CN102867147B - A kind of method and apparatus of file scan - Google Patents
A kind of method and apparatus of file scan Download PDFInfo
- Publication number
- CN102867147B CN102867147B CN201210307189.XA CN201210307189A CN102867147B CN 102867147 B CN102867147 B CN 102867147B CN 201210307189 A CN201210307189 A CN 201210307189A CN 102867147 B CN102867147 B CN 102867147B
- Authority
- CN
- China
- Prior art keywords
- sweep object
- scanning
- user
- file
- specific
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 238000000034 method Methods 0.000 title claims abstract description 53
- 241000700605 Viruses Species 0.000 claims description 26
- 230000008569 process Effects 0.000 claims description 14
- 238000000605 extraction Methods 0.000 claims description 9
- 208000015181 infectious disease Diseases 0.000 claims description 7
- 230000002458 infectious effect Effects 0.000 claims description 7
- 230000006399 behavior Effects 0.000 description 41
- 230000006870 function Effects 0.000 description 13
- 230000002155 anti-virotic effect Effects 0.000 description 3
- 230000008901 benefit Effects 0.000 description 3
- 238000004590 computer program Methods 0.000 description 3
- 238000005516 engineering process Methods 0.000 description 3
- 230000009471 action Effects 0.000 description 2
- 230000008859 change Effects 0.000 description 2
- 230000006378 damage Effects 0.000 description 2
- 230000007246 mechanism Effects 0.000 description 2
- 230000001960 triggered effect Effects 0.000 description 2
- 230000003542 behavioural effect Effects 0.000 description 1
- 230000008878 coupling Effects 0.000 description 1
- 238000010168 coupling process Methods 0.000 description 1
- 238000005859 coupling reaction Methods 0.000 description 1
- 238000000151 deposition Methods 0.000 description 1
- 238000001514 detection method Methods 0.000 description 1
- 230000000977 initiatory effect Effects 0.000 description 1
- 230000013011 mating Effects 0.000 description 1
- 230000009897 systematic effect Effects 0.000 description 1
- 230000009385 viral infection Effects 0.000 description 1
Landscapes
- User Interface Of Digital Computer (AREA)
Abstract
The invention discloses a kind of method and apparatus of file scan, wherein, the method for described file scan comprises: trigger entering custom scan pattern according to described user; Run described custom scan pattern, comprising: generate and represent the specific sweep object of current user equipment; The specific sweep object selected for user scans.The present invention can generate sweep object more accurately according to the actual conditions of subscriber equipment, simplifies user operation, improves the safety and stability that subscriber equipment uses.
Description
Technical field
The present invention relates to the technical field of information security, be specifically related to a kind of method of file scan, and, a kind of device of file scan.
Background technology
Computer virus refers to, and " the destruction computer function that organizer inserts in computer program or destroy data affect computing machine use and can one group of computer instruction of self-replacation or program code.Computing machine is once catch virus, computing machine is usually expressed as under its file is increased, deletes out, changes title or attribute, moves to other catalogue, virus, to these operations of computer documents, may cause a series of problems such as normal program cannot be run, computer operating system collapse, computing machine is remotely controlled, user profile is stolen.
In order to ensure the safe operation of computing machine, the file to infecting virus in computing machine is needed to carry out checking and killing virus, to prevent and to remove the destruction of virus.Antivirus engine is exactly a set ofly judge that whether specific program behavior is the technology mechanism of Virus (comprising suspect program), generally speaking, antivirus engine is according to the current selected scan pattern of user, scanning is initiated to all or part program in subscriber equipment or file, go to contrast corresponding program or file by the feature in its virus base (characteristic set of virus), for the program or the file that meet virus characteristic, be judged to be virus.
In prior art, antivirus engine generally comprises three kinds of scan patterns, scan full hard disk pattern, fast scan mode and assigned address scan pattern.Wherein, scan full hard disk pattern scans for program each in subscriber equipment and file; Fast scan mode scans for the software of some keys in system and important catalogue.Such as internal memory, IE, plug-in unit, registration table etc., important catalogue as c: windows system32 etc.Assigned address scan pattern is the directory tree demonstrating system file to user, comprises file catalogue in layer, successively selects for user.Can find out, in prior art, the scan pattern of demand of being close to the users most and assigned address scan pattern.
But, the assigned address scan pattern of prior art is mainly for carrying out selection scanning in the path of depositing document, user can only select to scan the All Files under one or more drive, or, manually go concrete file or the catalogue of selecting needs scanning, but, very easily there is the file of virus infections or directory user and may not to know for sure its position in some, the file that such as all kinds of IM (instant messaging) software receives, executable file, all OFFICE files etc.; In this case, scanning based on All Files under drive is obviously too lost time and is too expended system resource, and user does not know to need the accurate location of scanning or specify errors present will cause virus cannot killing, destroy the security of subscriber equipment.
Therefore, those skilled in the art's technical matters in the urgent need to address is: the mechanism creatively proposing a kind of file scan, generate sweep object more accurately in order to the actual conditions according to subscriber equipment, simplify user operation, improve the safety and stability that subscriber equipment uses.
Summary of the invention
In view of the above problems, the present invention is proposed to provide a kind of overcoming the problems referred to above or a kind of method of file scan solved the problem at least in part and the device of corresponding a kind of file scan.
According to one aspect of the present invention, provide a kind of method of file scan, comprising:
Receive user user interface element being moved to predefine position on screen to trigger;
Trigger according to described user and enter custom scan pattern;
Run described custom scan pattern, comprising:
Generate and represent the specific sweep object of current user equipment;
The specific sweep object selected for user scans.
Alternatively, described custom scan pattern enters through hover operation triggering according to the mouse of user's default characteristic area on interface.
Alternatively, described generation the step representing the specific sweep object of current user equipment comprise further:
Generate multiple preset specific sweep object, described specific sweep object comprises the scanning position information of sweep object mark and correspondence, and/or, the file format information of sweep object mark and correspondence;
Represent the option of described multiple sweep object mark.
Alternatively, described generation the step representing the specific sweep object of current user equipment comprise further:
Generate corresponding specific sweep object according to the scanning demand that user submits to, wherein, described specific sweep object comprises scanning position information, and/or, file format information;
Sweep object mark is distributed for each specific sweep object;
Represent the option of described multiple sweep object mark.
Alternatively, described generation the step representing the specific sweep object of current user equipment comprise further:
Obtain the user behavior information in current user equipment preset time period;
Generate specific sweep object according to described user behavior information, described specific sweep object comprises the scanning position information of sweep object mark and correspondence, and/or, the file format information of sweep object mark and correspondence;
Represent the option of described multiple sweep object mark.
Alternatively, the step representing the option of multiple sweep object mark described in comprises further:
Obtain the user behavior information in current user equipment preset time period, according to the specific sweep object of described user behavior information determination emphasis, the specific sweep object of described emphasis is scanning position information and/or file format information, is greater than the specific sweep object of predetermined threshold value with the degree of association of user behavior information;
Represent the option of described multiple sweep object mark, process or sequence advanced processing are highlighted to the sweep object mark of the specific sweep object of described emphasis.
Alternatively, the step that the described specific sweep object selected for user carries out scanning comprises:
Receive the selection information of the sweep object mark that user submits to;
According to scanning position information and/or the file format information of the corresponding sweep object mark of described selection information extraction, the file of described scanning position and/or corresponding format is scanned.
Alternatively, described default characteristic area is the control regions with custom scan pattern identification.
Alternatively, described scanning position information comprises desktop, my document, download directory, based on the file that Instant Messenger (IM) software and/or e-mail reception arrive, and/or, external storage equipment; Wherein, described download directory, based on the scanning position information of the file that Instant Messenger (IM) software and/or e-mail reception arrive, obtains by reading from the configuration file of corresponding software; The scanning position information of described external storage equipment, is obtained by the inquiry being initiated the external storage equipment be connected with current device by the application programming interfaces api function of operating system;
Described file format information comprises executable file, and/or, OFFICE document.
Alternatively, the content that the described specific sweep object selected for user carries out scanning comprises: the scanning of leak attacker, worm-type virus scanning, Rootkit scanning, spyware scanning, wooden horse scanning, ad ware scanning, infectious virus scanning, and/or scan for malware.
According to a further aspect in the invention, provide a kind of device of file scan, comprising:
Receiver module, triggers for receiving user user interface element being moved to predefine position on screen;
Trigger module, enters custom scan pattern for triggering according to described user;
Running module, for running described custom scan pattern, comprising:
Specific sweep object generates and represents submodule, for generating and representing the specific sweep object of current user equipment;
Selected object scanning submodule, scans for the specific sweep object selected for user.
Alternatively, described custom scan pattern enters through hover operation triggering according to the mouse of user's default characteristic area on interface.
Alternatively, described specific sweep object generates and represents submodule and comprise further:
Preset object generation unit, for generating multiple preset specific sweep object, described specific sweep object comprises the scanning position information of sweep object mark and correspondence, and/or, the file format information of sweep object mark and correspondence;
Represent unit, for representing the option of described multiple sweep object mark.
Alternatively, described specific sweep object generates and represents submodule and comprise further:
Demand object generation unit, generate corresponding specific sweep object for the scanning demand submitted to according to user, wherein, described specific sweep object comprises scanning position information, and/or, file format information;
Mark allocation units, for distributing sweep object mark for each specific sweep object;
Represent unit, for representing the option of described multiple sweep object mark.
Alternatively, described specific sweep object generates and represents submodule and comprise further:
User behavior acquiring unit, for obtaining the user behavior information in current user equipment preset time period;
Behavior match objects generation unit, for generating specific sweep object according to described user behavior information, described specific sweep object comprises the scanning position information of sweep object mark and correspondence, and/or, the file format information of sweep object mark and correspondence;
Represent unit, for representing the option of described multiple sweep object mark.
Alternatively, represent unit described in comprise further:
Key object determination subelement, for obtaining the user behavior information in current user equipment preset time period, according to the specific sweep object of described user behavior information determination emphasis, the specific sweep object of described emphasis is scanning position information and/or file format information, is greater than the specific sweep object of predetermined threshold value with the degree of association of user behavior information;
Emphasis represents process subelement, for representing the option of described multiple sweep object mark, highlights process or sequence advanced processing to the sweep object mark of the specific sweep object of described emphasis.
Alternatively, described selected object scanning submodule comprises:
Select information receiving unit, for receiving the selection information of the sweep object mark that user submits to;
Scanning element, for according to the scanning position information of the corresponding sweep object mark of described selection information extraction and/or file format information, scans the file of described scanning position and/or corresponding format.
Alternatively, described default characteristic area is the control regions with custom scan pattern identification.
Alternatively, described scanning position information comprises desktop, my document, download directory, based on the file that Instant Messenger (IM) software and/or e-mail reception arrive, and/or, external storage equipment; Wherein, described download directory, based on the scanning position information of the file that Instant Messenger (IM) software and/or e-mail reception arrive, obtains by reading from the configuration file of corresponding software; The scanning position information of described external storage equipment, is obtained by the inquiry being initiated the external storage equipment be connected with current device by the application programming interfaces api function of operating system;
Described file format information comprises executable file, and/or, OFFICE document.
Alternatively, the content that the described specific sweep object selected for user carries out scanning comprises: the scanning of leak attacker, worm-type virus scanning, Rootkit scanning, spyware scanning, wooden horse scanning, ad ware scanning, infectious virus scanning, and/or scan for malware.
According to a further aspect in the invention, provide a kind of document scanning system, described document scanning system is arranged on server or client, comprising:
Receiver module, triggers for receiving user user interface element being moved to predefine position on screen;
Trigger module, enters custom scan pattern for triggering according to described user;
Running module, for running described custom scan pattern, comprising:
Specific sweep object generates and represents submodule, for generating and representing the specific sweep object of current user equipment;
Selected object scanning submodule, scans for the specific sweep object selected for user.
The present invention creatively proposes a kind of self-defining file scan pattern, based on this pattern, can according to the actual conditions of subscriber equipment, generate the specific sweep object more meeting user's request, and, described specific sweep object is not limited to whole scannings of file under certain drive, can be the specific file location that user often uses, as download directory; Can also the file type commonly used of user, as executable file or OFFICE document; Thus provide sweep object more accurately for user, simplify user operation, improve the safety and stability that subscriber equipment uses.
Above-mentioned explanation is only the general introduction of technical solution of the present invention, in order to technological means of the present invention can be better understood, and can be implemented according to the content of instructions, and can become apparent, below especially exemplified by the specific embodiment of the present invention to allow above and other objects of the present invention, feature and advantage.
Accompanying drawing explanation
By reading hereafter detailed description of the preferred embodiment, various other advantage and benefit will become cheer and bright for those of ordinary skill in the art.Accompanying drawing only for illustrating the object of preferred implementation, and does not think limitation of the present invention.And in whole accompanying drawing, represent identical parts by identical reference symbol.In the accompanying drawings:
Fig. 1 shows a kind of according to an embodiment of the invention flow chart of steps of embodiment of the method 1 of file scan;
Fig. 2 shows a kind of according to an embodiment of the invention flow chart of steps of embodiment of the method 2 of file scan;
Fig. 3 shows a kind of according to an embodiment of the invention flow chart of steps of embodiment of the method 3 of file scan;
Fig. 4 shows a kind of according to an embodiment of the invention flow chart of steps of embodiment of the method 4 of file scan;
Fig. 5 shows a kind of according to an embodiment of the invention structured flowchart of device embodiment of file scan.
Embodiment
Below with reference to accompanying drawings exemplary embodiment of the present disclosure is described in more detail.Although show exemplary embodiment of the present disclosure in accompanying drawing, however should be appreciated that can realize the disclosure in a variety of manners and not should limit by the embodiment set forth here.On the contrary, provide these embodiments to be in order to more thoroughly the disclosure can be understood, and complete for the scope of the present disclosure can be conveyed to those skilled in the art.
One of core idea of the embodiment of the present invention is, a kind of self-defining file scan pattern is creatively proposed, based on this pattern, can according to the actual conditions of subscriber equipment, generate and more meet the specific sweep object of user's request, and described specific sweep object is not limited to whole scannings of file under certain drive, can be the specific file location that user often uses, as download directory; Can also the file type commonly used of user, as executable file or OFFICE document; There is provided sweep object more accurately to be reached for user, simplify user operation, improve the object of the safety and stability that subscriber equipment uses.
With reference to Fig. 1, it illustrates the flow chart of steps of the embodiment of the method 1 of a kind of file scan of the present invention, specifically can comprise the steps:
Step 101, receives user user interface element being moved to predefine position on screen and triggers;
Wherein, described user interface element comprises icon, window, the controls such as menu.
Step 102, triggers according to described user and enters custom scan pattern;
In one preferred embodiment of the invention, described custom scan pattern can enter according to the hover of user's default characteristic area on interface (mouse passes through) operation triggering.More preferably, described default characteristic area can for having the control regions of custom scan pattern identification.
Specifically, hover is a method of imitating hover events (mouse moves to above an object and shifts out this object), and it be the state that the task of frequent use provides one and " remains on wherein ".Above the element that mouse moves to a coupling time (the default characteristic area as on the interface in the present embodiment), first function (over (Function), mouse moves on to the function that element will trigger) of specifying can be triggered.When mouse shifts out this element, second function (out (Function), mouse shifts out the function that element will trigger) of specifying can be triggered.And, can along with the detection whether be still in mouse in element-specific (such as, be in div ejection layer or popup menu), if, then can continue to keep " hovering " state, and do not trigger the event of shifting out, described in enter default characteristic area triggering javascript code means specifically can be adopted to arrange.
Certainly, above-mentioned user triggers the mode entering custom scan pattern and is only used as example, and it is all feasible that those skilled in the art arrange any one triggering mode, such as, using user default characteristic area mouse clicking operation as triggering etc., the present invention is not restricted this.
Step 103, run described custom scan pattern, specifically can comprise following sub-step:
Sub-step S11, generates and represents the specific sweep object of current user equipment;
Sub-step S12, the specific sweep object selected for user scans.
In embodiments of the present invention, described specific sweep object is the accurate sweep object of the actual demand of more mating current user equipment, can comprise the scanning position information of sweep object mark and correspondence, and/or, the file format information of sweep object mark and correspondence.Such as, sweep object mark as shown in the following Table 1 and corresponding scanning position information can be comprised; And, sweep object mark as shown in the following Table 2 and corresponding file format information.
Table 1:
Wherein, described download directory, based on the scanning position information of the file that Instant Messenger (IM) software and/or e-mail reception arrive, obtains by reading from the configuration file of corresponding software; The scanning position information of described external storage equipment, is obtained by the inquiry being initiated the external storage equipment be connected with current device by the application programming interfaces api function of operating system.
Table 2:
| Sweep object identifies | File format information |
| Executable file | .exe file |
| OFFICE document | .doc file .xls file .ppt file .vso file |
Certainly, the file format information of above-mentioned OFFICE document is only used as example, those skilled in the art are arranged arbitrarily according to actual conditions, such as, the file layout .docx file of more than 2007 versions of office document can also be comprised .xlsx file .pptx file, .vsox the file format information such as file, the present invention is not restricted this.
Described sweep object mark is mainly used in representing of specific sweep object, namely represents intuitively to user, is convenient to the sweep object information understood, so that user operation.
In actual applications, described specific sweep object can adopt the mode of popup menu to show, as a kind of example of embodiment of the present invention specific implementation, the mode of DIV ejection layer can be adopted to generate the menu of sweep object mark.More specifically, can required for ejection layer page location, the contents of the width of pop-up box, the height of pop-up box, ejection layer etc. create ejection layer, and wherein, the content of ejection layer can be word, picture etc., can pass with framework iframe, also can pass by the load () method of jQuery, it is all feasible that those skilled in the art are arranged arbitrarily according to actual conditions, such as, ejection background layer is set further, the display properties etc. of ejection layer is set.Certainly, the above-mentioned mode represented only be used as example, the present invention to this without the need to being limited.
Selecting in the multiple specific sweep object that user can represent on interface, when receiving the selection information of user for the specific sweep object required for it, initiating the scanning to respective scanned position or corresponding format file.
In specific implementation, described scanning can comprise the scanning for the specific sweep object security of scanning such as the scanning of leak attacker, worm-type virus scanning, Rootkit scanning, spyware scanning, wooden horse scanning, ad ware scanning, infectious virus scanning, scan for malware.The mode of concrete scanning and content are arranged arbitrarily according to actual conditions by those skilled in the art, and the present invention is not restricted this.
With reference to Fig. 2, it illustrates the flow chart of steps of the embodiment of the method 2 of a kind of file scan of the present invention, specifically can comprise the steps:
Step 201, receives user user interface element being moved to predefine position on screen and triggers;
Step 202, triggers according to described user and enters custom scan pattern;
Step 203, run described custom scan pattern, specifically comprise following sub-step:
Sub-step S21, generates multiple preset specific sweep object, and described specific sweep object comprises the scanning position information of sweep object mark and correspondence, and/or, the file format information of sweep object mark and correspondence;
Sub-step S22, represents the option of described multiple sweep object mark.
Sub-step S23, receives the selection information of the sweep object mark that user submits to;
Sub-step S24, according to scanning position information and/or the file format information of the corresponding sweep object mark of described selection information extraction, scans the file of described scanning position and/or corresponding format.
Present embodiments provide a kind of mode of carrying out scanning for fixing specific sweep object.As a kind of preferred exemplary of the present embodiment, described preset specific sweep object can comprise all the elements as above table 1 and table 2, by the actual scanning demand of statistics mass users, can also increase the option of other specific sweep object.Application the present embodiment, after user's triggering enters custom scan pattern, automatically fixing specific sweep object can be presented to user and select, the specific sweep object then selected for user scans.The present embodiment can meet the basic scanning demand of most of user.
With reference to Fig. 3, it illustrates the flow chart of steps of the embodiment of the method 3 of a kind of file scan of the present invention, specifically can comprise the steps:
Step 301, receives user user interface element being moved to predefine position on screen and triggers;
Step 302, triggers according to described user and enters custom scan pattern;
Step 303, run described custom scan pattern, specifically comprise following sub-step:
Sub-step S31, generate corresponding specific sweep object according to the scanning demand that user submits to, wherein, described specific sweep object comprises scanning position information, and/or, file format information;
Sub-step S32, distributes sweep object mark for each specific sweep object;
Sub-step S33, represents the option of described multiple sweep object mark;
Sub-step S34, receives the selection information of the sweep object mark that user submits to;
Sub-step S35, according to scanning position information and/or the file format information of the corresponding sweep object mark of described selection information extraction, scans the file of described scanning position and/or corresponding format.
Present embodiments provide and a kind ofly generate according to user-defined scanning demand the mode that specific sweep object carries out scanning.Such as, user have submitted the demand of scanning OFFICE document, so determine that the file format information scanned is .doc file according to this demand, .xls file, .ppt file .vso file, travels through according to these file layout fileinfos the position that overall content can determine corresponding document place; And for example, user have submitted scanning Instant Messenger (IM) software receive the demand of file, so determine the file reception catalogue arranged in corresponding Instant Messenger (IM) software configuration file according to this demand.
Application the present embodiment, the specific sweep object generated according to the scanning demand of user can be presented to user and select further, judge whether to meet the scanning demand that it is submitted in order to allow user, if meet, then user can to select wherein one or more scans.If do not meet, then user can resubmit scanning demand.The present embodiment can more be fitted the actual scanning demand of user.
Those skilled in the art are understandable, and the present embodiment also can not provide user to select the step of specific sweep object, directly scan based on the specific sweep object generated.The present invention is not restricted this.
With reference to Fig. 4, it illustrates the flow chart of steps of the embodiment of the method 4 of a kind of file scan of the present invention, specifically can comprise the steps:
Step 401, receives user user interface element being moved to predefine position on screen and triggers;
Step 402, triggers according to described user and enters custom scan pattern;
Step 403, run described custom scan pattern, specifically comprise following sub-step:
Sub-step S41, obtains the user behavior information in current user equipment preset time period;
Described user behavior information can be understood as the various operation behavior information in current user equipment, and wherein, described subscriber equipment can comprise all kinds of intelligent terminals such as computing machine, notebook computer, mobile phone, PDA, panel computer.Described user behavior information can be gathered by the client software installed on a user device, such as, by the online operation behavior information in certain software collection user 3 days and local behavioural information be: download multiple software to download directory, receive file to reception file from certain Instant Messenger (IM) software, open the number of times etc. of " my document ".
Certainly, the method of above-mentioned acquisition user behavior information and the user behavior information obtained all only are used as example, it is all feasible that those skilled in the art adopt any one mode to gather required user behavior information according to actual conditions, the embodiment of the present invention to this without the need to being limited.
Sub-step S42, generates specific sweep object according to described user behavior information, and described specific sweep object comprises the scanning position information of sweep object mark and correspondence, and/or, the file format information of sweep object mark and correspondence;
In the present embodiment, the document location of user's frequent operation that can show for user behavior information and/or the information of file layout, generate corresponding specific sweep object.Such as, in nearest 5 days, user frequently downloads software from the Internet, then generate the specific sweep object comprising " download directory "; Or as, in nearest 5 days, user frequently reads and writes " my document ", then generate the specific sweep object comprising " my document "; Or as, in nearest 5 days, user has processed a large amount of WORD and PPT files, then generate the specific sweep object comprising " OFFICE document ".About described " download directory ", " my document ", the explanation of " OFFICE document " illustrates can with reference to the content shown in above-mentioned table 1 and table 2, and the present invention does not repeat them here.
Sub-step S43, according to the specific sweep object of described user behavior information determination emphasis, the specific sweep object of described emphasis is scanning position information and/or file format information, is greater than the specific sweep object of predetermined threshold value with the degree of association of user behavior information;
The degree of association, for characterizing the correlation degree between two things, mathematically refers to the degree of two functional similarities.In the present embodiment, each scanning position information and/or file format information can be calculated, with the degree of association of user behavior information, such as, the degree of association of certain download directory and all download behaviors of user, degree of association of the number of times of " my document " and user writable " my document " etc., when the degree of association is greater than certain threshold value (such as 80%), is then judged to be the specific sweep object of emphasis by the specific sweep object of correspondence.
Sub-step S44, represents the option of described multiple sweep object mark, highlights process or sequence advanced processing to the sweep object mark of the specific sweep object of described emphasis;
By highlighting process or sequence advanced processing to the sweep object mark of the specific sweep object of described emphasis, user can be helped to determine the specific sweep object of its required scanning more quickly.
Sub-step S45, receives the selection information of the sweep object mark that user submits to;
Sub-step S46, according to scanning position information and/or the file format information of the corresponding sweep object mark of described selection information extraction, scans the file of described scanning position and/or corresponding format.
It should be noted that, for embodiment of the method, in order to simple description, therefore it is all expressed as a series of combination of actions, but those skilled in the art should know, the present invention is not by the restriction of described sequence of movement, because according to the present invention, some step can adopt other orders or carry out simultaneously.Secondly, those skilled in the art also should know, the embodiment described in instructions all belongs to preferred embodiment, and involved action and module might not be that the present invention is necessary.
With reference to Fig. 5, show a kind of according to an embodiment of the invention structured flowchart of device embodiment of file scan, specifically can comprise with lower module:
Receiver module 51, triggers for receiving user user interface element being moved to predefine position on screen;
Trigger module 52, enters custom scan pattern for triggering according to described user;
Running module 53, for running described custom scan pattern, specifically can comprise:
Specific sweep object generates and represents submodule 521, for generating and representing the specific sweep object of current user equipment;
Selected object scanning submodule 522, scans for the specific sweep object selected for user.
As a kind of example of embodiment of the present invention embody rule, described custom scan pattern presets characteristic area on interface mouse according to user enters through hover operation triggering.Wherein, described default characteristic area can for having the control regions of custom scan pattern identification.
In one preferred embodiment of the invention, described specific sweep object generates and represents submodule 521 and may further include with lower unit:
Preset object generation unit, for generating multiple preset specific sweep object, described specific sweep object comprises the scanning position information of sweep object mark and correspondence, and/or, the file format information of sweep object mark and correspondence;
Represent unit, for representing the option of described multiple sweep object mark.
In another preferred embodiment of the invention, described specific sweep object generates and represents submodule 521 and may further include with lower unit:
Demand object generation unit, generate corresponding specific sweep object for the scanning demand submitted to according to user, wherein, described specific sweep object comprises scanning position information, and/or, file format information;
Mark allocation units, for distributing sweep object mark for each specific sweep object;
Represent unit, for representing the option of described multiple sweep object mark.
In another preferred embodiment of the present invention, described specific sweep object generation represents submodule 521 and may further include with lower unit:
User behavior acquiring unit, for obtaining the user behavior information in current user equipment preset time period;
Behavior match objects generation unit, for generating specific sweep object according to described user behavior information, described specific sweep object comprises the scanning position information of sweep object mark and correspondence, and/or, the file format information of sweep object mark and correspondence;
Represent unit, for representing the option of described multiple sweep object mark.
More preferably, represent unit described in and may further include following subelement:
Key object determination subelement, for obtaining the user behavior information in current user equipment preset time period, according to the specific sweep object of described user behavior information determination emphasis, the specific sweep object of described emphasis is scanning position information and/or file format information, is greater than the specific sweep object of predetermined threshold value with the degree of association of user behavior information;
Emphasis represents process subelement, for representing the option of described multiple sweep object mark, highlights process or sequence advanced processing to the sweep object mark of the specific sweep object of described emphasis.
In one preferred embodiment of the invention, described selected object scanning submodule 522 specifically can comprise as lower unit:
Select information receiving unit, for receiving the selection information of the sweep object mark that user submits to;
Scanning element, for according to the scanning position information of the corresponding sweep object mark of described selection information extraction and/or file format information, scans the file of described scanning position and/or corresponding format.
In specific implementation, described scanning position information can comprise desktop, my document, download directory, based on the file that Instant Messenger (IM) software and/or e-mail reception arrive, and/or, external storage equipment; Wherein, described download directory, based on the scanning position information of the file that Instant Messenger (IM) software and/or e-mail reception arrive, obtains by reading from the configuration file of corresponding software; The scanning position information of described external storage equipment, is obtained by the inquiry being initiated the external storage equipment be connected with current device by the application programming interfaces api function of operating system; Described file format information can comprise executable file, and/or, OFFICE document.The content that the described specific sweep object selected for user carries out scanning can comprise: the scanning of leak attacker, worm-type virus scanning, Rootkit scanning, spyware scanning, wooden horse scanning, ad ware scanning, infectious virus scanning, and/or scan for malware etc.
For device embodiment, due to itself and embodiment of the method basic simlarity, so description is fairly simple, relevant part illustrates see the part of embodiment of the method.
Disclosed herein as well is a kind of document scanning system, described document scanning system can be arranged on server or client, specifically can comprise with lower module:
Receiver module, triggers for receiving user user interface element being moved to predefine position on screen;
Trigger module, enters custom scan pattern for triggering according to described user;
Running module, for running described custom scan pattern, comprising:
Specific sweep object generates and represents submodule, for generating and representing the specific sweep object of current user equipment;
Selected object scanning submodule, scans for the specific sweep object selected for user.
As a kind of example of embodiment of the present invention embody rule, described custom scan pattern presets characteristic area on interface mouse according to user enters through hover operation triggering.Wherein, described default characteristic area can for having the control regions of custom scan pattern identification.
In one preferred embodiment of the invention, described specific sweep object generates and represents submodule and may further include with lower unit:
Preset object generation unit, for generating multiple preset specific sweep object, described specific sweep object comprises the scanning position information of sweep object mark and correspondence, and/or, the file format information of sweep object mark and correspondence;
Represent unit, for representing the option of described multiple sweep object mark.
In another preferred embodiment of the invention, described specific sweep object generates and represents submodule and may further include with lower unit:
Demand object generation unit, generate corresponding specific sweep object for the scanning demand submitted to according to user, wherein, described specific sweep object comprises scanning position information, and/or, file format information;
Mark allocation units, for distributing sweep object mark for each specific sweep object;
Represent unit, for representing the option of described multiple sweep object mark.
In another preferred embodiment of the present invention, described specific sweep object generation represents submodule and may further include with lower unit:
User behavior acquiring unit, for obtaining the user behavior information in current user equipment preset time period;
Behavior match objects generation unit, for generating specific sweep object according to described user behavior information, described specific sweep object comprises the scanning position information of sweep object mark and correspondence, and/or, the file format information of sweep object mark and correspondence;
Represent unit, for representing the option of described multiple sweep object mark.
More preferably, represent unit described in and may further include following subelement:
Key object determination subelement, for obtaining the user behavior information in current user equipment preset time period, according to the specific sweep object of described user behavior information determination emphasis, the specific sweep object of described emphasis is scanning position information and/or file format information, is greater than the specific sweep object of predetermined threshold value with the degree of association of user behavior information;
Emphasis represents process subelement, for representing the option of described multiple sweep object mark, highlights process or sequence advanced processing to the sweep object mark of the specific sweep object of described emphasis.
In one preferred embodiment of the invention, described selected object scanning submodule 522 specifically can comprise as lower unit:
Select information receiving unit, for receiving the selection information of the sweep object mark that user submits to;
Scanning element, for according to the scanning position information of the corresponding sweep object mark of described selection information extraction and/or file format information, scans the file of described scanning position and/or corresponding format.
In specific implementation, described scanning position information can comprise desktop, my document, download directory, based on the file that Instant Messenger (IM) software and/or e-mail reception arrive, and/or, external storage equipment; Wherein, described download directory, based on the scanning position information of the file that Instant Messenger (IM) software and/or e-mail reception arrive, obtains by reading from the configuration file of corresponding software; The scanning position information of described external storage equipment, is obtained by the inquiry being initiated the external storage equipment be connected with current device by the application programming interfaces api function of operating system; Described file format information can comprise executable file, and/or, OFFICE document.The content that the described specific sweep object selected for user carries out scanning can comprise: the scanning of leak attacker, worm-type virus scanning, Rootkit scanning, spyware scanning, wooden horse scanning, ad ware scanning, infectious virus scanning, and/or scan for malware etc.
For system embodiment, due to itself and embodiment of the method basic simlarity, so description is fairly simple, relevant part illustrates see the part of embodiment of the method.
Each embodiment in this instructions all adopts the mode of going forward one by one to describe, and what each embodiment stressed is the difference with other embodiments, between each embodiment identical similar part mutually see.
Intrinsic not relevant to any certain computer, virtual system or miscellaneous equipment with display at this algorithm provided.Various general-purpose system also can with use based on together with this teaching.According to description above, the structure constructed required by this type systematic is apparent.In addition, the present invention is not also for any certain programmed language.It should be understood that and various programming language can be utilized to realize content of the present invention described here, and the description done language-specific is above to disclose preferred forms of the present invention.
In instructions provided herein, describe a large amount of detail.But can understand, embodiments of the invention can be put into practice when not having these details.In some instances, be not shown specifically known method, structure and technology, so that not fuzzy understanding of this description.
Similarly, be to be understood that, in order to simplify the disclosure and to help to understand in each inventive aspect one or more, in the description above to exemplary embodiment of the present invention, each feature of the present invention is grouped together in single embodiment, figure or the description to it sometimes.But, the method for the disclosure should be construed to the following intention of reflection: namely the present invention for required protection requires feature more more than the feature clearly recorded in each claim.Or rather, as claims below reflect, all features of disclosed single embodiment before inventive aspect is to be less than.Therefore, the claims following embodiment are incorporated to this embodiment thus clearly, and wherein each claim itself is as independent embodiment of the present invention.
Those skilled in the art are appreciated that and adaptively can change the module in the equipment in embodiment and they are arranged in one or more equipment different from this embodiment.Module in embodiment or unit or assembly can be combined into a module or unit or assembly, and multiple submodule or subelement or sub-component can be put them in addition.Except at least some in such feature and/or process or unit be mutually repel except, any combination can be adopted to combine all processes of all features disclosed in this instructions (comprising adjoint claim, summary and accompanying drawing) and so disclosed any method or equipment or unit.Unless expressly stated otherwise, each feature disclosed in this instructions (comprising adjoint claim, summary and accompanying drawing) can by providing identical, alternative features that is equivalent or similar object replaces.
In addition, those skilled in the art can understand, although embodiments more described herein to comprise in other embodiment some included feature instead of further feature, the combination of the feature of different embodiment means and to be within scope of the present invention and to form different embodiments.Such as, in the following claims, the one of any of embodiment required for protection can use with arbitrary array mode.
All parts embodiment of the present invention with hardware implementing, or can realize with the software module run on one or more processor, or realizes with their combination.It will be understood by those of skill in the art that the some or all functions that microprocessor or digital signal processor (DSP) can be used in practice to realize according to the some or all parts in the file protection treatment facility of the embodiment of the present invention.The present invention can also be embodied as part or all equipment for performing method as described herein or device program (such as, computer program and computer program).Realizing program of the present invention and can store on a computer-readable medium like this, or the form of one or more signal can be had.Such signal can be downloaded from internet website and obtain, or provides on carrier signal, or provides with any other form.
The present invention will be described instead of limit the invention to it should be noted above-described embodiment, and those skilled in the art can design alternative embodiment when not departing from the scope of claims.In the claims, any reference symbol between bracket should be configured to limitations on claims.Word " comprises " not to be got rid of existence and does not arrange element in the claims or step.Word "a" or "an" before being positioned at element is not got rid of and be there is multiple such element.The present invention can by means of including the hardware of some different elements and realizing by means of the computing machine of suitably programming.In the unit claim listing some devices, several in these devices can be carry out imbody by same hardware branch.Word first, second and third-class use do not represent any order.Can be title by these word explanations.
Above to the method for a kind of file scan that the application provides, and, a kind of device of file scan, be described in detail, apply specific case herein to set forth the principle of the application and embodiment, the explanation of above embodiment is just for helping method and the core concept thereof of understanding the application; Meanwhile, for one of ordinary skill in the art, according to the thought of the application, all will change in specific embodiments and applications, in sum, this description should not be construed as the restriction to the application.
Claims (21)
1. a method for file scan, comprising:
Receive user user interface element being moved to predefine position on screen to trigger;
Trigger according to described user and enter custom scan pattern;
Run described custom scan pattern, comprising:
Generate and represent the specific sweep object of current user equipment; Wherein, described specific sweep object comprises the specific sweep object generated according to the user behavior information in the current user equipment preset time period formerly obtained;
The specific sweep object selected for user scans;
Described specific sweep object comprises whole scannings of file under certain drive, the specific file location that user often uses, the file type that user commonly uses.
2. the method for claim 1, described custom scan pattern presets characteristic area on interface mouse according to user enters through hover operation triggering.
3. the method for claim 1, described specific sweep object is included in the multiple preset specific sweep object first generated; Described specific sweep object comprises the scanning position information of sweep object mark and correspondence, and/or, the file format information of sweep object mark and correspondence;
The described step representing the specific sweep object of current user equipment is, represents the option of described multiple sweep object mark.
4. the method for claim 1, described specific sweep object comprises the specific sweep object of correspondence of the scanning demand generation submitted to according to user, and described specific sweep object comprises scanning position information, and/or, file format information;
The described step representing the specific sweep object of current user equipment comprises further:
Sweep object mark is distributed for each specific sweep object;
Represent the option of described multiple sweep object mark.
5. the method for claim 1, described specific sweep object comprises the scanning position information of sweep object mark and correspondence, and/or, the file format information of sweep object mark and correspondence; The described step representing the specific sweep object of current user equipment is, represents the option of described multiple sweep object mark.
6. the method as described in claim 3 or 4 or 5, described in represent multiple sweep object mark the step of option comprise further:
Obtain the user behavior information in current user equipment preset time period, according to the specific sweep object of described user behavior information determination emphasis, the specific sweep object of described emphasis is scanning position information and/or file format information, is greater than the specific sweep object of predetermined threshold value with the degree of association of user behavior information;
Represent the option of described multiple sweep object mark, process or sequence advanced processing are highlighted to the sweep object mark of the specific sweep object of described emphasis.
7. the method as described in claim 3 or 4 or 5, the step that the described specific sweep object selected for user carries out scanning comprises:
Receive the selection information of the sweep object mark that user submits to;
According to scanning position information and/or the file format information of the corresponding sweep object mark of described selection information extraction, the file of described scanning position and/or corresponding format is scanned.
8. method as claimed in claim 2, described default characteristic area is the control regions with custom scan pattern identification.
9. the method as described in claim 3 or 4 or 5, described scanning position information comprises desktop, my document, download directory, based on the file that Instant Messenger (IM) software and/or e-mail reception arrive, and/or, external storage equipment; Wherein, described download directory, based on the scanning position information of the file that Instant Messenger (IM) software and/or e-mail reception arrive, obtains by reading from the configuration file of corresponding software; The scanning position information of described external storage equipment, is obtained by the inquiry being initiated the external storage equipment be connected with current device by the application programming interfaces api function of operating system;
Described file format information comprises executable file, and/or, OFFICE document.
10. the method for claim 1, the content that the described specific sweep object selected for user carries out scanning comprises: the scanning of leak attacker, worm-type virus scanning, Rootkit scanning, spyware scanning, wooden horse scanning, ad ware scanning, infectious virus scanning, and/or scan for malware.
The device of 11. 1 kinds of file scan, comprising:
Receiver module, triggers for receiving user user interface element being moved to predefine position on screen;
Trigger module, enters custom scan pattern for triggering according to described user;
Running module, for running described custom scan pattern, comprising:
Specific sweep object generates and represents submodule, for generating and representing the specific sweep object of current user equipment; Wherein, described specific sweep object comprises the specific sweep object generated according to the user behavior information in the current user equipment preset time period formerly obtained;
Selected object scanning submodule, scans for the specific sweep object selected for user;
Described specific sweep object comprises whole scannings of file under certain drive, the specific file location that user often uses, the file type that user commonly uses.
12. devices as claimed in claim 11, described custom scan pattern presets characteristic area on interface mouse according to user enters through hover operation triggering.
13. devices as claimed in claim 11, described specific sweep object is included in the multiple preset specific sweep object first generated;
Described specific sweep object comprises the scanning position information of sweep object mark and correspondence, and/or, the file format information of sweep object mark and correspondence;
Described specific sweep object generation represents submodule and comprises further:
Represent unit, for representing the option of described multiple sweep object mark.
14. devices as claimed in claim 11, described specific sweep object comprises the specific sweep object of correspondence of the scanning demand generation submitted to according to user, and described specific sweep object comprises scanning position information, and/or, file format information;
Described specific sweep object generation represents submodule and comprises further:
Mark allocation units, for distributing sweep object mark for each specific sweep object;
Represent unit, for representing the option of described multiple sweep object mark.
15. devices as claimed in claim 11, described specific sweep object comprises the scanning position information of sweep object mark and correspondence, and/or, the file format information of sweep object mark and correspondence;
Described specific sweep object generation represents submodule and comprises further:
Represent unit, for representing the option of described multiple sweep object mark.
16. devices as described in claim 13 or 14 or 15, described in represent unit and comprise further:
Key object determination subelement, for obtaining the user behavior information in current user equipment preset time period, according to the specific sweep object of described user behavior information determination emphasis, the specific sweep object of described emphasis is scanning position information and/or file format information, is greater than the specific sweep object of predetermined threshold value with the degree of association of user behavior information;
Emphasis represents process subelement, for representing the option of described multiple sweep object mark, highlights process or sequence advanced processing to the sweep object mark of the specific sweep object of described emphasis.
17. devices as described in claim 13 or 14 or 15, described selected object scanning submodule comprises:
Select information receiving unit, for receiving the selection information of the sweep object mark that user submits to;
Scanning element, for according to the scanning position information of the corresponding sweep object mark of described selection information extraction and/or file format information, scans the file of described scanning position and/or corresponding format.
18. devices as claimed in claim 12, described default characteristic area is the control regions with custom scan pattern identification.
19. devices as described in claim 13 or 14 or 15, described scanning position information comprises desktop, my document, download directory, based on the file that Instant Messenger (IM) software and/or e-mail reception arrive, and/or, external storage equipment; Wherein, described download directory, based on the scanning position information of the file that Instant Messenger (IM) software and/or e-mail reception arrive, obtains by reading from the configuration file of corresponding software; The scanning position information of described external storage equipment, is obtained by the inquiry being initiated the external storage equipment be connected with current device by the application programming interfaces api function of operating system;
Described file format information comprises executable file, and/or, OFFICE document.
20. devices as claimed in claim 11, the content that the described specific sweep object selected for user carries out scanning comprises: the scanning of leak attacker, worm-type virus scanning, Rootkit scanning, spyware scanning, wooden horse scanning, ad ware scanning, infectious virus scanning, and/or scan for malware.
21. 1 kinds of document scanning systems, described document scanning system is arranged on server or client, comprising:
Receiver module, triggers for receiving user user interface element being moved to predefine position on screen;
Trigger module, enters custom scan pattern for triggering according to described user;
Running module, for running described custom scan pattern, comprising:
Specific sweep object generates and represents submodule, for generating and representing the specific sweep object of current user equipment; Wherein, described specific sweep object comprises the specific sweep object generated according to the user behavior information in the current user equipment preset time period formerly obtained;
Selected object scanning submodule, scans for the specific sweep object selected for user;
Described specific sweep object comprises whole scannings of file under certain drive, the specific file location that user often uses, the file type that user commonly uses.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201210307189.XA CN102867147B (en) | 2012-08-24 | 2012-08-24 | A kind of method and apparatus of file scan |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201210307189.XA CN102867147B (en) | 2012-08-24 | 2012-08-24 | A kind of method and apparatus of file scan |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN102867147A CN102867147A (en) | 2013-01-09 |
| CN102867147B true CN102867147B (en) | 2016-01-06 |
Family
ID=47446014
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201210307189.XA Active CN102867147B (en) | 2012-08-24 | 2012-08-24 | A kind of method and apparatus of file scan |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN102867147B (en) |
Families Citing this family (10)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN103123675B (en) * | 2013-01-24 | 2016-01-13 | 北京奇虎科技有限公司 | The method and apparatus of scanning computer virus |
| CN104751060A (en) * | 2013-12-27 | 2015-07-01 | 腾讯科技（深圳）有限公司 | Method and device for health examination of terminal |
| CN104050417B (en) * | 2014-07-04 | 2018-03-27 | 北京奇虎科技有限公司 | A kind of method and device detected in mobile terminal to application state |
| CN104317955B (en) * | 2014-11-13 | 2017-10-13 | 北京奇虎科技有限公司 | File scanning method and device in a kind of mobile terminal memory space |
| CN105320889A (en) * | 2015-02-10 | 2016-02-10 | 中国移动通信集团广东有限公司 | Security detection method and apparatus |
| CN105740704B (en) * | 2015-12-25 | 2019-07-02 | 哈尔滨安天科技股份有限公司 | Detection method and system based on scanning input frequency dynamic adjustment inspecting force |
| CN106980797A (en) * | 2017-03-24 | 2017-07-25 | 北京奇虎科技有限公司 | A kind of method, device and computing device for realizing file protection |
| CN107291401B (en) * | 2017-06-30 | 2020-12-11 | 北京金山安全软件有限公司 | File scanning method, file cleaning method, related device and electronic equipment |
| CN108052575A (en) * | 2017-12-08 | 2018-05-18 | 深圳市创维软件有限公司 | File scanning method, equipment and storage medium |
| CN109274580A (en) * | 2018-09-15 | 2019-01-25 | 江苏博智软件科技股份有限公司 | A kind of local mail deep analysis technology |
Family Cites Families (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1083592C (en) * | 1998-01-15 | 2002-04-24 | 英业达股份有限公司 | Method for determining and treating key high-spot effect by area |
| CN101127061B (en) * | 2006-08-16 | 2010-05-26 | 珠海金山软件股份有限公司 | Device preventing and treating computer virus capable of pre-estimating schedule and schedule pre-estimation method |
| CN102073815B (en) * | 2010-12-27 | 2013-11-20 | 奇瑞汽车股份有限公司 | Vehicle-mounted antivirus system and antivirus method |
-
2012
- 2012-08-24 CN CN201210307189.XA patent/CN102867147B/en active Active
Also Published As
| Publication number | Publication date |
|---|---|
| CN102867147A (en) | 2013-01-09 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN102867147B (en) | A kind of method and apparatus of file scan | |
| US10579803B1 (en) | System and method for management of application vulnerabilities | |
| CN103020524B (en) | Computer virus supervisory system | |
| US8701047B2 (en) | Configuration creation for deployment and monitoring | |
| CN103049695B (en) | A kind of method for supervising of computer virus and device | |
| JP7297791B2 (en) | Method, Apparatus, and System for Detecting Obfuscated Code in Application Software Files | |
| CN103559447B (en) | A kind of detection method, checkout gear and detection system based on Virus Sample feature | |
| CN104050417A (en) | Method and device for detecting software states at mobile terminal | |
| US10176317B2 (en) | Method and apparatus for managing super user password on smart mobile terminal | |
| CN103164654A (en) | Method of carrying out information cue on popup window and user interface display device | |
| CN104536792A (en) | Method and device for eliminating application program residual files | |
| CN103473501A (en) | Malware tracking method based on cloud safety | |
| CN103761478A (en) | Judging method and device of malicious files | |
| CN103678487A (en) | Method and device for generating web page snapshot | |
| CN104598806A (en) | Method and device for registering detecting | |
| CN104036019A (en) | Method and device for opening webpage links | |
| US11928206B2 (en) | Selective import/export address table filtering | |
| CN103617390A (en) | Malicious webpage judgment method, device and system | |
| CN103761241A (en) | Method for uploading picture data and browser | |
| CN106250761B (en) | Equipment, device and method for identifying web automation tool | |
| CN105516151A (en) | Scanning-killing method and device of backdoor file | |
| CN105389509A (en) | Document scanning method and apparatus | |
| CN104346457A (en) | Method for intercepting business object and browser client | |
| CN103679027A (en) | Searching and killing method and device for kernel level malware | |
| CN102819717B (en) | Method and device for carrying out protection processing on file |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C14 | Grant of patent or utility model | ||
| GR01 | Patent grant | ||
| TR01 | Transfer of patent right | ||
| TR01 | Transfer of patent right |
Effective date of registration: 20220706 Address after: Room 801, 8th floor, No. 104, floors 1-19, building 2, yard 6, Jiuxianqiao Road, Chaoyang District, Beijing 100015 Patentee after: BEIJING QIHOO TECHNOLOGY Co.,Ltd. Address before: 100088 room 112, block D, 28 new street, new street, Xicheng District, Beijing (Desheng Park) Patentee before: BEIJING QIHOO TECHNOLOGY Co.,Ltd. Patentee before: Qizhi software (Beijing) Co.,Ltd. |