the matching condition of profile information matching characteristic file in destination folder; Also comprise in version numbers match and the digital signature matches one or both, version numbers match and digital signature matches possibly all not comprised yet.
When profile information is a plurality of profile information; Promptly as in the QQ software loginpanel.dll (Dynamic Link Library; Dynamic link library) fileinfo, mainframe.dll fileinfo, im.dll fileinfo etc.; As shown in Figure 3, step S140 is specially:
Step S141, according to profile information matching characteristic file one by one in destination folder, mate successfully after, obtain the corresponding matched weights.
After mating successfully; With obtaining the corresponding coupling weights of this profile information; Like 2 profile information, bin fileinfo mate successfully, obtaining corresponding coupling weights is 100; Bin fileinfo mate successfully, obtaining corresponding coupling weights is 100.
Step S143, the coupling weights that obtain are superposeed obtains this matching parameter value.
To mate the weights stack and obtain 200 as the matching parameter value.
Whether step S150 judges the matching parameter value calculate more than or equal to threshold value, if, execution in step S160 then, otherwise finish.
When the matching parameter value that calculates during, according to the software classification of confirming with catalogue and profile information under this destination folder more than or equal to threshold value.Threshold value is by default, as is set at 500.
Step S160 confirms the software classification under the destination folder according to root directory and profile information, and from the software features storehouse, obtains the essential information of this software.
After having confirmed the software classification, from the software features storehouse, can obtain the essential information of this software, essential information comprises title, classification, installation path, unloading path, icon file, version information of software or the like.
As shown in Figure 3, in one embodiment, a kind of system that detects software comprises: create module 310, scan module 320, matching module 330, judge module 340 and identification module 350.Wherein,
Create module 310 and be used to set up the software features storehouse, the coupling weights that this software features library storage critical file information, profile information and profile information are corresponding.For identification software, need set up the software features storehouse in advance.Critical file information in this software features storehouse is meant the fileinfo that is used for confirming the software root directory, like software startup fileinfo (QQ.exe fileinfo) etc.; Profile information is meant the fileinfo that is used for further confirming software; This document information can be selected by the user; As in the QQ software loginpanel.dll (Dynamic Link Library, dynamic link library) fileinfo, mainframe.dll fileinfo, im.dll fileinfo etc.; The corresponding coupling weights of profile information are meant gives corresponding weights when preset profile information is mated; As loginpanel.dll the corresponding coupling weights of fileinfo be 100, mainframe.dll the corresponding coupling weights of fileinfo be 100.Critical file information and profile information can be one or more.
Critical file information can comprise the relation and the expectation root directory of critical file title, critical file identification number, the relative software root directory of critical file.The relation of the relative software root directory of critical file as Bin in software root directory AB and abc.exe differ 2 levels; The root directory relation value of AB can be made as-2, and expression AB is the parent directory of abc.exe parent directory, and is same;-1 expression differs 1 level; Bin is the parent directory of abc.exe, and 0 is illustrated in same level, and the like.The expectation root directory is a minimum parent directory under the All Files, wherein, can set a property value and confirm whether the software root directory must be consistent with expectation root directory coupling.In method embodiment, information recorded in the software features storehouse, SymbolFile representes a critical file information; RootRelativePath representes the relation of this document with respect to the software root directory, and-2 expressions differ two levels, and Priority representes that a plurality of critical file information confirm the priority of root directory; Mate from high to low successively; Coupling can be confirmed root directory, and RootName representes the root directory title expected, and whether the Stirct attribute representation is necessary for this title; If represent that then this root directory is necessary for this title.
Possibly there is different versions in same software; The file structure of each version maybe be different; Therefore can set up different critical file information, profile information to different editions by same software, also can set up same critical file information and profile information in the interval correspondence of a version.
Scan module 320 is used for the scan objects file, and detects according to critical file information and whether to have critical file in the destination folder and mate successfully, and detecting when having critical file and mating successfully, confirms the root directory that destination folder is affiliated.The scan objects file can be realized the scan objects files through the whole disks of scanning, also can be according to the scan objects file of User Defined scanning pattern, but or obtain the shortcut of user's appointment or the scan objects file is carried out in the position of executive software.
Critical file information can be a plurality of, comprises QQ.exe fileinfo, TXpaltform.exe fileinfo like the critical file information of QQ software.In the software features storehouse, also store the priority that a plurality of critical file information are set in advance.Scan module 320 also is used for mating critical file at destination folder successively according to a plurality of critical file information priority level height, and when mating successfully, then confirms the root directory under this destination folder.Scan module 320 matees according to a plurality of critical file information priority levels one by one, after whole coupling successes, can confirm the root directory that this destination folder is affiliated.The matching condition of coupling critical file comprises a kind of in mating of file name coupling and file Md5 value at least, also comprises in version numbers match and the digital signature matches one or both.
In addition; Scan module 320 is under confirming destination folder during root directory according to critical file information matches critical file; Can the attribute of field Strict be mated; Like the attribute of Strict is that root directory must mate this expectation root directory under the 1 expression destination folder, and the attribute of Strict is that the affiliated root directory of 0 expression destination folder not necessarily matees this expectation root directory.
Matching module 330 is used for according to profile information obtaining the corresponding matched weights at destination folder matching characteristic file, and calculates the matching parameter value according to the coupling weights.Matching module 330 comprises a kind of in mating of file name coupling and file md5 value at least according to the matching condition of profile information matching characteristic file in destination folder, also comprises in version numbers match and the digital signature matches one or both.
When profile information is a plurality of profile information; Promptly as in the QQ software loginpanel.dll (Dynamic Link Library; Dynamic link library) fileinfo, mainframe.dll fileinfo, im.dll fileinfo etc.; Matching module 330 also is used for according to a plurality of profile information at destination folder matching characteristic file one by one; After mating successfully, obtain the corresponding matched weights, the coupling weights that will obtain again superpose and obtain this matching parameter value.After mating successfully, with obtaining the corresponding coupling weights of this profile information, like 2 profile information; Loginpanel.dll fileinfo match corresponding tag file; Promptly mate successfully, obtaining corresponding coupling weights is 100, bin fileinfo match corresponding tag file; Promptly mate successfully, obtaining corresponding coupling weights is 100.Matching module 330 will mate the weights stack and obtain 200 as the matching parameter value.
Judge module 340 is used to judge that whether the matching parameter value that calculates is more than or equal to threshold value.
Identification module 350 is used for when judge module 340 is judged the matching parameter value greater than threshold value, confirms the software classification under the destination folder according to root directory and profile information, and from the software features storehouse, obtains the essential information of this software.Threshold value is by default, as is set at 500.Essential information comprises title, classification, installation path, unloading path, icon file, version information of software or the like.
The method and system of above-mentioned detection software are through setting up the software features storehouse, the scan objects file; Through confirm the root directory under the destination folder according to critical file information matches critical file, further according to profile information matching characteristic file in destination folder, obtain the corresponding matched weights again; Calculate the matching parameter value; With matching parameter value and threshold ratio, when the matching parameter value more than or equal to this threshold value, then can confirm the software classification under the destination folder according to root directory and profile information; Need not through registration table, can not cause the omission phenomenon of software.
In addition, various to the matching condition of single file, flexibly, can meet the different needs.
The above embodiment has only expressed several kinds of embodiments of the present invention, and it describes comparatively concrete and detailed, but can not therefore be interpreted as the restriction to claim of the present invention.Should be pointed out that for the person of ordinary skill of the art under the prerequisite that does not break away from the present invention's design, can also make some distortion and improvement, these all belong to protection scope of the present invention.Therefore, the protection domain of patent of the present invention should be as the criterion with accompanying claims.
Claims (10)
1. method that detects software may further comprise the steps:
Set up the software features storehouse, the coupling weights that said software features library storage critical file information, profile information and profile information are corresponding;
The scan objects file according to said critical file information, detects and whether to have critical file in the destination folder and mate successfully, if, then confirm the root directory that said destination folder is affiliated, otherwise end;
According to said profile information matching characteristic file in destination folder, obtain the corresponding matched weights, and calculate the matching parameter value according to the coupling weights;
Whether judge the matching parameter value calculate more than or equal to threshold value, if then confirm software classification under the destination folder, and from said software features storehouse, obtain the essential information of said software, otherwise finish according to said root directory and profile information.
2. the method for detection software according to claim 1; It is characterized in that; When said profile information is a plurality of profile information; According to said profile information matching characteristic file in destination folder, obtain the corresponding matched weights, and specifically comprise according to the step of coupling weights calculating matching parameter value:
According to said profile information matching characteristic file one by one in destination folder, mate successfully after, obtain the corresponding matched weights;
The coupling weights that obtain are superposeed obtain said matching parameter value.
3. the method for detection software according to claim 1 is characterized in that, said matching condition according to profile information matching characteristic file in destination folder comprises a kind of in mating of file name coupling and file md5 value at least.
4. the method for detection software according to claim 3 is characterized in that, said matching condition also comprises one or both in version numbers match and the digital signature matches.
5. the method for detection software according to claim 1; It is characterized in that, when said critical file information is a plurality of, according to said critical file information; Detect and whether to have critical file in the destination folder and mate successfully; If then confirm the root directory that said destination folder is affiliated, otherwise the step that finishes is: said software features stock contains the priority that a plurality of critical file information are set in advance; Priority height according to said a plurality of critical file information matees critical file successively in destination folder, if mate successfully, then confirm the root directory that said destination folder is affiliated, otherwise finish.
6. a system that detects software is characterized in that, comprising:
Create module, be used to set up the software features storehouse, the coupling weights that said software features library storage critical file information, profile information and profile information are corresponding;
Scan module; Be used for the scan objects file, and according to said critical file information, detect and whether have critical file in the destination folder and mate successfully; And detecting when having critical file and mating successfully, confirm the root directory under the said destination folder;
Matching module is used for according to said profile information obtaining the corresponding matched weights at destination folder matching characteristic file, and calculates the matching parameter value according to the coupling weights;
Judge module is used to judge that whether the matching parameter value that calculates is more than or equal to threshold value;
Identification module is used for when judging that said judge module is judged the matching parameter value greater than threshold value, confirms software classification under the destination folder according to said root directory and profile information, and from said software features storehouse, obtains the essential information of said software.
7. the system of detection software according to claim 6; It is characterized in that; When said profile information was a plurality of profile information, said matching module also was used for according to said profile information at destination folder matching characteristic file one by one, mate successfully after; Obtain the corresponding matched weights, the coupling weights that will obtain again superpose and obtain said matching parameter value.
8. the system of detection software according to claim 6 is characterized in that, said matching module comprises a kind of in mating of file name coupling and file md5 value at least according to the matching condition of profile information matching characteristic file in destination folder.
9. the system of detection software according to claim 8 is characterized in that, said matching condition also comprises one or both in version numbers match and the digital signature matches.
10. the system of detection software according to claim 6 is characterized in that, when said critical file information was a plurality of, said software features also stored the priority that a plurality of critical file information are set in advance in the storehouse; Said scan module also is used for mating critical file at destination folder successively according to the priority height of said a plurality of critical file information, and when mating successfully, then confirms the root directory under the said destination folder.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201110157811.9A CN102831049B (en) | 2011-06-13 | 2011-06-13 | Method and system for detecting software |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201110157811.9A CN102831049B (en) | 2011-06-13 | 2011-06-13 | Method and system for detecting software |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN102831049A true CN102831049A (en) | 2012-12-19 |
| CN102831049B CN102831049B (en) | 2015-05-20 |
Family
ID=47334198
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201110157811.9A Active CN102831049B (en) | 2011-06-13 | 2011-06-13 | Method and system for detecting software |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN102831049B (en) |
Cited By (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN104133703A (en) * | 2014-07-31 | 2014-11-05 | 珠海市君天电子科技有限公司 | Method and device for determining software not used frequently |
| CN104252349A (en) * | 2013-06-28 | 2014-12-31 | 北京艾普优计算机系统有限公司 | Method and device for recognizing software |
| CN104268464A (en) * | 2014-09-30 | 2015-01-07 | 珠海市君天电子科技有限公司 | Promotion rule for promotion software and determination method, server and communication terminal for promotion software |
| CN105786579A (en) * | 2016-03-28 | 2016-07-20 | 联想(北京)有限公司 | Processing method and device as well as program start stopping method and device |
| CN111897773A (en) * | 2019-05-05 | 2020-11-06 | 深圳市云趣网络科技股份有限公司 | Method and device for searching local game starting file of windows system |
| CN113779620A (en) * | 2021-08-19 | 2021-12-10 | 成都鲁易科技有限公司 | Program file checking method and device, storage medium and computer equipment |
Families Citing this family (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107491306B (en) * | 2017-08-11 | 2019-11-22 | 中国地质大学（武汉） | Association and user interface automatic generation method between a kind of mobile application of self study |
Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2004097602A2 (en) * | 2003-04-25 | 2004-11-11 | Messagelabs Limited | A method of, and system for, heuristically determining that an unknown file is harmless by using traffic heuristics |
| CN101213555A (en) * | 2005-06-30 | 2008-07-02 | 普瑞维克斯有限公司 | Methods and apparatus for dealing with malware |
| CN101350049A (en) * | 2007-07-16 | 2009-01-21 | 珠海金山软件股份有限公司 | Method, apparatus and network device for identifying virus document |
-
2011
- 2011-06-13 CN CN201110157811.9A patent/CN102831049B/en active Active
Patent Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2004097602A2 (en) * | 2003-04-25 | 2004-11-11 | Messagelabs Limited | A method of, and system for, heuristically determining that an unknown file is harmless by using traffic heuristics |
| CN101213555A (en) * | 2005-06-30 | 2008-07-02 | 普瑞维克斯有限公司 | Methods and apparatus for dealing with malware |
| CN101350049A (en) * | 2007-07-16 | 2009-01-21 | 珠海金山软件股份有限公司 | Method, apparatus and network device for identifying virus document |
Cited By (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN104252349A (en) * | 2013-06-28 | 2014-12-31 | 北京艾普优计算机系统有限公司 | Method and device for recognizing software |
| CN104133703A (en) * | 2014-07-31 | 2014-11-05 | 珠海市君天电子科技有限公司 | Method and device for determining software not used frequently |
| CN104268464A (en) * | 2014-09-30 | 2015-01-07 | 珠海市君天电子科技有限公司 | Promotion rule for promotion software and determination method, server and communication terminal for promotion software |
| CN104268464B (en) * | 2014-09-30 | 2017-02-15 | 珠海市君天电子科技有限公司 | Promotion rule for promotion software and determination method, server and communication terminal for promotion software |
| CN105786579A (en) * | 2016-03-28 | 2016-07-20 | 联想(北京)有限公司 | Processing method and device as well as program start stopping method and device |
| CN111897773A (en) * | 2019-05-05 | 2020-11-06 | 深圳市云趣网络科技股份有限公司 | Method and device for searching local game starting file of windows system |
| CN113779620A (en) * | 2021-08-19 | 2021-12-10 | 成都鲁易科技有限公司 | Program file checking method and device, storage medium and computer equipment |
Also Published As
| Publication number | Publication date |
|---|---|
| CN102831049B (en) | 2015-05-20 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN102831049B (en) | Method and system for detecting software | |
| CN101620529B (en) | Method and system for intercepting pop-up window | |
| CN102043655B (en) | Method and system for carrying out advanced uninstall on software | |
| US20110093466A1 (en) | Heuristic event clustering of media using metadata | |
| US8381296B2 (en) | Method and system for detecting and removing hidden pestware files | |
| US8443445B1 (en) | Risk-aware scanning of objects | |
| CN103020521B (en) | Wooden horse scan method and system | |
| WO2007100424A1 (en) | Multi-protocol removable storage device | |
| CN110704104B (en) | Application counterfeiting detection method, intelligent terminal and storage medium | |
| CN101937500A (en) | Computer terminal security protection method and system | |
| CN106372115A (en) | Data reading/writing method and system, and database system | |
| CN105376277A (en) | Data synchronization method and device | |
| US20180165452A1 (en) | Electronic device and method for detecting malicious file | |
| CN103198243A (en) | Method and device for identifying emulational application programs | |
| CN101620658A (en) | Hook detecting method under Windows operation system | |
| CN103699837B (en) | A kind of method of scanning file and terminal unit | |
| CN106201602A (en) | A kind of tag providing method, acquisition methods, server and electronic equipment | |
| CN100489730C (en) | Method and system for real time detecting process integrity | |
| CN103500311B (en) | software detecting method and system | |
| CN101620659A (en) | Hook detecting method under Windows operation system | |
| US8250558B2 (en) | Dynamic linked library add-on features | |
| CN100426237C (en) | Stack overflow protection method in operation for embedded system | |
| CN102314490B (en) | Method and device for recovering Linux FAT (File Allocation Table) file system | |
| CN103747241A (en) | Method and apparatus for detecting integrity of video | |
| US20100169976A1 (en) | Extensible activation exploit scanner |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C14 | Grant of patent or utility model | ||
| GR01 | Patent grant |