CN106874757A - The discharging method of Malware, the uninstalling system of Malware and terminal - Google Patents
The discharging method of Malware, the uninstalling system of Malware and terminal Download PDFInfo
- Publication number
- CN106874757A CN106874757A CN201510918946.0A CN201510918946A CN106874757A CN 106874757 A CN106874757 A CN 106874757A CN 201510918946 A CN201510918946 A CN 201510918946A CN 106874757 A CN106874757 A CN 106874757A
- Authority
- CN
- China
- Prior art keywords
- malware
- equal
- deletion
- terminal
- user
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
- G06F21/55—Detecting local intrusion or implementing counter-measures
- G06F21/56—Computer malware detection or handling, e.g. anti-virus arrangements
- G06F21/568—Computer malware detection or handling, e.g. anti-virus arrangements eliminating virus, restoring damaged files
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Health & Medical Sciences (AREA)
- Virology (AREA)
- Computer Hardware Design (AREA)
- General Engineering & Computer Science (AREA)
- Software Systems (AREA)
- Theoretical Computer Science (AREA)
- General Health & Medical Sciences (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- User Interface Of Digital Computer (AREA)
Abstract
The invention provides a kind of discharging method of Malware, the uninstalling system of Malware and terminal, the discharging method of wherein Malware includes：Judge whether the runnable interface of terminal generates floating frame；When the runnable interface for judging terminal generates floating frame, the type of the process belonging to floating frame is judged；When the type of determinating processes is preset kind, determine that process belongs to Malware, and point out deletion of the user input for deleting Malware to instruct；Judge delete instruction whether with default deletion instructions match；When being instructed and default deletion instructions match judging to delete, and obtaining the confirmation instruction of user, the related process of Malware is deleted.By technical scheme, Malware is determined by according to the type of the affiliated process of floating frame, so that fast discharging Malware, it is to avoid threat of the Malware to the operating system and business datum of terminal, improve the experience of user.
Description
Technical field
The present invention relates to field of terminal technology, in particular to a kind of unloading side of Malware
Method, a kind of uninstalling system of Malware and a kind of terminal.
Background technology
In the related art, the software unloading of terminal (mobile phone, flat board and computer etc.) can be by unloading
Load center, or the application program of special uninstall is unloaded, can also be by right on the table
Software icon is dragged, and is dragged to realization unloading in dustbin, or length is entered by application icon
Row application unloading.
But, during terminal operating, terminal display interface often some illegal bullets of automatic spring
Window (such as advertisement pushing, software are recommended and trojan horse program), the operation for not only having a strong impact on user is entered
Degree, or even the operating system of terminal and the safety of business datum are threatened, cause system crash or data to let out
Situations such as dew, occurs, and user cannot quickly find Uninstaller file corresponding with pop-up, test
The experience of card influence user.
Therefore a kind of unloading scheme of new Malware how is designed, to realize the quick of Malware
Unloading turns into technical problem urgently to be resolved hurrily at present.
The content of the invention
The present invention is based on above mentioned problem, it is proposed that a kind of scheme of the unloading of new Malware,
Malware is identified by the judgement to the affiliated process type of floating frame, so that it is soft to unload malice
Part, realize the quick determination and unloading to Malware, it is to avoid operation of the Malware to terminal
The threat of system and business datum, has purified the running environment of terminal, improves Consumer's Experience.
In view of this, the present invention proposes a kind of discharging method of Malware, including：Judge described
Whether the runnable interface of terminal generates floating frame；It is described in the runnable interface generation for judging the terminal
During floating frame, the type of the process belonging to the floating frame is judged；Judging the class of the process
When type is preset kind, determine that the process belongs to Malware, and point out user input for deleting
The deletion instruction of the Malware；Judge it is described delete instruction whether with default deletion instructions match；
Instructed and the default deletion instructions match in described deletion of judgement, and obtain the confirmation instruction of user
When, delete the related process of the Malware.
In the technical scheme, when judging that runnable interface has floating frame to generate, by floating window
The type of the corresponding process of mouth is judged, when the type for judging process is for preset kind, it is determined that
Process is Malware, especially cannot obtain Malware icon by desktop in user, is not also known
In the case of road Apply Names, software is defined as Malware, and for the unloading of Malware
Secondary deterministic process is added, the efficiency and accuracy rate of Malware unloading is improve, namely works as user
When the deletion instruction of input is instructed with default deletion instructions match success, and input validation, terminal is just held
Row deletes the operation of the installation file of Malware, it is to avoid Malware to the operating system of terminal and
The threat of business datum, improves the experience of user.
In the above-mentioned technical solutions, it is preferred that the preset kind include system alarm notification type and
/ or Activity Type.
In the technical scheme, by by system alarm notification type and Activity Type or
Preset kind is all set, when Malware realizes ejection floating window using alarm types and Activity Type
During mouth, Malware can be accurately and effectively identified, so that fast discharging Malware, it is to avoid
Threat of the Malware to the operating system and business datum of terminal, has purified the operation ring of operating system
Border.
In the above-mentioned technical solutions, it is preferred that also include：It is default in the type of the judgement process
During type, user is pointed out to select the pattern for deleting the Malware, wherein, it is described for deleting
Except the pattern of the Malware includes that user input biological information and/or user input touch-control refer to
Order；The biological information and/or the touch command are resolved into deletion instruction.
In the technical scheme, when the type for judging process is for preset kind, by the life of user input
Instruction is deleted in thing characteristic information and/or touch command generation, deletes Malware and its associated process,
It is achieved thereby that the unloading to Malware, wherein, biological information includes fingerprint characteristic, iris
At least one feature in feature and phonetic feature, fingerprint characteristic in terminal by setting fingerprint sensing
Device is obtained, and iris feature is obtained by setting iris recognition module in terminal, and phonetic feature leads to
Cross in terminal setting sound identification module to obtain.
In the above-mentioned technical solutions, it is preferred that judge that described deletion instructs and the default deletion instruction
Matching, specifically includes following steps：Include user in the pattern for deleting the Malware
During touch command, judge whether the touch command is more than or waits in the compressing time of the runnable interface
In Preset Time；When judging that the compressing time is more than or equal to the Preset Time, deletion is painted
Interface prompt processed carries out drafting operation to user so that user draws interface in the deletion；It is determined that
The width of the track for drawing operation is more than or equal to predetermined width, or the track for drawing operation
Starting point number be more than or equal to predetermined number, or it is described draw operation the touch-control time be more than or equal to
Preset Time, or the path length for drawing operation is more than or equal to preset length, or the drafting
When angle between two tracks of operation is more than or equal to default angle, operation parsing is drawn by described
Instruction is deleted for described, and judges that described deletion instructs and the default deletion instructions match.
In the technical scheme, Preset Time is more than or equal to when the compressing time in screen is detected
When, provide a user with deletion draw interface prompt, and when draw operation track width be more than or
Equal to predetermined width, or the starting point number of the track for operating is drawn more than or equal to predetermined number, or paint
The touch-control time for making operation is more than or equal to Preset Time, or the path length of drafting operation is more than or waits
When angle between preset length, or two tracks of drafting operation is more than or equal to default angle,
Operation generation will be drawn and delete instruction, and matched with default deletion instruction, when the match is successful,
Delete Malware and its associated process, it is to avoid touch command mutually conflicts with other application operatings,
Realize the accurate unloading to Malware.
In the above-mentioned technical solutions, it is preferred that the floating frame is the runnable interface of the terminal
The window of stack top.
In the technical scheme, floating frame is the window of the stack top at terminal operating interface, it is to avoid worked as
The floating frame that Malware passes through code snippet disguise as terminal, it is impossible to detect asking for Malware
Topic, realizes the unloading to Malware, while improving the fluency of operating system.
According to the second aspect of the invention, it is proposed that a kind of uninstalling system of Malware, including：Sentence
Whether disconnected unit, the runnable interface for judging the terminal generates floating frame；The judging unit
It is additionally operable to：When the runnable interface for judging the terminal generates the floating frame, the floating is judged
The type of the process belonging to window；The uninstalling system of the Malware also includes：Tip element, uses
When the type in the judgement process is preset kind, determine that the process belongs to Malware, and
Prompting user input is used to delete the deletion instruction of the Malware；The judging unit is additionally operable to：
Judge it is described delete instruction whether with default deletion instructions match；The uninstalling system of the Malware is also
Including：Unit is deleted, for being instructed and the default deletion instructions match in described deletion of judgement, and
When the confirmation for obtaining user is instructed, the related process of the Malware is deleted.
In the technical scheme, when judging that runnable interface has floating frame to generate, by floating window
The type of the corresponding process of mouth is judged, when the type for judging process is for preset kind, it is determined that
Process is Malware, especially cannot obtain Malware icon by desktop in user, is not also known
In the case of road Apply Names, software is defined as Malware, and for the unloading of Malware
Secondary deterministic process is added, the efficiency and accuracy rate of Malware unloading is improve, namely works as user
When the deletion instruction of input is instructed with default deletion instructions match success, and input validation, terminal is just held
Row deletes the operation of the installation file of Malware, it is to avoid Malware to the operating system of terminal and
The threat of business datum, improves the experience of user.
In the above-mentioned technical solutions, it is preferred that the preset kind include system alarm notification type and
/ or Activity Type.
In the technical scheme, by by system alarm notification type and Activity Type or
Preset kind is all set, when Malware realizes ejection floating window using alarm types and Activity Type
During mouth, Malware can be accurately and effectively identified, so that fast discharging Malware, it is to avoid
Threat of the Malware to the operating system and business datum of terminal, has purified the operation ring of operating system
Border.
In the above-mentioned technical solutions, it is preferred that the Tip element is additionally operable to：Judging the process
Type when being preset kind, point out user to select the pattern for deleting the Malware, its
In, the pattern for deleting the Malware include user input biological information and/or
User input touch command；The uninstalling system of the Malware also includes：Resolution unit, for inciting somebody to action
The biological information and/or the touch command resolve to deletion instruction.
In the technical scheme, when the type for judging process is for preset kind, by the life of user input
Instruction is deleted in thing characteristic information and/or touch command generation, deletes Malware and its associated process,
It is achieved thereby that the unloading to Malware, wherein, biological information includes fingerprint characteristic, iris
At least one feature in feature and phonetic feature, fingerprint characteristic in terminal by setting fingerprint sensing
Device is obtained, and iris feature is obtained by setting iris recognition module in terminal, and phonetic feature leads to
Cross in terminal setting sound identification module to obtain.
In the above-mentioned technical solutions, it is preferred that the Tip element is additionally operable to：Described for deleting
When the pattern of the Malware includes user's touch command, judge the touch command in the operation
Whether the compressing time at interface is more than or equal to Preset Time；The Tip element is additionally operable to：Judging
When the compressing time is more than or equal to the Preset Time, will delete and draw interface prompt to user,
So that user carries out drafting operation at the drafting interface of deleting；The resolution unit is additionally operable to：True
The width of the fixed track for drawing operation is more than or equal to predetermined width, or the rail for drawing operation
The starting point number of mark is more than or equal to predetermined number, or the touch-control time for drawing operation is more than or waits
In Preset Time, or the path length for drawing operation is more than or equal to preset length, or described paints
When making the angle between two tracks of operation more than or equal to default angle, operation solution is drawn by described
Analyse and delete instruction for described, and judge that described deletion instructs and the default deletion instructions match.
In the technical scheme, Preset Time is more than or equal to when the compressing time in screen is detected
When, provide a user with deletion draw interface prompt, and when draw operation track width be more than or
Equal to predetermined width, or the starting point number of the track for operating is drawn more than or equal to predetermined number, or paint
The touch-control time for making operation is more than or equal to Preset Time, or the path length of drafting operation is more than or waits
When angle between preset length, or two tracks of drafting operation is more than or equal to default angle,
Operation generation will be drawn and delete instruction, and matched with default deletion instruction, when the match is successful,
Delete Malware and its associated process, it is to avoid touch command mutually conflicts with other application operatings,
Realize the accurate unloading to Malware.
In the above-mentioned technical solutions, it is preferred that the floating frame is the runnable interface of the terminal
The window of stack top.
In the technical scheme, floating frame is the window of the stack top at terminal operating interface, it is to avoid worked as
The floating frame that Malware passes through code snippet disguise as terminal, it is impossible to detect asking for Malware
Topic, realizes the unloading to Malware, while improving the fluency of operating system.
According to the third aspect of the invention we, it is proposed that a kind of terminal, including such as above-mentioned any one technical side
The uninstalling system of the Malware described in case.
By above technical scheme, malice is identified by the judgement to the affiliated process type of floating frame
Software, so as to unload Malware, solves when application icon and the application that cannot find Malware
The problem of Malware cannot be unloaded during title, the running environment of terminal has been purified, user's body is improved
Test.
Brief description of the drawings
Fig. 1 shows the signal stream of the discharging method of Malware according to an embodiment of the invention
Cheng Tu；
Fig. 2 shows the schematic block diagram of the uninstalling system of Malware according to an embodiment of the invention；
Fig. 3 shows the schematic block diagram of terminal according to an embodiment of the invention；
Fig. 4 A show the regional choice of the drafting selection mode of terminal according to an embodiment of the invention
Schematic diagram；
Fig. 4 B show the software unloading of the drafting selection mode of terminal according to an embodiment of the invention
The schematic diagram at interface；
Fig. 5 A show the signal of the unloading drawing mode of terminal according to an embodiment of the invention
Figure；
Fig. 5 B show showing for the unloading drawing mode of terminal according to another embodiment of the invention
It is intended to；
Fig. 5 C show showing for the unloading drawing mode of terminal according to still another embodiment of the invention
It is intended to；
Fig. 6 shows the signal of the discharging method of Malware according to another embodiment of the invention
Flow chart.
Specific embodiment
In order to be more clearly understood that the above objects, features and advantages of the present invention, with reference to attached
Figure and specific embodiment are further described in detail to the present invention.It should be noted that not
In the case of conflict, the feature in embodiments herein and embodiment can be mutually combined.
Many details are elaborated in the following description in order to fully understand the present invention, but,
The present invention can also be different from other modes described here to implement using other, therefore, the present invention
Protection domain do not limited by following public specific embodiment.
Fig. 1 shows the exemplary flow of the discharging method of Malware according to an embodiment of the invention
Figure.
As shown in figure 1, the discharging method of Malware according to an embodiment of the invention, including：Step
Rapid 102, judge whether the runnable interface of terminal generates floating frame；Step 104, is judging terminal
Runnable interface generation floating frame when, judge the type of the process belonging to floating frame；Step
106, when the type of determinating processes is preset kind, determine that process belongs to Malware, and point out
User input is used to delete the deletion instruction of Malware；Step 108, judge delete instruction whether with
It is default to delete instructions match；Step 110, instructs and default deletion instructions match judging to delete, and
When the confirmation for obtaining user is instructed, the related process of Malware is deleted.
In the technical scheme, when judging that runnable interface has floating frame to generate, by floating window
The type of the corresponding process of mouth is judged, when the type for judging process is for preset kind, it is determined that
Process is Malware, especially cannot obtain Malware icon by desktop in user, is not also known
In the case of road Apply Names, software is defined as Malware, and for the unloading of Malware
Secondary deterministic process is added, the efficiency and accuracy rate of Malware unloading is improve, namely works as user
When the deletion instruction of input is instructed with default deletion instructions match success, and input validation, terminal is just held
Row deletes the operation of the installation file of Malware, it is to avoid Malware to the operating system of terminal and
The threat of business datum, improves the experience of user.
In the above-mentioned technical solutions, it is preferred that preset kind include system alarm notification type and/or
Activity Type.
In the technical scheme, by by system alarm notification type and Activity Type or
Preset kind is all set, when Malware realizes ejection floating window using alarm types and Activity Type
During mouth, Malware can be accurately and effectively identified, so that fast discharging Malware, it is to avoid
Threat of the Malware to the operating system and business datum of terminal, has purified the operation ring of operating system
Border.
In the above-mentioned technical solutions, it is preferred that also include：It is preset kind in the type of determinating processes
When, point out user to select the pattern for deleting Malware, wherein, for deleting Malware
Pattern includes user input biological information and/or user input touch command；Biological characteristic is believed
Breath and/or touch command resolve to deletion instruction.
In the technical scheme, when the type for judging process is for preset kind, by the life of user input
Instruction is deleted in thing characteristic information and/or touch command generation, deletes Malware and its associated process,
It is achieved thereby that the unloading to Malware, wherein, biological information includes fingerprint characteristic, iris
At least one feature in feature and phonetic feature, fingerprint characteristic in terminal by setting fingerprint sensing
Device is obtained, and iris feature is obtained by setting iris recognition module in terminal, and phonetic feature leads to
Cross in terminal setting sound identification module to obtain.
In the above-mentioned technical solutions, it is preferred that judge to delete instruction and default deletion instructions match, tool
Body is comprised the following steps：When user's touch command is included for deleting the pattern of Malware, judge
Whether touch command is more than or equal to Preset Time in the compressing time of runnable interface；When pressing is judged
Between more than or equal to Preset Time when, will delete and draw interface prompt to user, so that user is deleting
Drawing interface carries out drafting operation；It is determined that drawing the width of the track of operation more than or equal to default width
Degree, or the starting point number of the track for operating is drawn more than or equal to predetermined number, or draw touching for operation
The control time is more than or equal to Preset Time, or draws the path length of operation more than or equal to default length
When angle between degree, or two tracks of drafting operation is more than or equal to default angle, behaviour will be drawn
Deletion instruction is resolved to, and judges to delete instruction and default deletion instructions match.
In the technical scheme, Preset Time is more than or equal to when the compressing time in screen is detected
When, provide a user with deletion draw interface prompt, and when draw operation track width be more than or
Equal to predetermined width, or the starting point number of the track for operating is drawn more than or equal to predetermined number, or paint
The touch-control time for making operation is more than or equal to Preset Time, or the path length of drafting operation is more than or waits
When angle between preset length, or two tracks of drafting operation is more than or equal to default angle,
Operation generation will be drawn and delete instruction, and matched with default deletion instruction, when the match is successful,
Delete Malware and its associated process, it is to avoid touch command mutually conflicts with other application operatings,
Realize the accurate unloading to Malware.
In the above-mentioned technical solutions, it is preferred that floating frame is the window of the stack top of the runnable interface of terminal
Mouthful.
In the technical scheme, floating frame is the window of the stack top at terminal operating interface, it is to avoid worked as
The floating frame that Malware passes through code snippet disguise as terminal, it is impossible to detect asking for Malware
Topic, realizes the unloading to Malware, while improving the fluency of operating system.
Fig. 2 shows the schematic block diagram of the uninstalling system of Malware according to an embodiment of the invention.
As shown in Fig. 2 the uninstalling system 200 of Malware according to an embodiment of the invention, bag
Include：Whether judging unit 202, the runnable interface for judging terminal generates floating frame；Judge single
Unit 202 is additionally operable to：When the runnable interface for judging terminal generates floating frame, floating frame institute is judged
The type of the process of category；The uninstalling system 200 of Malware also includes：Tip element 204, is used for
When the type of determinating processes is preset kind, determine that process belongs to Malware, and point out user defeated
Enter the deletion for deleting Malware to instruct；Judging unit 202 is additionally operable to：Judge that deleting instruction is
It is no with default deletion instructions match；The uninstalling system 200 of Malware also includes：Delete unit
206, for deleting instruction and default deletion instructions match in judgement, and obtain the confirmation instruction of user
When, delete the related process of Malware.
In the technical scheme, when judging that runnable interface has floating frame to generate, by floating window
The type of the corresponding process of mouth is judged, when the type for judging process is for preset kind, it is determined that
Process is Malware, especially cannot obtain Malware icon by desktop in user, is not also known
In the case of road Apply Names, software is defined as Malware, and for the unloading of Malware
Secondary deterministic process is added, the efficiency and accuracy rate of Malware unloading is improve, namely works as user
When the deletion instruction of input is instructed with default deletion instructions match success, and input validation, terminal is just held
Row deletes the operation of the installation file of Malware, it is to avoid Malware to the operating system of terminal and
The threat of business datum, improves the experience of user.
In the above-mentioned technical solutions, it is preferred that preset kind include system alarm notification type and/or
Activity Type.
In the technical scheme, by by system alarm notification type and Activity Type or
Preset kind is all set, when Malware realizes ejection floating window using alarm types and Activity Type
During mouth, Malware can be accurately and effectively identified, so that fast discharging Malware, it is to avoid
Threat of the Malware to the operating system and business datum of terminal, has purified the operation ring of operating system
Border.
In the above-mentioned technical solutions, it is preferred that Tip element 204 is additionally operable to：In the class of determinating processes
When type is preset kind, user is pointed out to select the pattern for deleting Malware, wherein, for deleting
Except the pattern of Malware includes user input biological information and/or user input touch command；
The uninstalling system 200 of Malware also includes：Resolution unit 208, for by biological information and/
Or touch command resolves to deletion instruction.
In the technical scheme, when the type for judging process is for preset kind, by the life of user input
Instruction is deleted in thing characteristic information and/or touch command generation, deletes Malware and its associated process,
It is achieved thereby that the unloading to Malware, wherein, biological information includes fingerprint characteristic, iris
At least one feature in feature and phonetic feature, fingerprint characteristic in terminal by setting fingerprint sensing
Device is obtained, and iris feature is obtained by setting iris recognition module in terminal, and phonetic feature leads to
Cross in terminal setting sound identification module to obtain.
In the above-mentioned technical solutions, it is preferred that Tip element 204 is additionally operable to：For deleting malice
When the pattern of software includes user's touch command, judge that touch command is in the compressing time of runnable interface
It is no more than or equal to Preset Time；Tip element 204 is additionally operable to：It is more than or waits in judgement compressing time
When Preset Time, will delete and draw interface prompt to user, enter so that user draws interface in deletion
Row draws operation；Resolution unit 208 is additionally operable to：It is determined that draw operation track width be more than or
Equal to predetermined width, or the starting point number of the track for operating is drawn more than or equal to predetermined number, or paint
The touch-control time for making operation is more than or equal to Preset Time, or the path length of drafting operation is more than or waits
When angle between preset length, or two tracks of drafting operation is more than or equal to default angle,
Operation will be drawn and resolve to deletion instruction, and judge to delete instruction and default deletion instructions match.
In the technical scheme, Preset Time is more than or equal to when the compressing time in screen is detected
When, provide a user with deletion draw interface prompt, and when draw operation track width be more than or
Equal to predetermined width, or the starting point number of the track for operating is drawn more than or equal to predetermined number, or paint
The touch-control time for making operation is more than or equal to Preset Time, or the path length of drafting operation is more than or waits
When angle between preset length, or two tracks of drafting operation is more than or equal to default angle,
Operation generation will be drawn and delete instruction, and matched with default deletion instruction, when the match is successful,
Delete Malware and its associated process, it is to avoid touch command mutually conflicts with other application operatings,
Realize the accurate unloading to Malware.
In the above-mentioned technical solutions, it is preferred that floating frame is the window of the stack top of the runnable interface of terminal
Mouthful.
In the technical scheme, floating frame is the window of the stack top at terminal operating interface, it is to avoid worked as
The floating frame that Malware passes through code snippet disguise as terminal, it is impossible to detect asking for Malware
Topic, realizes the unloading to Malware, while improving the fluency of operating system.
Fig. 3 shows the schematic block diagram of terminal according to an embodiment of the invention.
As shown in figure 3, terminal 300 according to an embodiment of the invention, including malice as shown in Figure 2
The uninstalling system 200 of software.With this, the terminal 300 has unloading for Malware as shown in Figure 2
The identical technique effect of loading system 200, will not be repeated here.
The discharging method of Malware of the invention is illustrated with reference to Fig. 4 A and Fig. 4 B.
Process type first to the floating frame interface of current operation judges, specifically：
In android system, floating frame has：
TYPE_PHONE
TYPE_PRIORITY_PHONE
TYPE_SYSTEM_ALERTTYPE_SYSTEM_ERROR
TYPE_SYSTEM_OVERLAY
Wherein, TYPE_PHONE：Such as caller identification, shown above window
TYPE_PRIORITY_PHONE：The window for such as still being shown above crucial alarm
TYPE_SYSTEM_ALERT：Such as low capacity prompt
TYPE_SYSTEM_ERROR：Such as system mistake prompting frame
TYPE_SYSTEM_OVERLAY：Need focal floating frame
Above type belongs to belong to SYSTEM_ALERT_WINDOW types, i.e. alarm class
Type.Additionally, part rogue software may eject floating frame, i.e. activity class with Activity types
Type.
Secondly, the floating frame of ejection is made to be changed into a floating frame of system, rather than the shifting of application
Dynamic window, i.e., when Malware ejects floating frame, pop-up as shown in Figure 4 A is pressed with the head of a household
Screen, such as at 10 seconds, into drafting selection mode, and manually select one piece of region, such as schemes
Selection region shown in 4A, one floating frame of ejection as shown in Figure 4 B, and shows that this software is pseudo-
It is systems soft ware to fill, and wraps entitled c.l.s, and provides a unloading button, when user clicks on the unloading
Button, unloads the Malware of the entitled c.l.s of the bag.
It is below the reference example code segment of the floating frame of system of realizing：
WmParams=newWindowManager.LayoutParams ()；
WmParams.type=LayoutParams.TYPE_PHONE；
MFloatLayout=(LinearLayout) inflater.inflate (R.layout.float_layout, null)；
mWindowManager.addView(mFloatLayout,wmParams)；
The acquisition methods of application message of the invention are illustrated with reference to Fig. 5 A to Fig. 5 C.
First, the floating frame of system is that, by window management system management, each window has one
Handle, handle information contains application message, and system floating frame be on screen have layout and
Have levels.Can be by getting the superiors' floating frame of drawing area, the superiors' floating frame
As shown in Figure 5A, so that current interface enters drafting state,
Secondly, in order to avoid the operation conflict applied with some, can meet long by screen by setting
Curtain, and some conditions are set, or some key combinations are set, when being matched with predetermined registration operation, enter
Enter to unload drawing mode.
Specifically, the code of acquisition the superiors floating frame is：
final class WindowState{
final int mOwnerUid；
WindowToken mRootToken；
AppWindowToken mAppToken；
AppWindowToken mTargetAppToken；
}
Setting enter unloading interface Rule of judgment be：
As shown in Figure 5 B, on the superiors' floating frame, first mark line segment AB, mark line segment again
CD, and line segment AB and line segment CD length of the length more than 4/5ths of clinodiagonal, and two
Deviation of the gradient of bar line segment relative to diagonal no more than 10 degree, the scope streaked will be certain
Width range within, in the range of dotted line as shown in Figure 5 B, and the line segment AB first stroke of a Chinese character and line segment CD
The time start to write less than 1S, wherein, the line order of line segment AB and line segment CD can change.
Additionally, other control modes also have, 4 corners as shown in Figure 5 C touch-control simultaneously, when
During four corner Full connecteds, and all then trigger and sentence into unloading within the pixel of 30, corner
Disconnected drawing mode.
As shown in fig. 6, Fig. 6 shows the discharging method of the Malware of embodiments of the invention, bag
Include：Step 602, when floating frame is ejected at interface, length presses screen 10 seconds；Step 604, judges
Whether line segment AB, CD expire to fall within dotted line bandwidth and the length of AB, CD is more than diagonal
4/5ths, and with diagonal slope differences be less than 10 degree, if so, then execution step 606, if
It is no, then perform step 614；Step 606, judges whether current interface has floating frame or activity class
Type window, if so, step 608 is then performed, if it is not, then performing step 614；Step 608, enters
Enter unloading and judge drawing mode；Step 610, judges whether to click on unloading button, if so, then performing
Step 612, if it is not, then performing step 614；Step 612, uninstall；Step 614, moves back
Go out.
Technical scheme is described in detail above in association with accompanying drawing, it is contemplated that proposed in correlation technique
Therefore how to design a kind of unloading scheme of new Malware, to realize that the quick of Malware is unloaded
The technical problem of load, the present invention proposes a kind of scheme of the unloading of new Malware, by floating
The judgement of the affiliated process type of dynamic window identifies Malware, so as to unload Malware, realizes
Quick determination and unloading to Malware, it is to avoid operating system and business of the Malware to terminal
The threat of data, has purified the running environment of terminal, improves Consumer's Experience.
The preferred embodiments of the present invention are these are only, is not intended to limit the invention, for ability
For the technical staff in domain, the present invention can have various modifications and variations.It is all it is of the invention spirit and
Within principle, any modification, equivalent substitution and improvements made etc. should be included in guarantor of the invention
Within the scope of shield.
Claims (11)
1. a kind of discharging method of Malware, it is adaptable to terminal, it is characterised in that including：
Judge whether the runnable interface of the terminal generates floating frame；
When the runnable interface for judging the terminal generates the floating frame, the floating frame is judged
The type of affiliated process；
When the type of the judgement process is preset kind, determine that the process belongs to Malware,
And point out deletion of the user input for deleting the Malware to instruct；
Judge it is described delete instruction whether with default deletion instructions match；
Instructed and the default deletion instructions match in described deletion of judgement, and obtain the confirmation of user and referred to
When making, the related process of the Malware is deleted.
2. the discharging method of Malware according to claim 1, it is characterised in that described
Preset kind includes system alarm notification type and/or Activity Type.
3. the discharging method of Malware according to claim 2, it is characterised in that also wrap
Include：
When the type of the judgement process is preset kind, user is pointed out to select for deleting the evil
The pattern of meaning software, wherein, the pattern for deleting the Malware includes that user input is given birth to
Thing characteristic information and/or user input touch command；
The biological information and/or the touch command are resolved into deletion instruction.
4. the discharging method of Malware according to claim 3, it is characterised in that judge
It is described to delete instruction and the default deletion instructions match, specifically include following steps：
When the pattern for deleting the Malware includes user's touch command, judge described
Whether touch command is more than or equal to Preset Time in the compressing time of the runnable interface；
When judging that the compressing time is more than or equal to the Preset Time, drafting interface will be deleted and carried
Show to user, so that user carries out drafting operation at the drafting interface of deleting；
It is determined that the width of the track for drawing operation is more than or equal to predetermined width, or the drafting
The starting point number of the track of operation is more than or equal to predetermined number, or the touch-control time for drawing operation
It is more than or equal to preset length more than or equal to Preset Time, or the path length for drawing operation,
Or the angle between two tracks for drawing operation is when being more than or equal to default angle, painted described
Operation processed resolves to described deletion and instructs, and judges that described deletion instructs and the default deletion instruction
Match somebody with somebody.
5. the discharging method of Malware according to any one of claim 1 to 4, it is special
Levy and be, the floating frame is the window of the stack top of the runnable interface of the terminal.
6. a kind of uninstalling system of Malware, it is adaptable to terminal, it is characterised in that including：
Whether judging unit, the runnable interface for judging the terminal generates floating frame；
The judging unit is additionally operable to：The floating frame is generated in the runnable interface for judging the terminal
When, judge the type of the process belonging to the floating frame；
The uninstalling system of the Malware also includes：
Tip element, for when it is preset kind to judge the type of the process, determining the process
Belong to Malware, and point out deletion of the user input for deleting the Malware to instruct；
The judging unit is additionally operable to：Judge it is described delete instruction whether with default deletion instructions match；
The uninstalling system of the Malware also includes：
Unit is deleted, for being instructed and the default deletion instructions match in described deletion of judgement, and is obtained
When the confirmation for taking family is instructed, the related process of the Malware is deleted.
7. the uninstalling system of Malware according to claim 6, it is characterised in that described
Preset kind includes system alarm notification type and/or Activity Type.
8. the uninstalling system of Malware according to claim 7, it is characterised in that
The Tip element is additionally operable to：When the type of the judgement process is preset kind, point out to use
Family selects the pattern for deleting the Malware, wherein, it is described for deleting the Malware
Pattern include user input biological information and/or user input touch command；
The uninstalling system of the Malware also includes：
Resolution unit, for the biological information and/or the touch command to be resolved into deletion
Instruction.
9. the uninstalling system of Malware according to claim 8, it is characterised in that
The Tip element is additionally operable to：Include user in the pattern for deleting the Malware
During touch command, judge whether the touch command is more than or waits in the compressing time of the runnable interface
In Preset Time；
The Tip element is additionally operable to：Judging the compressing time more than or equal to the Preset Time
When, will delete and draw interface prompt to user, so that user is drawn at the drafting interface of deleting
Operation；
The resolution unit is additionally operable to：It is determined that the width of the track for drawing operation is more than or equal to
Predetermined width, or the starting point number of the track for drawing operation is more than or equal to predetermined number, or institute
The touch-control time for drawing operation is stated more than or equal to Preset Time, or the path length for drawing operation
It is more than or equal to more than or equal to the angle between preset length, or two tracks for drawing operation
During default angle, the drafting operation is resolved into described deletion and is instructed, and judge the deletion instruction
With the default deletion instructions match.
10. the uninstalling system of the Malware according to any one of claim 6 to 9, it is special
Levy and be, the floating frame is the window of the stack top of the runnable interface of the terminal.
11. a kind of terminals, it is characterised in that including as any one of claim 6 to 10
Malware uninstalling system.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510918946.0A CN106874757A (en) | 2015-12-10 | 2015-12-10 | The discharging method of Malware, the uninstalling system of Malware and terminal |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510918946.0A CN106874757A (en) | 2015-12-10 | 2015-12-10 | The discharging method of Malware, the uninstalling system of Malware and terminal |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN106874757A true CN106874757A (en) | 2017-06-20 |
Family
ID=59177874
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201510918946.0A Pending CN106874757A (en) | 2015-12-10 | 2015-12-10 | The discharging method of Malware, the uninstalling system of Malware and terminal |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN106874757A (en) |
Cited By (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN108052330A (en) * | 2017-10-24 | 2018-05-18 | 深圳天珑无线科技有限公司 | The method of terminal and its unloading application program, storage device |
| CN109922044A (en) * | 2019-01-25 | 2019-06-21 | 努比亚技术有限公司 | Label, method for down loading, electronic equipment and the storage medium of application |
| CN116048544A (en) * | 2022-08-24 | 2023-05-02 | 荣耀终端有限公司 | Processing method of popup advertisement, electronic equipment and readable storage medium |
| WO2024032022A1 (en) * | 2022-08-12 | 2024-02-15 | 荣耀终端有限公司 | Application icon visualization method and device |
Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102929555A (en) * | 2012-10-29 | 2013-02-13 | 东莞宇龙通信科技有限公司 | Terminal and application program uninstalling method |
| CN104036188A (en) * | 2014-05-08 | 2014-09-10 | 北京金山安全软件有限公司 | Android malicious program detection method, device and equipment |
| CN104091120A (en) * | 2014-06-10 | 2014-10-08 | 北京金山安全软件有限公司 | Android system malicious program processing method and device |
-
2015
- 2015-12-10 CN CN201510918946.0A patent/CN106874757A/en active Pending
Patent Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102929555A (en) * | 2012-10-29 | 2013-02-13 | 东莞宇龙通信科技有限公司 | Terminal and application program uninstalling method |
| CN104036188A (en) * | 2014-05-08 | 2014-09-10 | 北京金山安全软件有限公司 | Android malicious program detection method, device and equipment |
| CN104091120A (en) * | 2014-06-10 | 2014-10-08 | 北京金山安全软件有限公司 | Android system malicious program processing method and device |
Cited By (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN108052330A (en) * | 2017-10-24 | 2018-05-18 | 深圳天珑无线科技有限公司 | The method of terminal and its unloading application program, storage device |
| CN109922044A (en) * | 2019-01-25 | 2019-06-21 | 努比亚技术有限公司 | Label, method for down loading, electronic equipment and the storage medium of application |
| CN109922044B (en) * | 2019-01-25 | 2021-07-13 | 努比亚技术有限公司 | Application marking method, application downloading method, electronic equipment and storage medium |
| WO2024032022A1 (en) * | 2022-08-12 | 2024-02-15 | 荣耀终端有限公司 | Application icon visualization method and device |
| CN116048544A (en) * | 2022-08-24 | 2023-05-02 | 荣耀终端有限公司 | Processing method of popup advertisement, electronic equipment and readable storage medium |
| CN116048544B (en) * | 2022-08-24 | 2023-11-07 | 荣耀终端有限公司 | Processing method of popup advertisement, electronic equipment and readable storage medium |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| KR101978687B1 (en) | Method for inputting a character in touch screen terminal and apparatus thereof | |
| CN106874757A (en) | The discharging method of Malware, the uninstalling system of Malware and terminal | |
| US9483633B2 (en) | Method and terminal for authenticating a stlyus | |
| CN104866226B (en) | A kind of terminal device and its control method | |
| CN104965664A (en) | Application operation method and apparatus | |
| CN106709034A (en) | File protection method and apparatus, and terminal | |
| US9760466B2 (en) | Touch-control monitoring method for touchscreen and terminal | |
| CN102004575A (en) | Information processing apparatus, information processing method, and program | |
| KR20110104620A (en) | Apparatus and method for inputing character in portable terminal | |
| CN107193553A (en) | Key control method and device | |
| CN107450839A (en) | Control method, device, storage medium and mobile terminal based on blank screen gesture | |
| CN105335062A (en) | Information editing operation processing method and apparatus | |
| CN109117619A (en) | Unlocked by fingerprint method and Related product | |
| EP2615811A1 (en) | Improved mobile communication terminal and method | |
| CN104898889A (en) | Character determining method and device | |
| CN109213419A (en) | touch operation processing method, device and storage medium | |
| CN107229489A (en) | A kind of multi-application smart card and its selective method for application and device | |
| CN105930062A (en) | Method and device for viewing file in folder | |
| CN109614511A (en) | A kind of delet method and device, electronic equipment of discarded picture | |
| CN106776847A (en) | Delete the method for media file, device and move on to terminal | |
| CN111459272A (en) | Interaction method, interaction device, storage medium and electronic equipment | |
| CN105843490A (en) | Invalid entry deleting method and device as well as equipment | |
| CN105446835A (en) | Method and device for repairing system file | |
| CN106126099B (en) | Information processing method and electronic equipment | |
| CN106908795A (en) | Detection device, terminal and detection method |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| TA01 | Transfer of patent application right |
Effective date of registration: 20170804 Address after: 100102, 18 floor, building 2, Wangjing street, Beijing, Chaoyang District, 1801 Applicant after: BEIJING ANYUN SHIJI SCIENCE AND TECHNOLOGY CO., LTD. Address before: 100088 Beijing city Xicheng District xinjiekouwai Street 28, block D room 112 (Desheng Park) Applicant before: Beijing Qihu Technology Co., Ltd. |
|
| TA01 | Transfer of patent application right | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20170620 |
|
| RJ01 | Rejection of invention patent application after publication |