Abstract: Techniques of scanning a set of files by a plurality of virus scanning modes are provided. The disclosed techniques includes operating a first scan on a set of files according to a first virus scanning mode to identify a first target file and obtain a first scanning result; operating a second scan on files of the set of files other than the first target file according to a second virus scanning mode to identify a second target file and obtain a second scanning result; wherein the first scan according to the first virus scanning mode uses less system resources than the second scan according to the second virus scanning mode.

Abstract: A method, an apparatus and a system for processing a computer virus. The method comprises: obtaining a correspondence between a file type of a first file infected with a computer virus and process information of a first process used by the computer virus to access the first file; and refusing access to a second file by a second process based at least in part on the correspondence, wherein a file type of the second file matches the file type of the correspondence, and process information of the second process matches the process information of the correspondence.

Abstract: A method, an apparatus and a system for processing a computer virus. The method comprises: obtaining a correspondence between a file type of a first file infected with a computer virus and process information of a first process used by the computer virus to access the first file; and refusing access to a second file by a second process based at least in part on the correspondence, wherein a file type of the second file matches the file type of the correspondence, and process information of the second process matches the process information of the correspondence.

Abstract: A method, an apparatus and a system for processing a computer virus. The method comprises: obtaining the file type of a file which is infected with a computer virus and the process information of a process which is used by the virus when accessing the file; monitoring whether a malicious event occurs in s system, wherein the malicious event is an event which is triggered when the process corresponding to the process information accesses the file of the file type; and refusing the process to access the file of the file type when it is monitored that the malicious event occurs.

Abstract: The present embodiments provide a method and system for rapidly scanning a file, wherein the method includes obtaining a data packet, the data packet comprising secure file characteristic information for determining whether a file in a system is a secure file, and scanning file characteristic information of files in the system one by one, if the currently scanned file characteristic information matches secure file characteristic information in the data packet identifying a file as a secure file, skipping an anti-virus scanning for the current file, and continuing to scan a next file. By using the data packet, when a new user performs a first scanning, a file with identical characteristic information as that in the data packet can be skipped, which can reduce the time for the first scanning.

Abstract: Disclosed is a method for multiple antivirus engines to clear viruses in parallel. The multiple antivirus engines include at least one first antivirus engine and at least one second antivirus engine. The method for multiple antivirus engines to clear viruses in parallel includes: invoking a first antivirus engine, and scanning a first classified file in a file to be checked for and rid of viruses to obtain a first scanning result which includes a target file in the first classified file (101); invoking a second antivirus engine, and scanning other file except the target file in the first classified file in the file to be checked for and rid of viruses to obtain a second scanning result (102); and outputting the first scanning result and the second scanning result (103). Also disclosed are a device for multiple antivirus engines to clear viruses in parallel, a method for processing a computer virus, and a device for processing a computer virus.

Abstract: Disclosed is a method for multiple antivirus engines to clear viruses in parallel. The multiple antivirus engines include at least one first antivirus engine and at least one second antivirus engine. The method for multiple antivirus engines to clear viruses in parallel includes: invoking a first antivirus engine, and scanning a first classified file in a file to be checked for and rid of viruses to obtain a first scanning result which includes a target file in the first classified file (101); invoking a second antivirus engine, and scanning other file except the target file in the first classified file in the file to be checked for and rid of viruses to obtain a second scanning result (102); and outputting the first scanning result and the second scanning result (103). Also disclosed are a device for multiple antivirus engines to clear viruses in parallel, a method for processing a computer virus, and a device for processing a computer virus.

Abstract: This disclosure provides a method and system for rapidly scanning a file, which relates to the field of network technologies. The method of the application comprises: obtaining a data packet, the data packet comprising secure file characteristic information for determining whether a file in a system is a secure file; and scanning file characteristic information of files in the system one by one, if the currently scanned file characteristic information matches secure file characteristic information in the data packet identifying a file as a secure file, skipping an anti-virus scanning for the current file, and continuing to scan a next file.

Abstract: A method, an apparatus and a system for processing a computer virus. The method comprises: obtaining the file type of a file which is infected with a computer virus and the process information of a process which is used by the virus when accessing the file; monitoring whether a malicious event occurs in s system, wherein the malicious event is an event which is triggered when the process corresponding to the process information accesses the file of the file type; and refusing the process to access the file of the file type when it is monitored that the malicious event occurs.