WO2015035835A1

WO2015035835A1 - Method and apparatus for detecting application program

Info

Publication number: WO2015035835A1
Application number: PCT/CN2014/083502
Authority: WO
Inventors: 拓鑫
Original assignee: 腾讯科技（深圳）有限公司
Priority date: 2013-09-11
Filing date: 2014-08-01
Publication date: 2015-03-19
Also published as: CN103473163B; CN103473163A

Abstract

A method for detecting an application program. The method comprises: obtaining a file path associated with an application program; monitoring the file path; and when a file under the file path is changed, checking the application program by using an application program characteristic library.

Description

Application detection method and device

The present application claims priority to Chinese Patent Application No. 20131041319, the entire disclosure of which is hereby incorporated by reference. Technical field

The present invention relates to the field of computer technologies, and in particular, to an application detection method and apparatus. Background technique

With the power of terminal devices, multiple applications with different functions can be installed on one terminal device. Applications that manage these different features can be managed with a management-like application installed on the terminal device. Manage applications to download, install, uninstall, and upgrade applications. The management application can accurately detect whether an application has been installed on the user terminal and obtain its version number to determine whether to upgrade the application. Summary of the invention

In order to solve the problem that the application information is not updated in time, the embodiment of the present invention provides an application detection method and apparatus. The technical solution is as follows:

In one aspect, an embodiment of the present invention provides an application detection method, where the method includes:

Get the file path associated with the application;

Monitoring the file path;

When the file under the file path changes, the application is detected by the application signature database. In another aspect, an embodiment of the present invention provides an application detecting apparatus, where the apparatus includes:

An obtaining module, configured to obtain a file path associated with the application;

a monitoring module, configured to monitor the file path;

And a detecting module, configured to detect the application by using an application feature library when a file in the file path changes.

Another embodiment of the present invention provides an application detection method, where the method includes: monitoring a registry;

When the registry information in the registry changes, the application corresponding to the changed registry information is detected.

Another embodiment of the present invention provides an application detecting apparatus, including: a registry monitoring module, configured to monitor a registry;

The detecting module is configured to detect an application corresponding to the changed registry information when the registry information in the registry changes.

In the embodiment of the present invention, the file path associated with the application is obtained, and the file path is monitored. When the file in the file path changes, the application is detected by using the application feature database. The embodiment of the invention can obtain accurate application information and provide accurate service. DRAWINGS

In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings used in the description of the embodiments will be briefly described. It is obvious that the drawings in the following description are only some embodiments of the present invention. Other drawings may also be obtained from those of ordinary skill in the art in view of the drawings.

1 is a flowchart of an application detection method according to an embodiment of the present invention; 2 is a flowchart of another application detection method according to an embodiment of the present invention; FIG. 3 is a schematic structural diagram of an application detection apparatus according to an embodiment of the present invention; FIG. 4 is an execution program detection function according to an embodiment of the present invention. Schematic diagram of the terminal device;

FIG. 5 is a schematic flow chart of another application detection method according to an embodiment of the present disclosure;

FIG. 6 is a schematic structural diagram of another application detecting apparatus according to an embodiment of the present invention;

FIG. 7 is a schematic structural diagram of another terminal device for performing an application detection function according to an embodiment of the present invention. detailed description

The embodiments of the present invention will be further described in detail below with reference to the accompanying drawings.

Management applications can use the application detection signature database to detect applications. The application detection signature database records information about the application, such as the uninstaller information for the application, the installation path of the application, and the version number of the application. During the detection process, the application on the terminal device is detected according to the relevant information of the definition.

If the application is installed, uninstalled, or upgraded by another management application during the time that the application is detected and the next time the application is detected, the current management application cannot know the change in the state of the application. Therefore, the management application does not provide a more accurate service based on the installation status of the application that was last detected. For example, if the application has been upgraded by another management application during this time, the management application will also give an upgrade prompt. For another example, if the application has been uninstalled by other management applications during this time, the management application will also give Tips for installation.

FIG. 1 is a flowchart of an application detection method according to an embodiment of the present invention. Referring to FIG. 1, the method includes:

101. Obtain a file path associated with the installed application.

102. Monitor the file path.

103. When the file under the path of the file is monitored to be changed, the application is detected by using the application feature library.

The files in the file path include at least: an executable file of the installed application corresponding file or a DLL (Dynamic Linkable Library) file, and various entries in the registry.

In the method provided by the embodiment of the present invention, by monitoring the file path associated with the installed application on the terminal device, when the file in the file path is monitored to be changed, without the user actively operating, The application is detected according to the application signature database, and the state information of the application can be accurately obtained to provide more accurate services.

FIG. 2 is a flowchart of another application detection method according to an embodiment of the present invention. The execution subject of the embodiment of the invention is a terminal device. Referring to Figure 2, the method includes:

201. Detect the installed application according to the application signature database, and record the file path used when detecting the installed application.

In this step 201, a file path associated with the installed application is obtained. The application feature library may be a rule that is included in the application management software and is used to detect that the terminal device has an installed application. The application signature library specifies detection paths for various information of different applications, such as a path for detecting registry uninstallation information and an installation path for detecting various files of an application. When the terminal device performs detection according to the application signature database, the application signature database needs to be parsed, and the path of the registry uninstallation information obtained by the parsing, the installation path of the application file, and the like are detected, and at this time, the detection is used. Each path is recorded as the file path associated with the application.

It should be noted that, when parsing the application feature database, the tag content in different tags may correspond to different paths, and the correspondence between the tags and the path may be determined according to a program compiling rule.

5 The following takes a piece of code from an application signature library as an example:

</reguninst>

l o <file> ..\..\B in\xxx. exe</file>

Among them, in the reguninst tag

"052CFB79-9D62-42E3-8A15-DE66C2C97C3E" is used to indicate the path to the application uninstallation information in the registry. The ".. \.ABin\xxx.exe" in the file tag is the installation directory (folder, etc.) of the application. In the embodiment of the present invention, the above code is taken as an example to apply

15 The contents specified in the program feature library are illustrated. The application signature library can behave differently for different compilation rules.

Optionally, the foregoing step 201 is also implemented by: traversing the first entry and the second entry in the registry of the terminal device, and obtaining a file path of the application recorded in the first entry and the second entry. .

20 The first item is

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVers ion\Uninstall. The second entry is

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersio n\Uninstall. among them ,

25 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVers ion\Uninstall The health value is the uninstallation information for all applications installed locally in the registry. The health value of HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersio n\Uninstall is the uninstallation information of the application installed by the current management class application in the registry.

Specifically, in the step 201, the first entry and the second entry in the registry of the terminal device are traversed, and the file path of the application recorded in the first entry and the second entry is obtained: traversing

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVers ion\Uninstall and HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersio n\Uninstall child health values, which are traversed to the child health value associated with the application installed by the terminal device file path.

In addition, the step 201 can also obtain a file path associated with the application installed by the terminal device by parsing the application signature database.

202. Monitor the recorded file path;

Specifically, the step 202 includes: monitoring a file path of the application by using a file filtering driver; or monitoring a file path of the application by calling a function of the corresponding function.

By calling the function of the corresponding function, monitoring the file path of the application includes: monitoring the file path of the installed application of the terminal device by calling the FindFirstChangeNotification function with the function of monitoring the specified file information, by calling the path specified by the monitoring registry The RegistryNotifyCallback function, which monitors the registry path of the application that the terminal device has installed.

Specifically, the present embodiment uses the FindFirstChangeNotification function provided by Windows to monitor the specified file information function, and monitors the file path of the installed application of the terminal device, and the function can monitor the specific file path of the installed application file of the terminal device. Directory, you can also monitor executable files in the application file path, in the application This function notifies the current management application after the specific directory or file has been added or deleted. Using the RegistryNotifyCallback function with the function of monitoring the specified path of the registry, the monitoring terminal device monitors the registry path of the installed application, and the function means that the registry information in the registry path of the installed application of the terminal device can be monitored. This function notifies the current management class application after the value of the registry has changed.

It should be noted that the file and registry information under the file path associated with the application installed by the terminal device can be monitored by other functions or software.

In addition, the file filtering driver can monitor the operation of the installed user by the current user, which is not limited in the embodiment of the present invention.

203. When the file under the path of the file is monitored to be changed, the application is detected by using an application feature library.

Specifically, the file path associated with the installed application is used to store one or more of the path, installation directory, executable file, dynamic link library file of the registry uninstallation information of the installed application. When an application is installed, upgraded, uninstalled, or even modified, the path to the registry uninstall information, the installation directory, executable files, dynamic link library files, and so on are added, removed, or modified. Through the monitoring of step 202, it is possible to monitor the change of the file in the file path related to the application, that is, when the registry information and the file associated with an application are monitored to be changed, triggering according to the application signature database The application is detected for each installed application of the terminal device.

Further, when it is monitored that the file under the file path associated with the application changes, it may be determined according to the changed file which application's state has changed. Therefore, the step 203 can be replaced by the following steps: When the file under the file path related to the application is monitored to change, the application identifier corresponding to the changed file is obtained. The application corresponding to the obtained application identifier according to the application signature database is detected. The embodiment of the present invention enters the corresponding application according to the changed application identifier. Line detection, instead of detecting all the programs installed on the terminal, avoids affecting the normal operation of the terminal, enabling targeted and more efficient detection. For example, when it is monitored that the file under the file path A associated with the application changes, it can be known that the file saved in the file path A belongs to the application whose application identifier is A1. The application identifier A1 is obtained, and the application corresponding to the application identifier A1 is detected. Of course, in the process of detecting according to the application identifier, the installation directory name or the registry information corresponding to the application identifier may be obtained according to the application identifier, so that the application is detected at the terminal according to the content.

It should be noted that the terminal can install multiple management applications, and the application signature database of each management application can be different, and when detecting that the file in the file path changes, the management application is used or the changed file is obtained. The management application to which the application signature library used by the path belongs is detected. For example, the file path Bl is obtained by parsing the application signature database of the management application B, and if the file under B1 is known to be changed, the management application B is used for detection.

When the file in the file path associated with the application is detected to be changed, the application identifier corresponding to the changed file may be obtained as follows:

(1) When it is monitored that the registry information under the file path associated with the application changes, the application identifier corresponding to the changed registry information is obtained.

(2) When it is detected that the uninstallation information under the file path associated with the application changes, the application identifier corresponding to the changed uninstallation information is acquired.

(3) When it is detected that the installation directory under the file path associated with the application changes, the application identifier corresponding to the changed installation directory is obtained.

For the application signature library, each file path and application are - corresponding. Therefore, the information in the file path or file path, such as the uninstallation information in the file path, the installation directory, and the registry information, can be uniquely determined. The program is identified so that subsequent detection processes are performed based on the application identification.

The results monitored in the above step 203 may vary according to the granularity of the monitoring. For example, when it is determined that a file path that is detected to be changed is associated with an application, in step 203, the application signature database is triggered to detect the application, so as to know whether the application has a version update or the like in time. event. If it is determined that the application has an upgraded version installed, is uninstalled, modified, etc., update the application information for that application. It can be updated in the software management application corresponding to the application signature database.

204. When an upgrade version of any application is detected, the version information of the detected application is updated in the application information of the management application.

For management applications, the application information for the management application includes version information for the application. Therefore, when an upgraded version of any application is detected (that is, the detected version number is greater than the existing version number in the management application), the version information of the application is modified to the detected version information.

205. When it is detected that any application is uninstalled, modify the installation state of the detected application to be uninstalled in the application information of the management application.

For management applications, the application information for the management application includes the installation status of the application, such as uninstalled, installed, not installed, or pending download. Therefore, when it is detected that any application is uninstalled, the installation state of the application is modified to be uninstalled to give an accurate status prompt.

206. When detecting that the installation file of any application is modified, adding the modified state of the detected application to the application information of the management application.

For the management application, the application information of the management application includes the path of the installation file of the application, and the like. Therefore, when it is detected that the installation file of any application is modified, the modification status of the current application is added to the application information. You can move the installation file of the application, or you can uninstall and install the installation file from a disk first. Go to another disk. In the above operation, the installation file is modified. In order to prevent the modification from being caused by the user's operation error or malicious modification caused by some security vulnerabilities, the modification needs to be prompted to the end user, so that the user can view the modification status in time. , thereby performing rescue operations such as repair.

Further, when the installation file is modified, a recovery option can also be added to the modified application information so that the user can restore the application to the state before the modification by selecting the recovery option. And version information, etc. are detected. Depending on the function of the different software management applications, the detected items may be different, which is not specifically limited in the embodiment of the present invention.

According to the method provided by the embodiment of the present invention, a change of a file in a file path associated with an application is monitored. When a file in the file path changes, the application may be detected according to an application signature database, which is accurate. Get the app information.

FIG. 3 is a schematic structural diagram of an application detecting apparatus according to an embodiment of the present invention. Referring to FIG. 3, the device includes: an obtaining module 301, a monitoring module 302, and a detecting module 303.

The get module 301 is used to obtain a file path associated with an installed application. The acquisition module 301 is connected to the monitoring module 302.

The monitoring module 302 is configured to monitor the file path.

The monitoring module 302 is connected to the detecting module 303.

The detecting module 303 is configured to detect an application of the terminal according to an application feature library of the management application when a file in the file path of the application is detected to change.

The obtaining module 301 is configured to detect the installed application according to the application feature database, and record a file path used when detecting the installed application.

The obtaining module 301 is configured to traverse the first entry and the second entry in the registry to obtain a file path of the installed application recorded in the first entry and the second entry. The detecting module 303 includes:

An application identifier obtaining unit, configured to acquire an application identifier corresponding to the changed information when the file in the file path associated with the application is changed, and a detecting unit, configured to use the management application installed by the terminal The program detects the application corresponding to the obtained application identifier according to the application signature database of the management application.

When the application identifier obtaining unit changes the registration information in the registry, the application identifier corresponding to the changed registry information is obtained.

When the application identifier obtaining unit monitors that the uninstallation information under the file path of the application changes, the application identifier corresponding to the changed uninstallation information is acquired.

When the application identifier obtaining unit detects that the installation directory under the file path of the application changes, the application identifier corresponding to the changed installation directory is obtained.

The device also includes:

And an update module, configured to: when the upgrade version of any application is detected, update the version information of the detected application in the application information of the management application;

a modifying module, configured to modify an installation state of the detected application to an unloading state in application information of the management application when detecting that any application is uninstalled;

And a adding module, configured to add a modified state of the detected application to the application information of the management application when detecting that the installation file of any application is modified.

The file path associated with the installed application is used to store one or more of a path, an installation directory, an executable file, a dynamic link library file of the registry uninstallation information of the installed application. In the embodiment of the present invention, the obtaining module 301, the monitoring module 302, the detecting module 303, the updating module, the modifying module, and the adding module may be machine readable instructions, and may be a hardware device or a combination of software and hardware.

It should be noted that, when the application detection device provided by the foregoing embodiment is used for the detection of the application, only the division of the above functional modules is illustrated. In actual applications, the function distribution may be completed by different functional modules as needed. , the internal structure of the system is divided into different functional modules to complete all or part of the functions described above. In addition, the application detection device and the application detection method embodiment provided by the foregoing embodiments are in the same concept, and the specific implementation process is described in the method embodiment.

FIG. 4 is a schematic structural diagram of a terminal device for performing a program detection function according to an embodiment of the present invention. Specifically:

The terminal device 400 may include: a communication unit 110, a memory 120 including one or more non-volatile computer-readable storage media, an input unit 130, a display unit 140, a sensor 150, an audio circuit 160, and a WiFi (Wireless Fidelity, wireless) The fidelity module 170, the processor 180 of one or more processing cores, and the power supply 190 and the like. Those skilled in the art will appreciate that the terminal device structure illustrated in Figure 4 does not constitute a limitation to the terminal device and may include more or fewer components than those illustrated, or some components may be combined, or different component arrangements.

The communication unit 110 can be used for transmitting and receiving information or receiving and transmitting signals during a call. The communication unit 110 can be a network communication device such as an RF (Radio Frequency) circuit, a router, a modem, or the like. In particular, when the communication unit 110 is an RF circuit, the downlink information of the base station is received and processed by one or more processors 180. In addition, data related to the uplink is transmitted to the base station. Generally, an RF circuit as a communication unit includes, but is not limited to, an antenna, at least one amplifier, a tuner, one or more oscillators, a user Identity Module (SIM) card, transceiver, coupler, LNA (Low Noise Amplifier), duplexer, etc. In addition, the communication unit 110 can also communicate with the network and other devices through wireless communication. The wireless communication may use any communication standard or protocol, including but not limited to GSM (Global System of Mobile communication), GPRS (General Packet Radio Service), CDMA (Code Division Multiple Access). , Code Division Multiple Access), WCDMA (Wideband Code Division Multiple Access), LTE (Long Term Evolution), e-mail, SMS (Short Messaging Service), and so on.

The memory 120 can be used to store software programs and modules, and the processor 180 executes various functional applications and data processing by running software programs and modules stored in the memory 120. The memory 120 can mainly include: a storage program area and a storage data area. The storage program area can store an operating system, an application required for at least one function (such as a sound playing function, an image playing function, etc.). The storage data area can store data (such as audio data, phone book, etc.) created according to the use of the terminal device 400. Moreover, memory 120 can include high speed random access memory, and can also include non-volatile memory, such as at least one magnetic disk storage device, flash memory device, or other volatile solid state storage device. Accordingly, memory 120 may also include a memory controller to provide access to memory 120 by processor 180 and input unit 130.

The input unit 130 can be configured to receive input numeric or character information and to generate keyboard, mouse, joystick, optical or trackball signal inputs related to user settings and function controls. Specifically, the input unit 130 may include a touch-sensitive surface 131 and other input devices 132. Touch-sensitive surface 131, also referred to as a touch display or trackpad, can collect touch operations on or near the user (eg, the user uses a finger, stylus, etc., on any touch-sensitive surface 131 or The operation in the vicinity of the touch-sensitive surface 131) and the corresponding connection means are driven according to a preset program. Optionally, the touch sensitive surface 131 can include: a touch detection device And the touch controller is two parts. Wherein, the touch detection device detects the touch orientation of the user, and detects a signal brought by the touch operation, and transmits a signal to the touch controller. The touch controller receives touch information from the touch detection device, converts it into contact coordinates, and sends it to the processor

180, and can receive the command sent by the processor 180 and execute it. In addition, the touch-sensitive surface 131 can be realized by various types such as resistive, capacitive, infrared, and surface acoustic waves. In addition to the touch-sensitive surface 131, the input unit 130 can also include other input devices 132. In particular, other input devices 132 may include, but are not limited to, one or more of a physical keyboard, function keys (such as volume control buttons, switch buttons, etc.), trackballs, mice, joysticks, and the like.

The display unit 140 can be used to display information input by the user or information provided to the user and various graphical user interfaces of the terminal device 400. These graphical user interfaces can be composed of graphics, text, icons, video, and any combination thereof. The display unit 140 may include a display panel 141. Alternatively, the display panel 141 may be configured in the form of an LCD (Liquid Crystal Display), an OLED (Organic Light-Emitting Diode), or the like. Further, the touch-sensitive surface 131 may cover the display panel 141, and when the touch-sensitive surface 131 detects a touch operation thereon or nearby, it is transmitted to the processor 180 to determine the type of the touch event, and then the processor 180 according to the touch event The type provides a corresponding visual output on display panel 141. Although in FIG. 4, touch-sensitive surface 131 and display panel 141 are implemented as two separate components to implement input and input functions, in some embodiments, touch-sensitive surface 131 can be integrated with display panel 141 for input. And output function.

Sensor 150 can include: a light sensor, a motion sensor, and other sensors. The light sensor can include: an ambient light sensor and a proximity sensor. Wherein, the ambient light sensor can adjust the brightness of the display panel 141 according to the brightness of the ambient light. The proximity sensor can turn off the display panel 141 and/or the backlight when the terminal device 400 moves to the ear. As a type of motion sensor, a gravity acceleration sensor can detect the magnitude of acceleration in each direction (typically three axes). The magnitude and direction of gravity can be detected at rest, which can be used to identify the gesture of the phone (such as horizontal Vertical screen switching, related games, magnetometer attitude calibration), vibration recognition related functions (such as pedometer, tapping). The terminal device 400 can also be configured with other sensors such as a gyroscope, a barometer, a hygrometer, a thermometer, an infrared sensor, and the like.

The audio circuit 160, the speaker 161, and the microphone 162 provide an audio interface between the user and the terminal device 400. The audio circuit 160 can transmit the converted electrical data of the received audio data to the speaker 161 for conversion to the sound signal output by the speaker 161. On the other hand, the microphone 162 converts the collected sound signal into an electrical signal, which is received by the audio circuit 160 and converted into audio data, and then processed by the processor 180, and then transmitted to another terminal device via the RF circuit 110, or The audio data is output to the memory 120 for further processing. The audio circuit 160 may also include: an earbud jack to provide communication of the peripheral earphones with the terminal device 400.

The wireless communication unit 170 can be a WiFi module. WiFi is a short-range wireless transmission technology. The user can use the wireless communication unit 170 to send and receive emails, browse web pages, and access streaming media. The wireless communication unit 170 provides the user with wireless broadband Internet access functionality. Although FIG. 4 shows the wireless communication unit 170. In a specific application, the terminal device 400 may not include the wireless communication unit 170.

The processor 180 is the control center of the terminal device 400. The processor 180 connects various portions of the entire handset using various interfaces and lines, and executes each of the terminal devices 400 by running or executing software programs and/or modules stored in the memory 120, and recalling data stored in the memory 120. Functions and processing data to monitor the phone as a whole. Processor 180 can include one or more processing cores. The processor 180 can integrate an application processor and a modem processor. The application processor mainly processes an operating system, a user interface, an application program, etc., and the modem processor mainly processes wireless communication. It can be understood that the above-mentioned processor 180 may not include a modem processor.

The power supply 190 can be logically connected to the processor 180 through the power management system to pass The power management system manages functions such as charging, discharging, and power management. Power supply 190 may also include any one or more of a DC or AC power source, a recharging system, a power failure detection circuit, a power converter or inverter, a power status indicator, and the like.

Although not shown, the terminal device 400 may further include a camera, a Bluetooth module, and the like, and details are not described herein. In an embodiment of the invention, the display unit of the terminal device is a touch screen display. The terminal device 400 also includes a memory 120. One or more programs are stored in memory 120 and are configured to be executed by one or more processors 180. The one or more programs include instructions for: obtaining a file path associated with an installed application; monitoring the associated file path; when monitoring a file path of the application When the file changes, the application of the terminal is detected according to the application signature database.

In an embodiment of the invention, the one or more programs include instructions for performing the following operations:

The installed application is detected according to the application signature library, and the file path used to detect the installed application is recorded.

The first entry and the second entry in the registry are traversed, and the file path associated with the application recorded in the first entry and the second entry is obtained.

Obtaining an application identifier corresponding to the changed file when the file in the file path of the application is monitored changes;

The application corresponding to the acquired application identifier is detected according to the application signature database of the management application. In an embodiment of the invention, the one or more programs include instructions for performing the following operations:

When the registry information in the registry is changed, the application identifier corresponding to the changed registry information is obtained;

Obtaining an application identifier corresponding to the changed uninstallation information when the uninstallation information under the file path of the application is monitored changes;

When it is detected that the installation directory under the file path of the application changes, the application identifier corresponding to the changed installation directory is obtained.

When the upgrade version of any application is detected, the version information of the detected application is updated in the application information of the management application;

When it is detected that any of the applications is uninstalled, the installed state of the detected application is modified to an uninstalled state in the application information of the management application;

When it is detected that the installation file of any of the applications is modified, the modified state of the detected application is added to the application information of the management application.

In the embodiment of the present invention, the file path associated with the installed application is used to store a path, an installation directory, an executable file, and a dynamic link library file of the registry uninstallation information of the installed application. One or more.

FIG. 5 is a schematic flow chart of another application detection method according to an embodiment of the present invention. As shown in FIG. 5, the method includes the following steps.

Step 501, monitoring the registry.

Step 502: When the registry information in the registry changes, detecting an application corresponding to the changed registry information.

In the method provided by the embodiment of the present invention, monitoring the registry, when the registry in the registry When the information changes, the application corresponding to the changed registration information is detected. Because when the status of the application is updated, the corresponding registry information in the registry is modified, so when the registry information changes, the application corresponding to the registry information can be detected. Thus, the state of the application can be detected accurately and in a timely manner.

FIG. 6 is a schematic structural diagram of another application detecting apparatus according to an embodiment of the present invention.

The detecting device comprises: a registry monitoring module 601 and a detecting module 602.

The registry monitoring module 601 is configured to monitor the registry;

The detecting module 602 is configured to detect an application corresponding to the changed registry information when the registry information in the registry changes.

In the embodiment of the present invention, the registry monitoring module 601 and the detecting module 602 may be machine readable instructions, and may be hardware devices or a collection of software and hardware.

FIG. 7 is a schematic structural diagram of another terminal device for performing an application detection function according to an embodiment of the present invention. The detection device 700 includes a memory 720 and a processor 780.

The memory 720 is used to store a registry monitoring module 601 and a detection module 602.

The processor 780 is configured to communicate with the memory 720 to perform operations performed by the registry monitoring module 601 and the detecting module 602.

In the embodiment of the present invention, the detecting apparatus 700 may further include: at least one of a communication unit 710, an input unit 730, a display unit 740, a sensor 750, an audio circuit 760, a wireless communication unit 770, and a power source 790.

In an embodiment of the invention, the input unit 730 can include: a touch sensitive surface 731 and other input devices 732.

In the embodiment of the present invention, the display unit 740 may include: a display panel 741. In the embodiment of the present invention, the audio circuit 760 may include: a speaker 761 and a microphone 762. In the embodiment of the present invention, the communication unit 710, the input unit 730, the display unit 740, the sensor 750, the audio circuit 760, the wireless communication unit 770, and the power source 790 can be respectively connected to the communication unit 110, the input unit 130, and the display unit 140, The functions and structures of the sensor 150, the audio circuit 160, the wireless communication unit 170, and the power supply 190 are the same.

In an embodiment of the invention, the touch-sensitive surface 731 and other input devices 732 may be identical in function and structure to the touch-sensitive surface 131 and other input devices 132 described above, respectively.

In the embodiment of the present invention, the display panel 741 can be the same as the function and structure of the display panel 141 described above.

In the embodiment of the present invention, the speaker 761 and the microphone 762 can be identical in function and structure to the speaker 161 and the microphone 162, respectively.

Modules or units in various embodiments of the present application may be implemented mechanically or electronically. For example, a hardware module can include: A permanent circuit or logic device (such as a dedicated processor such as an FPGA or ASIC) for performing a particular operation. The hardware modules may also include programmable logic devices or circuits (e.g., including general purpose processors or other programmable processors) that are temporarily configured by software for performing particular operations. The specific use of mechanical means, or the use of dedicated permanent circuits, or the use of temporarily configured circuits to implement hardware modules can be determined based on cost and time considerations.

A person skilled in the art may understand that all or part of the steps of implementing the above embodiments may be completed by hardware, or may be instructed by a program to execute related hardware, and the program may be stored in a computer readable storage medium. The storage medium mentioned may be a read only memory, a magnetic disk or an optical disk or the like.

The above is only the preferred embodiment of the present invention, and is not intended to limit the present invention. Any modifications, equivalent substitutions, improvements, etc., which are within the spirit and scope of the present invention, should be included in the protection of the present invention. Within the scope.

Claims

claims

1. An application detection method, characterized in that the method includes: obtaining a file path associated with the application;

Monitor the file path;

When the files under the file path change, the application program is detected using the application feature library.

2. The method according to claim 1, wherein obtaining the file path associated with the application program includes:

Traverse the first entry and the second entry in the registry;

Obtain the file path associated with the application program recorded in the first entry and the second entry.

3. The method according to claim 1, characterized in that when the file under the file path changes, using the application feature library to detect the application program includes:

Get the application ID corresponding to the changed file;

The application program corresponding to the application program identification is detected according to the application program feature library.

4. The method according to claim 3, wherein obtaining the application identifier corresponding to the changed file includes:

When the registry information in the registry changes, obtain the application identifier corresponding to the changed registry information; or, When the uninstallation information in the file path of the application changes, obtain the application identifier corresponding to the changed uninstallation information; or,

When the installation directory under the file path of the application changes, the application identifier corresponding to the changed installation directory is obtained.

5. The method according to claim 1, further comprising: when an upgraded version of any application is detected, updating the detected application information in the management application that manages the application. version information of the application program; when it is detected that any application program is uninstalled, modify the installation status of the application program to the uninstalled state in the application information of the management application that manages the application program; when it is detected that any application program is uninstalled; When the installation file of an application program is modified, the modification status of the application program is added to the application program information of the management application program that manages the application program.

6. The method according to any one of claims 1 to 5, characterized in that the file path associated with the application program is used to store the registry uninstallation information of the application program, the installation directory, and the One or more items in executable files and dynamic link library files.

7. An application program detection device, characterized in that the device includes: an acquisition module, used to obtain the file path associated with the application program;

Monitoring module, used to monitor the file path;

A detection module, used to detect the application program using the application feature library when the files under the file path change.

8. The device according to claim 7, wherein the acquisition module is further configured to traverse the first entry and the second entry in the registry, and obtain the first entry and the second entry. The file path associated with the application recorded in the entry.

9. The device according to claim 7, wherein the detection module includes: an application identification acquisition unit, configured to obtain the application identification corresponding to the changed file;

A detection unit, configured to detect the application program corresponding to the application program identification according to the application program feature library.

10. The device according to claim 9, characterized in that the application identification acquisition unit is further used to:

When the application identification obtaining unit obtains that the registry information in the registry changes, obtain the application identification corresponding to the changed registry information;

When the application identification obtaining unit obtains that the uninstallation information in the file path of the application changes, obtains the application identification corresponding to the changed uninstallation information; when the application identification obtaining unit obtains the application When the installation directory under the file path changes, obtain the application identifier corresponding to the changed installation directory.

11. The device according to claim 7, further comprising: an update module, configured to, when an upgraded version of any application is detected, in the application information of the management application that manages the application Update version information of detected applications;

A modification module configured to, when it is detected that any application program is uninstalled, change the installation status of the application program to an uninstalled state in the application program information of the management application program that manages the application program;

Add a module to manage when any application's installation files are detected to be modified. The modified status of the application is added to application information of the management application that manages the application.

12. The device according to any one of claims 7 to 11, wherein the file path associated with the application program is used to store the path, installation directory, and available registry uninstallation information of the application program. One or more of the executable files and dynamic link library files.

13. An application detection method, characterized in that the method includes: monitoring the registry;

When the registry information in the registry changes, detect the application corresponding to the changed registry information.

14. An application detection device, characterized by including:

Registry monitoring module, used to monitor the registry;

A detection module, configured to detect an application corresponding to the changed registry information when the registry information in the registry changes.