CN108197472A - macro processing method, device, storage medium and processor - Google Patents
macro processing method, device, storage medium and processor Download PDFInfo
- Publication number
- CN108197472A CN108197472A CN201711392043.9A CN201711392043A CN108197472A CN 108197472 A CN108197472 A CN 108197472A CN 201711392043 A CN201711392043 A CN 201711392043A CN 108197472 A CN108197472 A CN 108197472A
- Authority
- CN
- China
- Prior art keywords
- macro
- file
- detected
- improper
- deleted
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
- G06F21/55—Detecting local intrusion or implementing counter-measures
- G06F21/56—Computer malware detection or handling, e.g. anti-virus arrangements
- G06F21/568—Computer malware detection or handling, e.g. anti-virus arrangements eliminating virus, restoring damaged files
Abstract
The present invention provides a kind of macro processing method, device, storage medium and processor, wherein, this method includes：File to be detected is obtained, wherein, file of the file to be detected for the predetermined format of predetermined software generation；It searches macro in the file to be detected；Judge it is described it is macro whether be improper macro；It is described it is macro for it is improper it is macro in the case of, the macro mode is deleted according to the predetermined software macro to delete to described, the file for solving the problems, such as to infect macrovirus in the relevant technologies is less efficient when repairing, and improves efficiency when being repaired to the file that macrovirus infects.
Description
Technical field
The present invention relates to computer realm, in particular to a kind of macro processing method, device, storage medium and processing
Device.
Background technology
Macro is that number order organizes together, and is individually ordered as one and completes a particular task.Microsoft
It is to macrodefinition in Word：" macro is exactly that can organize to a series of word orders used together as an independent order, its energy
Become easier to routine work ".Word is write using macrolanguage Visual Basic using macro as series of instructions.Macro work
Work is enabled to become the tool being more prone to be a kind of, will also tend to be utilized and perform some illegal operations, however, right
It is improper macro in these, it is less efficient when being repaired in the prior art to the file of macrovirus infection.
The problem of less efficient when being repaired for the file infected in the relevant technologies macrovirus, there is presently no have
Effect ground solution.
Invention content
An embodiment of the present invention provides a kind of macro processing method, device, storage medium and processor, at least to solve correlation
The problem of less efficient when being repaired in technology to the file of macrovirus infection.
According to one embodiment of present invention, a kind of macro processing method is provided, including：File to be detected is obtained, wherein,
File of the file to be detected for the predetermined format of predetermined software generation；It searches macro in the file to be detected；Judge institute
Whether state macro is improper macro；It is described it is macro for it is improper it is macro in the case of, according to the predetermined software delete it is described macro
Mode macro deleted to described.
Optionally, search in the file to be detected it is macro including：It is searched in the binary structure of the file to be detected
All is macro.
Optionally, in the case where deleting the macro mode according to the predetermined software to the macro deletion failure, institute
The method of stating further includes：The position at the macro place is found in the binary structure of the file to be detected；According to described macro
Deleted from the file to be detected described macro in the position at place.
Optionally, the file to be detected includes：Word document file.
According to another embodiment of the invention, a kind of storage medium is provided, the storage medium includes the journey of storage
Sequence, wherein, described program performs method described in any one of the above embodiments when running.
According to another embodiment of the invention, a kind of processor is provided, the processor is used to run program,
In, described program performs method described in any one of the above embodiments when running.
According to another embodiment of the invention, a kind of macro processing unit is provided, including：File to be detected is obtained,
In, file of the file to be detected for the predetermined format of predetermined software generation；It searches macro in the file to be detected；Judge
It is described it is macro whether be improper macro；It is described it is macro for it is improper it is macro in the case of, according to the predetermined software delete described in
Macro mode macro is deleted to described.
Optionally, search in the file to be detected it is macro including：It is searched in the binary structure of the file to be detected
All is macro.
Optionally, in the case where deleting the macro mode according to the predetermined software to the macro deletion failure, institute
Device is stated to further include：The position at the macro place is found in the binary structure of the file to be detected；According to described macro
Deleted from the file to be detected described macro in the position at place.
Optionally, the file to be detected includes：Word document file.
By the present invention, file to be detected is obtained, wherein, the file to be detected is the predetermined format of predetermined software generation
File；It searches macro in the file to be detected；Judge it is described it is macro whether be improper macro；Described macro to be improper
In the case of macro, the macro mode is deleted according to the predetermined software and macro is deleted to described, it can be seen that, use is above-mentioned
Scheme search macro in file to be detected and to find it is macro whether be it is improper it is macro judge, judging to find
It is macro for it is improper it is macro in the case of according to predetermined software delete macro mode to it is improper it is macro delete, therefore, carry
High efficiency when being repaired to the file of macrovirus infection, so as to solve the file infected in the relevant technologies macrovirus
The problem of less efficient when being repaired.
Description of the drawings
Attached drawing described herein is used to provide further understanding of the present invention, and forms the part of the application, this hair
Bright illustrative embodiments and their description do not constitute improper limitations of the present invention for explaining the present invention.In the accompanying drawings：
Fig. 1 is a kind of hardware block diagram of the mobile terminal of macro processing method of the embodiment of the present invention；
Fig. 2 is a kind of flow chart of macro processing method according to embodiments of the present invention；
Fig. 3 is a kind of structure diagram one of macro processing unit according to embodiments of the present invention；
Fig. 4 is a kind of structure diagram two of macro processing unit according to embodiments of the present invention；
Fig. 5 is a kind of structure diagram three of macro processing unit according to embodiments of the present invention；
Fig. 6 is a kind of structure diagram four of macro processing unit according to embodiments of the present invention.
Specific embodiment
Come that the present invention will be described in detail below with reference to attached drawing and in conjunction with the embodiments.It should be noted that do not conflicting
In the case of, the feature in embodiment and embodiment in the application can be combined with each other.
It should be noted that term " first " in description and claims of this specification and above-mentioned attached drawing, "
Two " etc. be the object for distinguishing similar, and specific sequence or precedence are described without being used for.
Embodiment 1
The embodiment of the method that the embodiment of the present application 1 is provided can be in mobile terminal, terminal or similar fortune
It calculates and is performed in device.For running on mobile terminals, Fig. 1 is a kind of mobile end of macro processing method of the embodiment of the present invention
The hardware block diagram at end, as shown in Figure 1, mobile terminal 10 can include one or more (one is only shown in figure) processors
102 (processor 102 can include but is not limited to the processing unit of Micro-processor MCV or programmable logic device FPGA etc.) are used
Memory 104 in storage data and the transmitting device 106 for communication function.Those of ordinary skill in the art can manage
Solution, structure shown in FIG. 1 are only to illustrate, and the structure of above-mentioned electronic device are not caused to limit.For example, mobile terminal 10 is also
It may include than shown in Fig. 1 more either less components or with the configuration different from shown in Fig. 1.
Memory 104 can be used for the software program and module of storage application software, such as the Hong Chu in the embodiment of the present invention
Corresponding program instruction/the module of reason method, processor 102 are stored in software program and mould in memory 104 by operation
Block so as to perform various functions application and data processing, that is, realizes above-mentioned method.Memory 104 may include random at a high speed
Memory may also include nonvolatile memory, such as one or more magnetic storage device, flash memory or other are non-volatile
Property solid-state memory.In some instances, memory 104 can further comprise relative to the remotely located storage of processor 102
Device, these remote memories can pass through network connection to mobile terminal 10.The example of above-mentioned network includes but not limited to interconnect
Net, intranet, LAN, mobile radio communication and combinations thereof.
Transmitting device 106 is used to receive via a network or transmission data.Above-mentioned network specific example may include
The wireless network that the communication providers of mobile terminal 10 provide.In an example, transmitting device 106 includes a Network adaptation
Device (Network Interface Controller, NIC), can be connected by base station with other network equipments so as to it is mutual
Networking is communicated.In an example, transmitting device 106 can be radio frequency (Radio Frequency, RF) module, use
In wirelessly being communicated with internet.
A kind of macro processing method is provided in the present embodiment, and Fig. 2 is the macro processing side of one kind according to embodiments of the present invention
The flow chart of method, as shown in Fig. 2, the flow includes the following steps：
Step S202 obtains file to be detected, wherein, text of the file to be detected for the predetermined format of predetermined software generation
Part；
Step S204 is searched macro in file to be detected；
Step S206 judges whether macro be improper macro；
Step S208, it is macro for it is improper it is macro in the case of, macro mode is deleted according to predetermined software and is deleted to macro
It removes.
Optionally, above-mentioned macro processing method can be, but not limited to be applied to in the improper macro scene handled.
Such as：It handles improper macro in improper macro, processing excel form documents in word document file.
Optionally, above-mentioned macro processing method can be, but not limited to be applied to terminal device, such as：Mobile phone, tablet computer, platform
Formula computer, intelligent wearable device, intelligent appliance, smart home device etc..
By above-mentioned steps, file to be detected is obtained, wherein, pre- fixing of the file to be detected for predetermined software generation
The file of formula；It searches macro in the file to be detected；Judge it is described it is macro whether be improper macro；Described macro to be improper
It is macro in the case of, the macro mode is deleted according to the predetermined software and macro is deleted to described, it can be seen that, in use
State scheme search macro in file to be detected and to find it is macro whether be it is improper it is macro judge, judging to search
To it is macro for it is improper it is macro in the case of according to predetermined software delete macro mode to it is improper it is macro delete, therefore,
Efficiency when being repaired to the file that macrovirus infects is improved, so as to solve the text infected in the relevant technologies macrovirus
The problem of less efficient when part is repaired.
It is alternatively possible to it but is not limited to be searched macro according to the binary structure of file to be detected.Such as：Above-mentioned
In step S204, it can be searched in the binary structure of file to be detected all macro.
Optionally, it in the case where deleting macro mode according to predetermined software to macro deletion failure, can be, but not limited to
It macro is handled to improper in the binary structure of file to be detected.Such as：After above-mentioned steps S208, according to pre-
In the case of determining the macro mode of software deletion to macro deletion failure, macro place is found in the binary structure of file to be detected
Position, deleted from file to be detected according to the position at macro place macro.
Optionally, above-mentioned file to be detected can be, but not limited to include：Word document file.Above-mentioned file to be detected may be used also
With but be not limited to excel form documents etc..
It, can be by by file to be detected for for Word document file, in word softwares in an optional embodiment
Increase according to scheduled file structure macro.Searched in Word binary documents structures it is all macro, judge it is macro whether be it is normal or
It is improper, judge it is improper macro, then delete macro mode according to word document file macro to be deleted to improper
It removes, to ensure that file structure will not be damaged.Macro mode is being deleted come to improper macro according to word document file
In the case of carrying out deletion failure, removed in the binary structure of Word document file it is improper macro, it is improper to ensure
Macro handled.
Optionally, judge it is macro whether be improper macro when, sandbox can be utilized by file to be detected and isolation of system
Operation, and the macro behavior of according to running paper to be detected when judges whether it is improper macro.Such as：In above-mentioned steps S206
In, file to be detected can be placed in sandbox, and file to be detected is opened using predetermined software in sandbox, obtained to be checked
The macro behavior in file is surveyed, judges whether macro be improper macro according to behavior.
It is alternatively possible to judge whether macro be improper macro in the following manner：By behavior and preconfigured two kinds
The behavior of type is compared, wherein, perform the first type behavior in two kinds of behavior it is macro be it is normal macro, hold
Second of type behavior in the two kinds of behavior of row it is macro be it is improper macro, the class of behavior is determined according to comparison result
Type judges whether macro be improper macro according to type.
Optionally, it in order to avoid what damage file to be detected can not restore happens, can will be treated before deletion is macro
A backup file of file storage is detected, after deletion is macro, judges that the file to be detected after deleting can be scheduled software just
Often open, in the case where that can not open, the file to be detected after being deleted using the covering of backup file.
In an optional embodiment, improper macro mode is deleted for above-mentioned two kinds, can all be retained
File after portion deletion, the file after two kinds are deleted are compared.Indicate that two kinds are deleted deleting for mode with comparison result
Except effect, and preferentially mode is preferably deleted using deletion effect in the operation of macro processing next time.
In an optional embodiment, what above two deleted that improper macro mode is applicable in macro can pass through
Compare and record, more suitably deletion mode is selected to handle macro according to macro type in the future.
Embodiment 2
A kind of macro processing unit is additionally provided in the present embodiment, which is used to implement above-described embodiment and preferred implementation
Mode had carried out repeating no more for explanation.As used below, term " module " can realize the software of predetermined function
And/or the combination of hardware.Although following embodiment described device is preferably realized with software, hardware or soft
The realization of the combination of part and hardware is also what may and be contemplated.
Fig. 3 is a kind of structure diagram one of macro processing unit according to embodiments of the present invention, as shown in figure 3, the device packet
It includes：
Acquisition module 32, for obtaining file to be detected, wherein, file to be detected is the predetermined format of predetermined software generation
File；
First searching module 34, it is macro in file to be detected for searching coupled to acquisition module 32；
Judgment module 36, coupled to the first searching module 34, for judging whether macro be improper macro；
First processing module 38, coupled to judgment module 36, for it is macro for it is improper it is macro in the case of, according to predetermined
Software is deleted macro mode and is deleted macro.
Optionally, above-mentioned macro processing unit can be, but not limited to be applied to in the improper macro scene handled.
Such as：It handles improper macro in improper macro, processing excel form documents in word document file.
Optionally, above-mentioned macro processing unit can be, but not limited to be applied to terminal device, such as：Mobile phone, tablet computer, platform
Formula computer, intelligent wearable device, intelligent appliance, smart home device etc..
By above device, acquisition module obtains file to be detected, wherein, the file to be detected is generated for predetermined software
Predetermined format file；First searching module is searched macro in the file to be detected；Judgment module judge it is described it is macro whether
It is improper macro；First processing module it is described it is macro for it is improper it is macro in the case of, according to the predetermined software delete institute
Macro mode is stated macro to delete to described, it can be seen that, macro in file to be detected is searched using the above scheme and to searching
To it is macro whether be it is improper it is macro judged, judge to find it is macro for it is improper it is macro in the case of according to predetermined
Software delete macro mode to it is improper it is macro delete, during this improves being repaired to the file that macrovirus infects
Efficiency, so as to solve the problems, such as that the file infected in the relevant technologies macrovirus is repaired when is less efficient.
Fig. 4 is a kind of structure diagram two of macro processing unit according to embodiments of the present invention, as shown in figure 4, optionally, the
One searching module 34 includes：
Searching unit 42, it is all macro for being searched in the binary structure of file to be detected.
It is alternatively possible to it but is not limited to be searched macro according to the binary structure of file to be detected.
Fig. 5 is a kind of structure diagram three of macro processing unit according to embodiments of the present invention, as shown in figure 5, optionally, on
Device is stated to further include：
Second searching module 52, coupled to first processing module 38, for deleting macro mode pair according to predetermined software
In the case of macro deletion failure, the position at macro place is found in the binary structure of file to be detected；
Second processing module 54, coupled to the second searching module 52, for the position according to macro place from file to be detected
Middle deletion is macro.
Optionally, it in the case where deleting macro mode according to predetermined software to macro deletion failure, can be, but not limited to
It macro is handled to improper in the binary structure of file to be detected.
Optionally, above-mentioned file to be detected can be, but not limited to include：Word document file.Above-mentioned file to be detected may be used also
With but be not limited to excel form documents etc..
It, can be by by file to be detected for for Word document file, in word softwares in an optional embodiment
Increase according to scheduled file structure macro.Searched in Word binary documents structures it is all macro, judge it is macro whether be it is normal or
It is improper, judge it is improper macro, then delete macro mode according to word document file macro to be deleted to improper
It removes, to ensure that file structure will not be damaged.Macro mode is being deleted come to improper macro according to word document file
In the case of carrying out deletion failure, removed in the binary structure of Word document file it is improper macro, it is improper to ensure
Macro handled.
Fig. 6 is a kind of structure diagram four of macro processing unit according to embodiments of the present invention, as shown in fig. 6, optionally, on
Judgment module 36 is stated to include：
Placement unit 62, for file to be detected to be placed in sandbox；
Opening unit 64, coupled to placement unit 62, for opening file to be detected using predetermined software in sandbox；
Acquiring unit 66, coupled to opening unit 64, for obtaining the macro behavior in file to be detected；
Judging unit 68, coupled to acquiring unit 66, for judging whether macro be improper macro according to behavior.
Optionally, judge it is macro whether be improper macro when, sandbox can be utilized by file to be detected and isolation of system
Operation, and the macro behavior of according to running paper to be detected when judges whether it is improper macro.
Optionally, above-mentioned judging unit 68 is used for：Behavior and preconfigured two kinds of behavior are compared,
In, perform the first type behavior in two kinds of behavior it is macro be it is normal macro, perform in two kinds of behavior
The macro of second of type behavior is improper macro；The type of behavior is determined according to comparison result；According to type judge it is macro whether
It is improper macro.
Optionally, above device further includes：Memory module, for before deletion is macro, file to be detected being stored a
Backup file；Third processing module, for after deletion is macro, judging that the file to be detected after deleting can be scheduled software just
Often open；Overlay module, in the case where that can not open, using the file to be detected after the covering deletion of backup file.From
And avoid damaging that file to be detected can not restore happens.
In an optional embodiment, improper macro mode is deleted for above-mentioned two kinds, can all be retained
File after portion deletion, the file after two kinds are deleted are compared.Indicate that two kinds are deleted deleting for mode with comparison result
Except effect, and preferentially mode is preferably deleted using deletion effect in the operation of macro processing next time.
In an optional embodiment, what above two deleted that improper macro mode is applicable in macro can pass through
Compare and record, more suitably deletion mode is selected to handle macro according to macro type in the future.
It should be noted that above-mentioned modules can be realized by software or hardware, for the latter, Ke Yitong
In the following manner realization is crossed, but not limited to this：Above-mentioned module is respectively positioned in same processor；Alternatively, above-mentioned module is respectively positioned at more
In a processor.
The above embodiments are merely illustrative of the technical solutions of the present invention rather than is limited, the ordinary skill of this field
Personnel can be modified or replaced equivalently technical scheme of the present invention, without departing from the spirit and scope of the present invention, this
The protection domain of invention should be subject to described in claim.
Embodiment 3
Through the above description of the embodiments, those skilled in the art can be understood that according to above-mentioned implementation
The method of example can add the mode of required general hardware platform to realize by software, naturally it is also possible to by hardware, but it is very much
In the case of the former be more preferably embodiment.Based on such understanding, technical scheme of the present invention is substantially in other words to existing
The part that technology contributes can be embodied in the form of software product, which is stored in a storage
In medium (such as ROM/RAM, magnetic disc, CD), used including some instructions so that a station terminal equipment (can be mobile phone, calculate
Machine, server or network equipment etc.) perform method described in each embodiment of the present invention.
The embodiment of the present invention additionally provides a kind of storage medium.Optionally, in the present embodiment, above-mentioned storage medium can
To be arranged to store the program code for performing following steps：
S1 obtains file to be detected, wherein, file of the file to be detected for the predetermined format of predetermined software generation；
S2 is searched macro in file to be detected；
S3 judges whether macro be improper macro；
S4, it is macro for it is improper it is macro in the case of, macro mode is deleted according to predetermined software and is deleted macro.
Optionally, in the present embodiment, above-mentioned storage medium can include but is not limited to：USB flash disk, read-only memory (ROM,
Read-Only Memory), random access memory (RAM, Random Access Memory), mobile hard disk, magnetic disc or
The various media that can store program code such as CD.
Optionally, in the present embodiment, processor performs above-mentioned implementation according to program code stored in storage medium
The method and step that example is recorded.
Optionally, the specific example in the present embodiment can be referred to described in above-described embodiment and optional embodiment
Example, details are not described herein for the present embodiment.
Obviously, those skilled in the art should be understood that each module of the above-mentioned present invention or each step can be with general
Computing device realize that they can concentrate on single computing device or be distributed in multiple computing devices and be formed
Network on, optionally, they can be realized with the program code that computing device can perform, it is thus possible to which they are stored
It is performed in the storage device by computing device, and in some cases, it can be to be different from shown in sequence herein performs
The step of going out or describing they are either fabricated to each integrated circuit modules respectively or by multiple modules in them or
Step is fabricated to single integrated circuit module to realize.It to be combined in this way, the present invention is not limited to any specific hardware and softwares.
The foregoing is only a preferred embodiment of the present invention, is not intended to restrict the invention, for the skill of this field
For art personnel, the invention may be variously modified and varied.All within the spirits and principles of the present invention, that is made any repaiies
Change, equivalent replacement, improvement etc., should all be included in the protection scope of the present invention.
Claims (10)
1. a kind of macro processing method, which is characterized in that including：
File to be detected is obtained, wherein, file of the file to be detected for the predetermined format of predetermined software generation；
It searches macro in the file to be detected；
Judge it is described it is macro whether be improper macro；
It is described it is macro for it is improper it is macro in the case of, the macro mode is deleted to the macro progress according to the predetermined software
It deletes.
2. according to the method described in claim 1, it is characterized in that, search in the file to be detected it is macro including：
It is searched in the binary structure of the file to be detected all macro.
3. according to the method described in claim 1, it is characterized in that, deleting the macro mode pair according to the predetermined software
In the case of the macro deletion failure, the method further includes：
The position at the macro place is found in the binary structure of the file to be detected；
It is deleted from the file to be detected according to the position at the macro place described macro.
4. according to the method in any one of claims 1 to 3, which is characterized in that the file to be detected includes：Word texts
Files.
5. a kind of macro processing unit, which is characterized in that including：
Acquisition module, for obtaining file to be detected, wherein, the file to be detected is the predetermined format of predetermined software generation
File；
First searching module, it is macro in the file to be detected for searching；
Judgment module, for judge it is described it is macro whether be improper macro；
First processing module, for it is described it is macro for it is improper it is macro in the case of, according to the predetermined software delete it is described macro
Mode macro deleted to described.
6. device according to claim 5, which is characterized in that first searching module includes：
Searching unit, it is all macro for being searched in the binary structure of the file to be detected.
7. device according to claim 5, which is characterized in that the macro mode pair is being deleted according to the predetermined software
In the case of the macro deletion failure, described device further includes：
Second searching module, for finding the position at the macro place in the binary structure of the file to be detected；
Second processing module is deleted for the position according to the macro place from the file to be detected described macro.
8. device according to any one of claims 5 to 7, which is characterized in that the file to be detected includes：Word texts
Files.
9. a kind of storage medium, which is characterized in that the storage medium includes the program of storage, wherein, when described program is run
Perform claim requires the method described in any one of 1 to 4.
10. a kind of processor, which is characterized in that the processor is used to run program, wherein, right of execution when described program is run
Profit requires the method described in any one of 1 to 4.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201711392043.9A CN108197472A (en) | 2017-12-20 | 2017-12-20 | macro processing method, device, storage medium and processor |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201711392043.9A CN108197472A (en) | 2017-12-20 | 2017-12-20 | macro processing method, device, storage medium and processor |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN108197472A true CN108197472A (en) | 2018-06-22 |
Family
ID=62583416
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201711392043.9A Pending CN108197472A (en) | 2017-12-20 | 2017-12-20 | macro processing method, device, storage medium and processor |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN108197472A (en) |
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN111262831A (en) * | 2020-01-07 | 2020-06-09 | 深信服科技股份有限公司 | Phishing mail detection method, device, equipment and computer readable storage medium |
| CN112631852A (en) * | 2020-12-22 | 2021-04-09 | 海光信息技术股份有限公司 | Macro checking method, macro checking device, electronic equipment and computer readable storage medium |
Citations (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US7089591B1 (en) * | 1999-07-30 | 2006-08-08 | Symantec Corporation | Generic detection and elimination of marco viruses |
| CN101350049A (en) * | 2007-07-16 | 2009-01-21 | 珠海金山软件股份有限公司 | Method, apparatus and network device for identifying virus document |
| US20090158434A1 (en) * | 2007-12-18 | 2009-06-18 | Samsung S.D.S. Co., Ltd. | Method of detecting virus infection of file |
| CN102694801A (en) * | 2012-05-21 | 2012-09-26 | 华为技术有限公司 | Method and device for detecting virus and firewall equipment |
| CN103425927A (en) * | 2012-05-16 | 2013-12-04 | 腾讯科技（深圳）有限公司 | Device and method for removing viruses of computer documents |
| CN103500309A (en) * | 2013-09-26 | 2014-01-08 | 北京奇虎科技有限公司 | Method and device for detecting and killing macro virus |
| CN102999726B (en) * | 2012-12-14 | 2015-07-01 | 北京奇虎科技有限公司 | File macro virus immunization method and device |
| CN107025407A (en) * | 2017-03-22 | 2017-08-08 | 国家计算机网络与信息安全管理中心 | The malicious code detecting method and system of a kind of office document files |
-
2017
- 2017-12-20 CN CN201711392043.9A patent/CN108197472A/en active Pending
Patent Citations (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US7089591B1 (en) * | 1999-07-30 | 2006-08-08 | Symantec Corporation | Generic detection and elimination of marco viruses |
| CN101350049A (en) * | 2007-07-16 | 2009-01-21 | 珠海金山软件股份有限公司 | Method, apparatus and network device for identifying virus document |
| US20090158434A1 (en) * | 2007-12-18 | 2009-06-18 | Samsung S.D.S. Co., Ltd. | Method of detecting virus infection of file |
| CN103425927A (en) * | 2012-05-16 | 2013-12-04 | 腾讯科技（深圳）有限公司 | Device and method for removing viruses of computer documents |
| CN102694801A (en) * | 2012-05-21 | 2012-09-26 | 华为技术有限公司 | Method and device for detecting virus and firewall equipment |
| CN102999726B (en) * | 2012-12-14 | 2015-07-01 | 北京奇虎科技有限公司 | File macro virus immunization method and device |
| CN103500309A (en) * | 2013-09-26 | 2014-01-08 | 北京奇虎科技有限公司 | Method and device for detecting and killing macro virus |
| CN107025407A (en) * | 2017-03-22 | 2017-08-08 | 国家计算机网络与信息安全管理中心 | The malicious code detecting method and system of a kind of office document files |
Non-Patent Citations (2)
| Title |
|---|
| 朱传靖: "《知者无畏 一个真实的病毒世界》", 31 January 2002, 金城出版社 * |
| 祝世雄 等: "《网络攻击追踪溯源》", 31 December 2015, 国防工业出版社 * |
Cited By (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN111262831A (en) * | 2020-01-07 | 2020-06-09 | 深信服科技股份有限公司 | Phishing mail detection method, device, equipment and computer readable storage medium |
| CN112631852A (en) * | 2020-12-22 | 2021-04-09 | 海光信息技术股份有限公司 | Macro checking method, macro checking device, electronic equipment and computer readable storage medium |
| CN112631852B (en) * | 2020-12-22 | 2023-04-28 | 海光信息技术股份有限公司 | Macro checking method, macro checking device, electronic equipment and computer readable storage medium |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN104657396A (en) | Data migration method and device | |
| CN107015853A (en) | The implementation method and device of phased mission system | |
| CN104580027A (en) | OpenFlow message forwarding method and equipment | |
| CN102870116B (en) | Method and apparatus for content matching | |
| CN106648445B (en) | Data storage method and device for web crawler | |
| CN104376431A (en) | Engineering project management method and system | |
| CN101853357A (en) | Software protection method | |
| CN102780681A (en) | URL (Uniform Resource Locator) filtering system and URL filtering method | |
| CN107483381A (en) | The monitoring method and device of interlock account | |
| CN108197472A (en) | macro processing method, device, storage medium and processor | |
| CN110201393A (en) | Configuration data storage method and device and electronic equipment | |
| CN113672369A (en) | Method and device for verifying ring of directed acyclic graph, electronic equipment and storage medium | |
| CN107580032A (en) | Data processing method, device and equipment | |
| CN103995745B (en) | A kind of IP hard disks task executing method and IP hard disks | |
| CN106980647A (en) | A kind of Distributed File System Data location mode and device | |
| CN107888419A (en) | A kind of switch network Topology g eneration method and device | |
| CN105528365A (en) | Method and device for managing executable files | |
| CN105207831B (en) | The detection method and device of Action Events | |
| CN106027294A (en) | Firmware loading method and system for terminal network access | |
| CN103336757A (en) | Hardware protocol stack | |
| CN108170805A (en) | A kind of tables of data comparative approach, device, electronic equipment and readable storage medium storing program for executing | |
| CN105634846A (en) | General DPI platform and construction method thereof | |
| CN108038233A (en) | A kind of method, apparatus, electronic equipment and storage medium for gathering article | |
| CN104408188B (en) | Data processing method and device | |
| CN105847516A (en) | Method and device for managing contact person information |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20180622 |
|
| RJ01 | Rejection of invention patent application after publication |