CN1258885A - Computer system capable of detecting turnon virus - Google Patents
Computer system capable of detecting turnon virus Download PDFInfo
- Publication number
- CN1258885A CN1258885A CN 98126357 CN98126357A CN1258885A CN 1258885 A CN1258885 A CN 1258885A CN 98126357 CN98126357 CN 98126357 CN 98126357 A CN98126357 A CN 98126357A CN 1258885 A CN1258885 A CN 1258885A
- Authority
- CN
- China
- Prior art keywords
- boot
- bios
- computer system
- disk
- basic input
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Abstract
The computer system includes main memory, processor, magnetic disc and ROM. The magnetic disc may be fixed disc or floppy disc containing a guide sector to store bootstrap program, and the ROM stores BIOS and test data of the bootstrap program. When the computer system is started, the BIOS in the ROM is loaded into the main memory for the processor to execute and the BIOS loads the bootstrap program in the disc to the main memory, utilizes the test data in the ROM to test the bootstrap program to judge whether the bootstrap program has been changed and, if not, begins to execute the bootstrap program.
Description
The present invention relates to a kind of computer system capable of detecting turnon virus, refer in particular to a kind of computer system whether boot has been modified that when start, detects.
General computer virus can roughly be divided into starting-up type virus and document-type virus two big classes according to the approach that infects, wherein starting-up type virus mainly is to hide among the boot of the boot sector (Boot Sector) at startup disk, and starts in startup disk when booting computer.
A computer system that is not infected by starting-up type virus can be written into Basic Input or Output System (BIOS) (BIOS) in the primary memory after power supply is unlocked, to carry out initial inspection voluntarily (power on self test, POST), and the boot that will be stored in the boot sector of startup disk after finishing initial inspection is written in the primary memory, and give boot entirely with control, boot will be written into dos operating system to finish boot program thereafter.
When the disk of computer system had been subjected to the starting-up type virus infection, the first step after starting computer was still Basic Input or Output System (BIOS) is written in the primary memory, to carry out initial inspection work.Yet be to be written into when carrying out in the primary memory when the boot in the disk with the boot program difference of uninfection, Virus also can be written into and carry out simultaneously.
The detection mode of the starting-up type virus that often uses is the anti-virus cards mode at present, this mode is exactly that ROM (read-only memory) (ROM) at the anti-virus cards contains boot program, that is to say that computer in start, is directly to be carried out by the ROM (read-only memory) on the anti-virus cards.Because the startup priority of the anti-virus cards than Virus height, therefore can effectively prevent the infection of starting-up type virus.Even disk has infected starting-up type virus, the anti-virus cards the control that can make these starting-up type virus can't obtain interrupt vector smoothly is set.Yet, thisly preventing that with the anti-virus cards the gas defence mode of starting-up type virus from still having some shortcomings, the software of the anti-virus cards and hardware installation procedure are quite complicated, generally to the unfamiliar user of computer system and be not easy to install voluntarily.In addition, the price of the anti-virus cards is not cheap, and can take the screens of an auxiliary insert card.
Therefore, fundamental purpose of the present invention is to provide a kind of with gas defence data and the Basic Input or Output System (BIOS) common storage computer system with the detecting starting-up type virus in a ROM (read-only memory).Because the gas defence data are to be stored in the ROM (read-only memory), therefore are difficult for being damaged and can solve the above problems effectively.
The invention provides a kind of computer system capable of detecting turnon virus, comprising: a primary memory is used for stored programme and data; One processor is electrically connected on this primary memory, is used for carrying out the program that is stored in this primary memory; One disk is electrically connected on this processor, and it includes a boot sector, is used for storing a boot; One ROM (read-only memory) is electrically connected on this processor, is used for storing a Basic Input or Output System (BIOS) and boot and detects data; Wherein when this computer system is started working, Basic Input or Output System (BIOS) in this ROM (read-only memory) is written in this primary memory so that this processor is carried out this Basic Input or Output System (BIOS), and this Basic Input or Output System (BIOS) is written into the boot in this disk in this primary memory and detect this boot to judge whether this boot has been modified according to the detection of the boot in this ROM (read-only memory) data, if not, then this Basic Input or Output System (BIOS) makes this processor begin to carry out this boot.
Below in conjunction with accompanying drawing the preferred embodiment of the present invention is described in detail.
Fig. 1 is the synoptic diagram of computer system capable of detecting turnon virus of the present invention.
Fig. 2 is the process flow diagram of computer system detecting starting-up type virus shown in Figure 1.
Illustrated symbol description
10 computer systems
12 processors
14 ROM (read-only memory)
16 primary memorys
18 disks
See also Fig. 1.Fig. 1 is the synoptic diagram of computer system 10 of the present invention.Computer system 10 comprises a primary memory 16, is used for stored programme and data; One processor 12 is electrically connected on primary memory 16; Be used for carrying out the program that is stored in the primary memory 16; One disk 18 and a ROM (read-only memory) 14 are electrically connected on processor 12.Disk 18 includes a boot sector (Boot Sector) and is used for storing a boot, and disk 18 can be a Winchester disk drive or a diskette sheet.ROM (read-only memory) 14 is to be used for storing a Basic Input or Output System (BIOS), and boot detects data so that Basic Input or Output System (BIOS) is detected the boot in the disk 18.
It can be a complete boot that boot in the ROM (read-only memory) 14 detects data, also can be the fragment data of a boot or through the particular values calculated result, this detection data be to be used for judging whether the boot in the disk 18 have suffered the illegal change of Virus.
See also Fig. 2.Fig. 2 is flow process Figure 20 of computer system 10 detecting starting-up type virus shown in Figure 1.The flow process of computer system 10 detecting starting-up type virus comprises the following steps: step 21: power-on is to start computer system 10; Step 22: the Basic Input or Output System (BIOS) in the ROM (read-only memory) 14 is written in the primary memory 16, and carries out initial inspection voluntarily (POST); Step 23: Basic Input or Output System (BIOS) is written into the boot in the disk 18 in the primary memory 16; Step 24: detect this boot according to the detection of the boot in the ROM (read-only memory) 14 data and whether changed; If then send a warning signal; If not, then carry out next step; Step 25: Basic Input or Output System (BIOS) makes processor 12 carry out boot and finish boot program.
A ROM (read-only memory) that is used for storing Basic Input or Output System (BIOS) is the primary element of general computer, and it can be EEPROM (Electrically Erasable Read Only Memory).ROM (read-only memory) often still has remaining storage space after having stored Basic Input or Output System (BIOS).Because computer system 10 of the present invention will be used for detecting detection data and the Basic Input or Output System (BIOS) of starting-up type virus and be stored in simultaneously in the ROM (read-only memory) 14, so do not need to re-use other storer.Because the gas defence data are to be stored in the ROM (read-only memory) 14, therefore needn't concern of data can suffer viral intrusion or change.In addition and since detect data be direct burning in ROM (read-only memory) 14, therefore do not have traditional the anti-virus cards to need the problem of installing in addition.
The above only is the preferred embodiments of the present invention, and every equivalence of being made according to the present patent application interest field changes and revises, and all should belong to the covering scope of patent of the present invention.
Claims (4)
1. computer system capable of detecting turnon virus comprises:
One primary memory is used for stored programme and data;
One processor is electrically connected on this primary memory, is used for carrying out the program that is stored in this primary memory;
One disk is electrically connected on this processor, and it includes a boot sector, is used for storing a boot;
One ROM (read-only memory) is electrically connected on this processor, is used for storing a Basic Input or Output System (BIOS) and boot and detects data;
Wherein when this computer system is started working, Basic Input or Output System (BIOS) in this ROM (read-only memory) is written in this primary memory so that this processor is carried out this Basic Input or Output System (BIOS), and this Basic Input or Output System (BIOS) is written into the boot in this disk in this primary memory and detect this boot to judge whether this boot has been modified according to the detection of the boot in this ROM (read-only memory) data, if not, then this Basic Input or Output System (BIOS) makes this processor begin to carry out this boot.
2. computer system as claimed in claim 1, wherein these boot detection data are a correct boot, and this Basic Input or Output System (BIOS) compares the boot in this disk to judge whether the boot in this disk is modified with this correct boot.
3. computer system as claimed in claim 1, wherein this boot detects the segment data that data are a correct boot, and this Basic Input or Output System (BIOS) utilizes the segment data of this correct boot to detect boot in this disk to judge whether the boot in this disk is modified.
4. computer system as claimed in claim 1, wherein this disk is a Winchester disk drive or a diskette sheet.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN 98126357 CN1258885A (en) | 1998-12-28 | 1998-12-28 | Computer system capable of detecting turnon virus |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN 98126357 CN1258885A (en) | 1998-12-28 | 1998-12-28 | Computer system capable of detecting turnon virus |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN1258885A true CN1258885A (en) | 2000-07-05 |
Family
ID=5229616
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN 98126357 Pending CN1258885A (en) | 1998-12-28 | 1998-12-28 | Computer system capable of detecting turnon virus |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN1258885A (en) |
Cited By (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN100356337C (en) * | 2004-10-16 | 2007-12-19 | 鸿富锦精密工业（深圳）有限公司 | Data detection system and method of read only memory in basic input/output system |
| CN100362471C (en) * | 2005-08-16 | 2008-01-16 | 中国船舶重工集团公司第七〇九研究所 | Harddisk main bootsector program virus defense method |
| US7543222B2 (en) | 2004-10-15 | 2009-06-02 | Hong Fu Jin Precision Industry (Shenzhen) Co., Ltd. | System and method for checking BIOS ROM data |
| CN102985929A (en) * | 2010-05-11 | 2013-03-20 | 杉中顺子 | External boot device, external boot program, external boot method and network communication system |
| CN104123121A (en) * | 2013-04-23 | 2014-10-29 | 幸福居福尔摩沙股份有限公司 | Computer system utilizing disk basic input and output system and method thereof |
| CN104008340B (en) * | 2014-06-09 | 2017-02-15 | 北京奇虎科技有限公司 | Virus scanning and killing method and device |
-
1998
- 1998-12-28 CN CN 98126357 patent/CN1258885A/en active Pending
Cited By (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US7543222B2 (en) | 2004-10-15 | 2009-06-02 | Hong Fu Jin Precision Industry (Shenzhen) Co., Ltd. | System and method for checking BIOS ROM data |
| CN100356337C (en) * | 2004-10-16 | 2007-12-19 | 鸿富锦精密工业（深圳）有限公司 | Data detection system and method of read only memory in basic input/output system |
| CN100362471C (en) * | 2005-08-16 | 2008-01-16 | 中国船舶重工集团公司第七〇九研究所 | Harddisk main bootsector program virus defense method |
| CN102985929A (en) * | 2010-05-11 | 2013-03-20 | 杉中顺子 | External boot device, external boot program, external boot method and network communication system |
| CN104123121A (en) * | 2013-04-23 | 2014-10-29 | 幸福居福尔摩沙股份有限公司 | Computer system utilizing disk basic input and output system and method thereof |
| CN104008340B (en) * | 2014-06-09 | 2017-02-15 | 北京奇虎科技有限公司 | Virus scanning and killing method and device |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| EP0468625B1 (en) | Personal computer system with protected storage for interface and system utility programs | |
| US5214695A (en) | Apparatus and method for loading a system reference diskette image from a system partition in a personal computer system | |
| EP0842468B1 (en) | Virus protection in computer systems | |
| US5210875A (en) | Initial bios load for a personal computer system | |
| US20020166059A1 (en) | Methods and apparatus for protecting against viruses on partitionable media | |
| KR930007680B1 (en) | Apparatus and method for loading bios from a diskette in a personal computer system | |
| US7111203B2 (en) | Method for implementing data backup and recovery in computer hard disk | |
| US6925557B2 (en) | Method and system for a clean system booting process | |
| US5537540A (en) | Transparent, secure computer virus detection method and apparatus | |
| EP0417889B1 (en) | Protection method and apparatus for computer system | |
| US7793091B2 (en) | Method, computer-readable media, devices and systems for loading a selected operating system of interest | |
| US20120079594A1 (en) | Malware auto-analysis system and method using kernel callback mechanism | |
| US20090094447A1 (en) | Universal serial bus flash drive for booting computer and method for loading programs to the flash drive | |
| US6907524B1 (en) | Extensible firmware interface virus scan | |
| JPH06348486A (en) | Method and system to protect computer system from computer virus | |
| US8095783B2 (en) | Media boot loader | |
| CN103955649B (en) | A kind of method of clean boot terminal unit | |
| CN107506638B (en) | Kernel control flow abnormity detection method based on hardware mechanism | |
| CN1258885A (en) | Computer system capable of detecting turnon virus | |
| CN100552630C (en) | A kind of bootstrap technique of embedded type operating system mapping file and device | |
| KR101014814B1 (en) | Kernel monitoring module installed computer system and kernel monitoring method thereof | |
| JP3869716B2 (en) | Computer with software license management mechanism | |
| JPH09319574A (en) | Computer virus check system | |
| CN101339512A (en) | Computer device and start-up method and module | |
| KR19980046409A (en) | Booting method by CD-ROM drive and its device |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C06 | Publication | ||
| PB01 | Publication | ||
| C02 | Deemed withdrawal of patent application after publication (patent law 2001) | ||
| WD01 | Invention patent application deemed withdrawn after publication |